Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bada390-cb2f-331a-956b-3827978dd770.roa
File: 4bada390-cb2f-331a-956b-3827978dd770.roa (raw, json)
Hash identifier: 9cE/h1G+w/1HofaH+YTKJLcNcdK5WLrkfG2MyQAZBmc=
Subject key identifier: C4:45:62:57:2B:AB:3B:36:1A:B0:23:9E:28:9A:16:5C:C4:2D:09:8A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848280F0DA1678F9129F566D900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bada390-cb2f-331a-956b-3827978dd770.roa
Signing time: Tue 10 Dec 2024 04:29:33 +0000
ROA not before: Tue 10 Dec 2024 04:29:33 +0000
ROA not after: Mon 10 Mar 2025 03:29:33 +0000
asID: 13335
IP address blocks: 162.158.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:0f:0d:a1:67:8f:91:29:f5:66:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:29:33 2024 GMT
Not After : Mar 10 03:29:33 2025 GMT
Subject: CN=221a50e9-c08d-4bc8-9641-047a5f61c862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:16:a1:f5:f1:ac:15:0f:b6:70:2c:01:62:
18:03:08:04:0b:b4:4e:15:5f:e0:d5:76:48:bb:7f:
b5:68:54:ac:6b:fa:15:82:d8:ce:62:b9:6d:b3:1f:
54:be:05:71:be:4e:56:23:60:b1:fe:b1:29:44:07:
68:f0:ca:4e:93:23:d5:04:9d:9d:2a:37:f1:19:a1:
56:11:0c:fc:d3:27:b1:a7:54:52:a2:cd:18:35:45:
85:18:a3:5e:bb:b9:e6:0b:98:aa:5f:22:b7:20:6a:
6e:ad:a7:70:b1:62:4a:b4:f4:92:d5:be:8d:55:57:
64:76:72:d9:ce:cc:53:5f:51:54:a8:94:f5:6b:e5:
c6:7c:f7:b5:6b:c4:a7:12:4e:7d:af:43:0f:5c:77:
3d:4f:3a:ab:97:d5:f6:4e:db:95:dd:6c:56:5c:f7:
d0:39:4b:e7:a0:5c:78:6f:4d:f2:61:54:41:a6:d2:
25:30:96:c4:57:38:13:12:80:a8:e5:cd:28:d7:6c:
6c:33:99:2a:e7:23:ff:11:cb:29:2a:25:0e:cc:c9:
70:f1:5e:63:91:56:91:dd:39:39:e5:a5:43:e2:50:
b3:dc:d8:d8:85:22:92:a1:87:49:a8:da:85:ca:6a:
7d:06:7d:f2:76:22:10:8f:3c:bb:08:cd:b6:6c:2c:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:62:57:2B:AB:3B:36:1A:B0:23:9E:28:9A:16:5C:C4:2D:09:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bada390-cb2f-331a-956b-3827978dd770.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:a5:45:72:6e:31:30:b5:4e:b2:76:a6:b3:58:12:7e:94:61:
7f:f4:13:71:73:f1:69:b0:27:57:db:b4:00:97:fd:22:95:27:
d5:6d:35:b3:2d:ef:cf:5f:33:f3:42:d1:1b:1b:6b:4b:60:72:
83:f3:74:f2:83:12:ee:9a:62:6c:ff:48:8b:07:9f:7a:17:f8:
5c:3f:de:58:4c:01:2c:03:3a:f6:d4:2c:1f:f3:f5:1e:ba:d6:
81:a6:51:45:f0:56:d2:ab:48:69:ea:dd:62:ee:c7:c9:fd:31:
e9:50:41:4a:62:d6:44:d7:94:f6:12:8a:ee:73:c8:32:49:07:
c6:4b:5e:18:8d:49:12:e7:41:2c:4e:ec:89:67:2e:64:b7:8d:
ed:ea:f6:50:5f:30:d6:22:8a:f2:6e:03:2a:f3:9a:23:9c:30:
ac:2b:b1:d5:d1:35:45:cc:9c:b1:6f:68:7c:73:6f:84:ec:97:
59:7f:c1:3a:37:d6:66:fe:4e:7d:8d:10:52:6e:36:82:80:c9:
99:0f:e0:47:bd:af:dd:04:f2:a9:36:e1:5e:30:04:32:a0:95:
d4:78:e5:30:a8:97:fb:8a:65:a5:d2:91:d0:d3:e4:5d:e0:de:
ea:59:a4:59:6f:ff:f2:ab:e0:93:8c:e3:c1:e8:71:6b:21:1a:
09:d4:bb:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoDw2hZ4+RKfVm2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA0MjkzM1oXDTI1MDMxMDAzMjkzM1owLzEtMCsGA1UEAxMk
MjIxYTUwZTktYzA4ZC00YmM4LTk2NDEtMDQ3YTVmNjFjODYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgcWofXxrBUPtnAsAWIYAwgEC7ROFV/g1XZI
u3+1aFSsa/oVgtjOYrltsx9UvgVxvk5WI2Cx/rEpRAdo8MpOkyPVBJ2dKjfxGaFW
EQz80yexp1RSos0YNUWFGKNeu7nmC5iqXyK3IGpuradwsWJKtPSS1b6NVVdkdnLZ
zsxTX1FUqJT1a+XGfPe1a8SnEk59r0MPXHc9Tzqrl9X2TtuV3WxWXPfQOUvnoFx4
b03yYVRBptIlMJbEVzgTEoCo5c0o12xsM5kq5yP/EcspKiUOzMlw8V5jkVaR3Tk5
5aVD4lCz3NjYhSKSoYdJqNqFymp9Bn3ydiIQjzy7CM22bCysAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRFYlcrqzs2GrAjniiaFlzELQmKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGJhZGEzOTAtY2IyZi0z
MzFhLTk1NmItMzgyNzk3OGRkNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop75MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIalRXJuMTC1TrJ2prNYEn6UYX/0E3Fz8WmwJ1fbtACX/SKVJ9VtNbMt
789fM/NC0Rsba0tgcoPzdPKDEu6aYmz/SIsHn3oX+Fw/3lhMASwDOvbULB/z9R66
1oGmUUXwVtKrSGnq3WLux8n9MelQQUpi1kTXlPYSiu5zyDJJB8ZLXhiNSRLnQSxO
7IlnLmS3je3q9lBfMNYiivJuAyrzmiOcMKwrsdXRNUXMnLFvaHxzb4Tsl1l/wTo3
1mb+Tn2NEFJuNoKAyZkP4Ee9r90E8qk24V4wBDKgldR45TCol/uKZaXSkdDT5F3g
3upZpFlv//Kr4JOM48HocWshGgnUu/0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:21 2025 by rpki-client