Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40b080e8-671e-3436-bd77-0141d7461aaa.roa
File: 40b080e8-671e-3436-bd77-0141d7461aaa.roa (raw, json)
Hash identifier: yeFLaNcABOaFPPjHDQ468WbEoCGzk+WHd3og9RRyZe8=
Subject key identifier: C4:DE:83:AB:4B:25:FA:0E:A8:8E:5B:B7:37:F3:EB:6A:A2:67:F3:0F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B766E763C895D5C36ADA40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40b080e8-671e-3436-bd77-0141d7461aaa.roa
Signing time: Tue 10 Dec 2024 01:32:57 +0000
ROA not before: Tue 10 Dec 2024 01:32:57 +0000
ROA not after: Mon 10 Mar 2025 00:32:57 +0000
asID: 13335
IP address blocks: 162.158.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b7:66:e7:63:c8:95:d5:c3:6a:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:32:57 2024 GMT
Not After : Mar 10 00:32:57 2025 GMT
Subject: CN=d7fbe91d-ea42-4f76-8a02-acb070273b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d6:d9:73:0a:1c:37:85:84:f1:9d:a6:61:cc:
14:9e:31:7d:84:19:c6:db:0d:10:99:4a:7f:fd:03:
da:1b:58:a1:70:0c:ec:d3:26:b5:68:92:b1:48:79:
52:95:32:f5:b1:a5:72:f4:d7:a8:c2:9c:4a:8d:c7:
9b:5c:1c:c2:ef:c7:c8:3c:60:eb:79:32:42:41:2a:
33:9a:dc:25:29:cf:fa:bf:1b:b5:82:66:bd:00:ba:
f8:c3:7b:a1:0c:d7:d1:6c:ea:60:66:2c:32:50:6a:
cd:4c:6b:92:d1:16:7d:2c:18:94:f8:89:d8:3e:68:
37:59:30:50:f5:40:12:35:0c:ed:ef:ae:c8:da:77:
da:dd:2c:5c:e3:e6:9e:22:6a:8d:ae:53:8a:13:08:
85:7c:73:3e:e1:75:09:ea:ed:e2:0e:60:fb:08:d5:
2e:e1:ce:18:1b:23:1e:87:40:e6:d1:ee:bc:43:ae:
d0:35:ef:90:b1:2f:fe:cd:42:fa:89:0b:32:c9:7d:
75:d5:ba:2f:c9:97:a4:38:50:8c:f9:3c:15:6d:74:
a4:9b:f9:28:4b:21:24:99:6c:5e:36:33:a0:c9:8e:
8c:64:e6:01:69:ac:19:93:8c:2d:02:c0:c3:a9:22:
ed:44:a5:77:91:3b:42:48:31:85:a0:7c:b5:7b:f4:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DE:83:AB:4B:25:FA:0E:A8:8E:5B:B7:37:F3:EB:6A:A2:67:F3:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40b080e8-671e-3436-bd77-0141d7461aaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:7a:68:e4:8b:55:ac:6a:fb:72:89:9a:d4:36:b9:e7:c8:6d:
f4:96:d7:c9:4b:1e:c6:e0:46:ed:f3:60:ed:19:b2:a4:d8:34:
db:2b:a7:d7:22:e1:ad:82:c2:70:5c:63:c5:f3:0b:44:64:36:
90:7d:82:17:2b:85:48:07:8d:e0:bd:ba:57:55:f9:18:4b:db:
bb:62:35:e4:2b:f4:d7:c3:9d:f9:e7:bf:b6:29:da:0a:cf:f8:
b4:b9:15:03:56:ce:a8:94:d0:81:ea:b8:fb:3a:e6:31:f9:70:
bd:3b:fb:65:64:18:2a:f7:9b:37:00:3c:6e:2d:87:6c:a0:4d:
33:76:2e:ee:58:f5:d1:71:ff:e5:5d:4f:5e:07:03:4f:03:fc:
c6:ea:a8:ce:11:a5:40:9e:72:ad:05:f1:73:99:17:11:a9:68:
8b:b1:2a:f1:f5:d5:13:df:e3:87:0b:b9:42:44:df:65:d1:81:
84:29:f6:71:33:7d:e1:ec:ad:1a:da:96:b9:5f:8f:71:12:c2:
13:85:50:4b:d9:9d:c1:a7:a3:54:dd:7b:ed:a6:88:3c:73:f6:
2d:f2:4c:bd:79:ff:d6:3e:7d:15:96:2c:20:82:d5:fa:9c:48:
5c:a9:ff:2c:96:93:70:37:2f:9a:b3:50:3d:7a:f1:29:14:10:
d9:e5:a1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:44 2025 by rpki-client