Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d02cd9c-84f1-3891-85b0-51c1e92b84ee.roa
File: 3d02cd9c-84f1-3891-85b0-51c1e92b84ee.roa (raw, json)
Hash identifier: i5waTkBe/Du0Z1A1wRdZfoIntQ9k0IztG3Rb6hGzRno=
Subject key identifier: D3:9B:95:9D:22:80:69:D0:AB:20:AD:AB:25:68:C4:E8:63:4C:1C:75
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828115B0F33F485F74931B2A1
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d02cd9c-84f1-3891-85b0-51c1e92b84ee.roa
Signing time: Tue 10 Dec 2024 04:34:11 +0000
ROA not before: Tue 10 Dec 2024 04:34:11 +0000
ROA not after: Mon 10 Mar 2025 03:34:11 +0000
asID: 13335
IP address blocks: 162.159.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:11:5b:0f:33:f4:85:f7:49:31:b2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:34:11 2024 GMT
Not After : Mar 10 03:34:11 2025 GMT
Subject: CN=ff4e4cee-7b0c-42de-821f-d2a1ad8deef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:cc:e9:4d:26:3c:12:44:ad:f8:a3:91:1c:
01:92:e2:fa:18:c5:dd:d7:9f:5a:fa:66:99:f4:43:
82:79:e3:ef:98:c8:69:7c:72:cd:91:c5:c5:1f:2b:
63:46:65:f7:7a:ae:67:57:88:a4:da:c1:ab:cc:34:
ed:af:19:77:9b:86:06:5e:4c:3e:48:49:d0:d4:33:
a0:84:07:f8:82:d3:98:49:2d:6d:a4:6b:9c:6b:ca:
78:de:1b:6b:80:40:a7:6e:5e:3f:9f:7d:ae:0b:fb:
d1:30:a3:cd:50:2b:f2:a8:12:44:ee:78:36:91:01:
76:ad:e6:0d:60:45:2d:d3:1d:83:c4:ff:14:27:5a:
c7:88:c7:d7:21:42:bf:8b:b4:7a:49:ea:f8:94:1d:
24:24:b2:44:26:a7:a5:02:0c:b5:28:e5:c5:4e:d8:
20:60:f7:c6:b4:90:5e:23:a5:34:43:9c:60:0a:8c:
c8:ad:e1:31:bb:5e:06:85:b2:8f:49:9c:3e:a0:57:
e4:df:c2:a7:ca:15:36:bd:79:84:f6:0d:2a:39:3a:
93:29:94:b5:72:0b:b5:c4:45:2b:62:42:2e:69:8f:
78:a8:a8:04:04:49:e8:2b:29:26:ac:32:7b:8e:2f:
f6:30:34:a6:14:da:d1:c1:d4:59:92:28:f3:66:52:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9B:95:9D:22:80:69:D0:AB:20:AD:AB:25:68:C4:E8:63:4C:1C:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d02cd9c-84f1-3891-85b0-51c1e92b84ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:4f:dd:80:78:eb:62:2b:4a:90:1e:e7:cf:20:14:cf:20:f7:
e8:27:62:b9:9a:c7:a2:ee:6c:3c:df:4b:26:7f:46:7e:44:cc:
c2:ed:33:0f:bc:1a:ca:34:9c:47:fd:b7:fe:cf:46:31:a5:e5:
d8:b8:30:6e:8c:34:b5:33:56:78:4a:49:61:75:31:5d:c0:d6:
fe:13:57:a0:fd:6b:66:c3:a3:16:43:66:c1:55:6a:3c:0c:4f:
23:60:01:07:3f:a1:df:42:8e:53:c0:fe:d4:b7:31:7e:53:56:
b2:39:de:ed:85:04:3b:9e:3d:ff:be:dc:46:96:7a:4e:1d:3b:
5f:bf:94:d8:35:07:86:34:32:3d:c4:79:44:01:cf:e5:2b:c0:
30:95:51:bb:82:81:31:36:dd:7c:e8:ea:64:65:bf:f3:9d:a0:
f4:ea:9d:d0:28:20:0d:7b:d0:b9:91:a3:12:b4:70:89:fb:da:
b5:73:b0:44:13:34:b8:e4:69:b5:17:53:5d:b4:65:ad:5d:bb:
7e:26:c9:6e:ed:fd:cf:d1:75:d5:f6:b2:f6:e5:82:e9:7d:bf:
ee:3b:c5:a9:91:68:dd:9e:29:ff:56:03:b3:00:5c:8d:ac:3a:
97:04:d4:f9:33:51:ed:04:20:bc:cf:c7:43:13:23:dc:bc:d9:
01:01:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:20:29 2025 by rpki-client