Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40f17c3b-2d8c-31c4-8216-c773fb2f331a.roa
File: 40f17c3b-2d8c-31c4-8216-c773fb2f331a.roa (raw, json)
Hash identifier: DpPqbySaYpTfvBe6OnMDM6AO7pB6FgwGUp+mK+7FJY8=
Subject key identifier: D0:FB:F3:3F:CD:57:A1:A5:F7:EF:22:DF:66:0F:A5:EB:08:9D:17:44
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848280FF78FD5140DFCF202E400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40f17c3b-2d8c-31c4-8216-c773fb2f331a.roa
Signing time: Tue 10 Dec 2024 04:31:24 +0000
ROA not before: Tue 10 Dec 2024 04:31:24 +0000
ROA not after: Mon 10 Mar 2025 03:31:24 +0000
asID: 13335
IP address blocks: 162.159.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:0f:f7:8f:d5:14:0d:fc:f2:02:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:31:24 2024 GMT
Not After : Mar 10 03:31:24 2025 GMT
Subject: CN=f16d70fb-5cc9-44bf-b64d-b5f6d7668620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:a7:9f:6a:24:9a:85:9d:1e:49:39:a5:49:
74:16:c6:37:08:82:dc:54:4c:e2:f1:6b:d2:dd:18:
40:74:33:d5:08:02:8e:3d:b6:b2:11:74:44:b0:0c:
37:5d:af:96:f3:7a:aa:57:b4:b5:73:92:6c:26:ac:
30:db:3a:63:ca:7c:f8:30:d5:86:c0:97:5e:37:ca:
48:8d:f5:1c:3d:54:c9:eb:7b:b7:51:a3:e9:ef:b9:
67:92:9d:8a:fa:a2:16:f0:01:41:e0:fa:4c:cf:9f:
da:f0:2a:dd:b5:3f:e3:3d:36:6f:0a:4b:a2:66:b5:
23:01:98:7c:78:8b:55:3a:4b:90:50:56:45:4e:8e:
27:fe:51:bb:20:05:d3:cc:13:8a:73:6a:79:27:01:
db:5a:5c:cc:e9:b4:00:c0:2a:d4:9a:24:47:3f:0e:
16:5b:3d:93:eb:be:15:2f:df:bb:83:aa:ed:fd:be:
b2:2a:81:ea:3d:29:ef:0c:e0:71:e4:4b:a5:8e:76:
f7:84:2c:3c:b8:d2:12:0e:6d:d4:b9:ce:5b:93:00:
6b:56:04:cc:9a:0a:cd:b9:67:ee:25:a6:4a:60:22:
3a:53:0d:bb:ef:ad:e5:44:9e:a3:13:ea:96:62:81:
de:ff:57:61:3d:d0:d5:3d:82:ba:94:35:06:95:5b:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FB:F3:3F:CD:57:A1:A5:F7:EF:22:DF:66:0F:A5:EB:08:9D:17:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40f17c3b-2d8c-31c4-8216-c773fb2f331a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:fc:91:44:7c:45:a3:7c:d8:c4:63:37:79:3c:86:0c:2b:a3:
d9:f8:39:b4:dd:83:dc:b1:7c:5e:85:24:a7:96:06:86:3a:00:
d4:7f:c0:4d:52:06:f9:90:b4:ae:4d:4d:e3:b6:14:92:13:fd:
17:b8:d5:b2:51:0f:cd:44:e7:bf:8d:43:da:c0:a8:79:ed:af:
eb:80:64:c4:48:e3:09:af:74:7b:6c:44:d8:f4:ff:82:ae:49:
de:93:c4:15:52:0b:65:81:04:6b:18:7a:9e:b8:4b:a9:e9:6c:
ed:1a:ed:3e:86:69:20:3f:89:91:eb:dc:a2:f0:d8:05:7b:df:
da:7b:f5:c0:1e:66:a6:d2:a9:d7:7f:a6:34:c8:95:95:21:7e:
b4:49:07:09:bf:51:a9:2f:8f:3d:f5:c9:78:91:3b:b0:fa:83:
0a:89:bc:d1:89:f6:bd:fc:95:d2:68:30:12:f8:92:c3:8b:86:
c0:65:d4:2b:cf:90:da:3b:2c:59:0d:9c:27:93:79:77:7c:d5:
e6:01:0c:9c:19:f5:98:9e:e2:c3:d5:70:1e:bd:f8:e6:15:5c:
c7:ca:8e:85:03:83:f3:23:57:b3:b0:e8:95:d8:35:7b:29:3a:
9a:ee:cf:0b:b4:93:fe:61:0a:2c:92:cd:65:8a:de:37:44:f0:
a0:d9:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:08 2025 by rpki-client