Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/366d3ed8-8ca5-35d7-a8e2-6f098a23c486.roa
File: 366d3ed8-8ca5-35d7-a8e2-6f098a23c486.roa (raw, json)
Hash identifier: yVxzO7Ky92Dc+4nxbZ1u++HClFOLMxq57yGrpE4Qavc=
Subject key identifier: 5C:60:2E:D1:CC:36:9B:04:A3:12:5C:2F:75:8F:FB:98:E1:68:8E:17
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A228066115D1C70ADE4B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/366d3ed8-8ca5-35d7-a8e2-6f098a23c486.roa
Signing time: Tue 10 Dec 2024 00:50:08 +0000
ROA not before: Tue 10 Dec 2024 00:50:08 +0000
ROA not after: Sun 09 Mar 2025 23:50:08 +0000
asID: 13335
IP address blocks: 162.158.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a2:28:06:61:15:d1:c7:0a:de:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:50:08 2024 GMT
Not After : Mar 9 23:50:08 2025 GMT
Subject: CN=d14960ef-f8b6-473d-ac06-d917a1f52118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:41:5c:41:62:3a:60:2a:ba:e1:e3:3a:89:
69:6c:df:d7:34:9e:0c:ed:54:c9:3a:fd:23:ff:1f:
35:1f:11:1f:96:fe:38:9f:d3:ca:3d:98:a8:bc:f8:
4a:ee:69:f2:7c:26:81:2d:0d:ab:c1:77:38:2c:b7:
5a:31:ce:7d:c9:c6:3b:c4:8e:cf:bc:54:6f:59:6e:
8f:57:8b:8a:04:f3:47:0c:9b:79:80:20:cb:06:3b:
31:98:41:0b:e9:ba:93:12:00:f0:ac:92:51:44:f9:
95:23:34:47:ad:08:78:6c:d6:c3:f0:90:2e:1d:79:
8d:e1:fa:56:eb:37:12:3d:c9:83:47:83:2f:78:55:
67:47:e5:10:8b:05:8b:82:c7:60:8a:b9:8e:87:b9:
ba:64:dc:62:49:00:b2:9f:65:87:02:bd:b6:55:4b:
93:b2:b4:f9:00:24:2f:03:86:94:8a:46:2e:54:aa:
0a:f2:bb:9d:14:f8:57:62:46:b1:b0:b0:9f:e7:68:
02:57:66:72:40:23:a0:a5:2b:d5:79:0a:70:e6:8b:
8c:f3:1c:cf:c8:e1:3c:53:96:34:d3:f0:2a:26:86:
1e:06:3f:73:21:bb:1a:a6:78:4c:3b:94:1b:cf:ac:
3b:0e:e4:52:98:fb:03:eb:7d:c9:fa:79:88:17:9b:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:60:2E:D1:CC:36:9B:04:A3:12:5C:2F:75:8F:FB:98:E1:68:8E:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/366d3ed8-8ca5-35d7-a8e2-6f098a23c486.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:1d:7a:21:fa:5a:aa:c8:9a:83:1b:06:5c:e7:e3:dc:41:f5:
15:2a:ff:1d:ef:57:b6:02:f3:66:41:6c:21:b5:9a:67:24:fa:
20:f3:f5:c9:41:ce:cb:f3:81:69:be:89:38:19:e5:ab:fe:aa:
ed:94:1e:bf:90:f5:8d:fd:8a:6b:1a:5f:61:a0:87:11:d1:3c:
2e:ba:36:78:de:c9:5d:2a:ae:52:4a:c1:c5:04:a2:c5:72:b9:
2e:a9:9f:f7:b8:2d:77:bf:5c:27:dc:7a:3a:4f:83:b5:d8:71:
1b:62:60:99:77:71:e2:30:c0:d0:bc:ce:f0:b6:37:73:e5:86:
0f:8c:68:9e:9d:23:fe:0d:ac:40:83:d5:c5:89:1f:16:b4:69:
ce:7f:1f:46:c7:a0:b4:84:72:10:fb:b0:c5:40:bb:d5:84:00:
c7:47:df:58:9a:c8:00:d8:31:f3:e3:95:40:62:23:4b:25:06:
67:71:3e:7a:19:b4:26:6b:ab:53:b3:36:fd:6e:8c:e9:a0:98:
e8:66:03:e9:30:3e:c9:ad:a3:13:41:e9:24:83:2b:e5:09:8a:
d1:7d:50:87:dc:4c:0b:64:9a:ce:8b:96:56:6d:7f:32:9f:c3:
cc:b5:71:a7:e9:ea:19:0b:c9:bc:cd:fb:33:62:58:e9:eb:cb:
ab:6c:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:04 2025 by rpki-client