Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/429610a9-a093-3d95-a9be-d74c4cf75aec.roa
File: 429610a9-a093-3d95-a9be-d74c4cf75aec.roa (raw, json)
Hash identifier: YO2PDZ/R+cJbX/HyGYbui+aTK5Ehxqqllot/Vd+rzSg=
Subject key identifier: AE:ED:52:B4:30:CF:16:BA:01:2C:12:1A:5B:0B:B3:B9:F4:E0:35:DF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281364A0DF5B038B1E98E5B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/429610a9-a093-3d95-a9be-d74c4cf75aec.roa
Signing time: Tue 10 Dec 2024 04:38:18 +0000
ROA not before: Tue 10 Dec 2024 04:38:18 +0000
ROA not after: Mon 10 Mar 2025 03:38:18 +0000
asID: 13335
IP address blocks: 162.159.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:13:64:a0:df:5b:03:8b:1e:98:e5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:38:18 2024 GMT
Not After : Mar 10 03:38:18 2025 GMT
Subject: CN=2d0a0490-756b-4776-80fa-1feaf86055a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:c0:e0:6d:79:86:41:c5:ef:08:da:57:de:
dd:87:66:c0:32:6b:93:e4:ca:8f:18:5c:86:ae:b3:
99:17:54:cf:e4:3e:dd:34:11:9c:1e:12:40:40:e3:
bc:66:63:7e:98:1a:dd:6e:66:a4:8d:ae:6b:be:db:
20:74:b6:ef:fe:17:55:58:a2:58:5e:09:01:56:47:
82:e6:5b:ad:12:a2:6b:d3:5a:97:78:db:75:d4:80:
2c:37:11:87:cb:95:21:8e:e9:b4:a6:ff:2d:0b:5a:
1c:45:0f:11:10:e1:9f:c6:31:7c:17:0d:60:f5:6a:
b5:04:d0:a6:29:d1:96:c3:40:4a:a2:8d:56:b3:0e:
5c:1e:11:65:7f:27:cf:8a:4e:29:13:f4:9a:1b:40:
4f:4e:ec:89:c2:2f:b4:8b:15:85:bd:c9:9d:b9:38:
c3:6d:4d:ed:78:bc:da:39:17:54:41:39:bd:9a:0e:
a5:b8:7b:d1:b9:81:24:c1:2d:da:2b:3c:48:8a:dc:
39:c5:cc:31:fb:11:9d:be:5f:9e:36:9e:c8:c0:f5:
f8:b4:fc:99:c4:11:39:75:51:dd:87:c0:fe:42:6f:
c2:66:d1:8c:33:55:25:9a:cf:e0:37:c3:8c:9d:f8:
cd:f4:33:b9:f2:26:2f:b8:b4:c0:25:31:81:bf:8e:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:52:B4:30:CF:16:BA:01:2C:12:1A:5B:0B:B3:B9:F4:E0:35:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/429610a9-a093-3d95-a9be-d74c4cf75aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:00:12:eb:c4:c6:d5:b5:98:04:5e:c4:45:76:2d:f7:62:84:
89:16:0b:03:34:52:61:8d:04:1b:31:e9:a6:82:3c:4c:59:e8:
0f:f6:dc:62:9c:12:9e:7e:b1:ae:71:6a:de:2e:ce:20:b9:12:
16:63:38:c2:97:63:e8:09:f4:1d:d0:ad:da:d7:bb:61:55:ca:
37:ea:22:83:b8:2d:1a:48:c7:70:99:d3:c6:f9:00:69:22:63:
64:fc:2e:ff:04:0e:b1:d7:68:96:ef:81:14:65:4a:df:ae:95:
08:50:8a:74:bb:ff:9d:c8:59:42:4d:1e:cc:b3:fa:ef:f3:6c:
2d:14:06:f6:e7:9c:d0:df:4f:a1:e1:f7:d1:7f:46:4e:ca:0b:
fb:03:c8:d0:08:fa:34:18:8c:91:44:55:d7:97:f7:c2:ac:ed:
33:85:ff:95:03:80:cd:1d:22:21:73:62:a3:57:d9:a5:7f:9f:
a0:d4:8c:f3:07:e0:22:81:4e:3f:25:e5:d3:39:83:46:ce:e6:
29:d1:60:46:a3:f4:70:a0:fe:39:ed:da:c5:76:5b:7d:9c:e9:
eb:d4:dc:12:dc:f9:82:1b:f3:d2:8d:b0:2c:93:56:5b:1e:fa:
5d:2a:4c:dd:90:86:92:61:25:dc:84:d8:d3:2f:54:8b:ce:36:
6a:22:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:10 2025 by rpki-client