Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fc5404b-0a7c-3af5-8ab7-a40db519b5d0.roa
File: 6fc5404b-0a7c-3af5-8ab7-a40db519b5d0.roa (raw, json)
Hash identifier: huphfQPRoc0+SUOxpc4TotlSosRlxWWA9leOClK0cPs=
Subject key identifier: 33:8F:17:85:30:0C:81:68:F6:43:00:78:84:ED:A0:00:DA:9D:AF:8D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584843B0059F99326965E84C6200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fc5404b-0a7c-3af5-8ab7-a40db519b5d0.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 13335
IP address blocks: 162.159.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:05:9f:99:32:69:65:e8:4c:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=00414e50-89ac-4812-b353-75a716ca504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:0f:a3:4b:46:e4:53:e0:72:c1:7f:41:51:
cc:c2:15:ba:3d:e1:10:d1:82:35:37:b8:06:0d:ff:
72:65:38:9b:9e:e1:0d:4e:37:fd:74:63:80:59:88:
c4:1f:bf:c3:28:9c:d7:d4:8f:6e:74:3e:54:46:9d:
e2:b1:17:40:72:de:11:a5:6e:c1:10:d0:da:ac:92:
05:e3:8a:0c:73:ec:26:26:c3:ce:ab:21:be:b3:2f:
f4:3e:a4:61:26:af:3b:74:8c:09:34:8a:55:12:46:
01:b8:37:7b:28:42:80:8f:5d:1e:3a:8c:12:5b:21:
fa:bc:5e:93:f4:66:f5:90:84:4b:ca:90:0c:fb:e3:
40:08:f6:22:41:66:87:3f:cb:b9:45:90:f0:1e:29:
95:6b:03:c2:eb:76:b1:cb:62:d7:27:4d:11:e3:5f:
83:b0:05:3e:76:5a:e6:a5:ed:31:43:ab:3e:46:de:
0c:77:b5:f6:bf:18:f7:56:a8:2e:c0:b1:5c:9b:d7:
6f:7b:68:c1:9d:73:94:4b:ab:d9:c0:3a:c6:6c:ee:
89:2e:b9:68:19:f2:5e:05:2d:03:22:51:b7:1f:e6:
6a:d7:32:49:0f:cb:83:47:71:bb:64:63:b5:5e:62:
62:5d:dd:fd:e0:b0:8e:0b:91:24:dc:2f:d4:a5:ea:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:17:85:30:0C:81:68:F6:43:00:78:84:ED:A0:00:DA:9D:AF:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fc5404b-0a7c-3af5-8ab7-a40db519b5d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:48:02:a5:3b:85:03:ff:7c:bf:b6:77:6d:f9:12:47:0c:ba:
41:cc:27:14:1a:f6:14:ab:99:62:05:15:57:be:00:8b:f8:85:
11:bd:e8:50:ea:23:0d:a6:9f:82:a5:3d:c8:c8:68:16:97:33:
b3:40:82:15:75:7b:43:73:b8:50:61:ed:35:ba:aa:53:92:57:
d1:84:10:51:ff:63:97:4a:8f:b4:6b:62:c9:ee:53:89:c4:b7:
7e:68:e2:78:47:ce:28:3c:87:4c:d0:03:3e:dd:8e:7d:be:30:
7f:46:2c:4d:0c:99:cd:88:22:da:66:09:22:35:16:94:6c:df:
7b:75:b8:42:0f:44:97:7b:2f:4c:22:c5:75:a4:e5:3f:11:9f:
77:48:60:b8:ba:f8:cb:c0:92:5c:a3:c8:3c:d7:25:72:c4:e6:
bb:7f:bd:fc:04:9a:b5:72:f8:d4:95:cc:63:6c:cc:2a:48:3c:
e1:d3:41:4b:ea:af:f2:c6:93:88:1b:95:26:f0:4a:ce:b2:35:
04:c4:7a:9c:0a:53:55:1f:56:da:f3:96:c5:8a:98:fb:b2:8e:
e8:3b:50:e6:14:47:48:0f:d2:5c:10:f8:83:d4:23:ec:27:97:
d7:7c:27:f2:c7:03:2b:29:17:d3:f9:00:cd:56:5d:20:f7:b0:
dd:e1:1d:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhDsAWfmTJpZehMYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIyMDAyMDA0MFoXDTI1MDMyMDAxMDA0MFowLzEtMCsGA1UEAxMk
MDA0MTRlNTAtODlhYy00ODEyLWIzNTMtNzVhNzE2Y2E1MDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke4Po0tG5FPgcsF/QVHMwhW6PeEQ0YI1N7gG
Df9yZTibnuENTjf9dGOAWYjEH7/DKJzX1I9udD5URp3isRdAct4RpW7BENDarJIF
44oMc+wmJsPOqyG+sy/0PqRhJq87dIwJNIpVEkYBuDd7KEKAj10eOowSWyH6vF6T
9Gb1kIRLypAM++NACPYiQWaHP8u5RZDwHimVawPC63axy2LXJ00R41+DsAU+dlrm
pe0xQ6s+Rt4Md7X2vxj3VqguwLFcm9dve2jBnXOUS6vZwDrGbO6JLrloGfJeBS0D
IlG3H+Zq1zJJD8uDR3G7ZGO1XmJiXd394LCOC5Ek3C/Upep9owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOPF4UwDIFo9kMAeITtoADana+NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmZjNTQwNGItMGE3Yy0z
YWY1LThhYjctYTQwZGI1MTliNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdIAqU7hQP/fL+2d235EkcMukHMJxQa9hSrmWIFFVe+AIv4hRG96FDq
Iw2mn4KlPcjIaBaXM7NAghV1e0NzuFBh7TW6qlOSV9GEEFH/Y5dKj7RrYsnuU4nE
t35o4nhHzig8h0zQAz7djn2+MH9GLE0Mmc2IItpmCSI1FpRs33t1uEIPRJd7L0wi
xXWk5T8Rn3dIYLi6+MvAklyjyDzXJXLE5rt/vfwEmrVy+NSVzGNszCpIPOHTQUvq
r/LGk4gblSbwSs6yNQTEepwKU1UfVtrzlsWKmPuyjug7UOYUR0gP0lwQ+IPUI+wn
l9d8J/LHAyspF9P5AM1WXSD3sN3hHYI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:59 2025 by rpki-client