Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/398a5675-15e2-37d8-877d-1a37cab83003.roa
File: 398a5675-15e2-37d8-877d-1a37cab83003.roa (raw, json)
Hash identifier: gwD+oolBXx16bzpCmEXKN6Gj0FWEGmIuO2jq9Cb8QC0=
Subject key identifier: 45:87:94:15:03:29:20:BE:7B:3D:9C:40:D5:E0:A0:DC:F9:B6:1C:0B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828129466798A0FDE7A902800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/398a5675-15e2-37d8-877d-1a37cab83003.roa
Signing time: Tue 10 Dec 2024 04:36:39 +0000
ROA not before: Tue 10 Dec 2024 04:36:39 +0000
ROA not after: Mon 10 Mar 2025 03:36:39 +0000
asID: 13335
IP address blocks: 162.159.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:12:94:66:79:8a:0f:de:7a:90:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:36:39 2024 GMT
Not After : Mar 10 03:36:39 2025 GMT
Subject: CN=e229e702-009d-4c33-ae40-5a8db9b851a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c5:8c:25:ab:a3:e1:2d:64:56:32:7e:6f:c8:
3a:43:e9:86:15:e7:bd:ff:ba:74:3f:f7:93:f4:fa:
f3:00:80:b0:2c:de:1c:9e:30:f1:d9:19:c9:31:3c:
03:4d:02:30:c2:6a:14:41:3b:83:9f:06:eb:15:fc:
3f:d1:6d:13:8f:76:21:31:96:1d:20:e1:1a:03:a0:
5a:c6:f7:ef:16:8f:da:c2:6e:05:e8:db:6d:3d:d7:
43:3e:38:8c:90:76:75:e8:15:71:dc:45:45:67:04:
e3:7d:06:a2:43:af:6f:b6:c2:7c:8c:9c:e9:7b:73:
d7:b5:7e:bd:48:be:b3:e9:ff:7f:ed:83:54:63:57:
ff:70:e4:0e:f4:93:fe:b7:5c:52:c7:97:32:62:e7:
36:72:2c:50:2d:d8:0d:62:66:26:81:5f:ab:52:84:
56:72:8c:c2:df:e3:7b:90:2f:ff:9b:a6:ce:58:f2:
6a:1b:60:ed:82:d4:ca:28:21:61:16:d3:16:29:63:
16:1c:8a:f2:d4:5e:9d:18:6f:91:19:51:2a:56:56:
29:32:ce:f9:eb:46:7a:3c:d9:cf:e0:cf:b3:c2:96:
df:62:86:5a:31:16:d2:8b:72:22:cf:ca:54:b5:4d:
6f:b2:fc:a3:09:5f:82:99:95:45:de:89:a2:57:fc:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:87:94:15:03:29:20:BE:7B:3D:9C:40:D5:E0:A0:DC:F9:B6:1C:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/398a5675-15e2-37d8-877d-1a37cab83003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:da:40:77:59:b8:fa:d4:93:15:b9:c9:33:6d:22:7d:3b:7d:
f7:fb:78:0c:3d:7b:5a:90:d3:6e:79:09:a4:27:b2:13:a7:cb:
cf:3d:59:09:06:e4:9e:5d:f3:29:09:91:57:c5:9f:75:2b:23:
8c:9e:00:96:bd:6b:7f:70:ea:34:30:50:30:ee:f1:40:0f:9b:
bb:65:71:96:86:24:df:34:54:d4:9e:80:f9:f2:66:f2:88:f0:
74:d6:8b:40:ec:c7:b3:a1:76:73:32:19:42:2e:b0:77:f6:89:
34:cb:a3:1c:35:19:c6:aa:38:50:6d:45:a3:1a:c9:1f:3e:2a:
83:05:e1:8a:23:9c:20:52:be:ac:ee:3a:25:85:de:fe:e9:f0:
e0:33:27:dd:42:ca:a9:ef:8c:46:5d:64:ee:c8:48:86:8a:83:
af:32:75:b7:02:60:af:b0:03:7b:17:6a:e0:1e:cb:aa:a4:d0:
29:7d:98:a6:26:48:b3:de:70:bc:5d:57:13:6a:26:32:14:ae:
4e:da:cd:7a:aa:93:bc:6e:ff:86:3c:67:a1:bf:9b:6c:80:4e:
60:19:9b:ab:35:59:6b:64:37:b7:1e:03:2a:eb:81:33:59:47:
15:a0:f1:9f:b2:40:a4:fc:6a:15:8c:9f:5f:e5:50:cb:02:48:
82:8c:c0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:36:14 2025 by rpki-client