Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7adf659b-e724-3007-952e-cf4c1d82f0e3.roa
File: 7adf659b-e724-3007-952e-cf4c1d82f0e3.roa (raw, json)
Hash identifier: 2TIUwwO4TQiEkGT77FuwxjxFpM1c+I+lPMLqyf6DtcA=
Subject key identifier: BC:A3:0C:E2:D2:C6:3E:BF:BC:54:21:7C:B8:FA:27:B3:DA:EF:2E:18
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B79AE2E60EA35390D39B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7adf659b-e724-3007-952e-cf4c1d82f0e3.roa
Signing time: Tue 10 Dec 2024 01:33:21 +0000
ROA not before: Tue 10 Dec 2024 01:33:21 +0000
ROA not after: Mon 10 Mar 2025 00:33:21 +0000
asID: 13335
IP address blocks: 162.158.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b7:9a:e2:e6:0e:a3:53:90:d3:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:33:21 2024 GMT
Not After : Mar 10 00:33:21 2025 GMT
Subject: CN=8af9dbdb-8a32-40ab-b27e-22e509b4b6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:63:be:6a:70:04:dd:3c:bb:cf:01:56:e2:
fe:40:9c:c8:22:7e:e8:2b:8c:45:e7:1a:7a:a5:f6:
d9:c3:4e:0d:bd:44:ba:42:0c:11:da:7e:fb:dd:65:
bf:67:83:01:86:24:d5:d2:10:41:54:32:7d:c0:19:
f9:fc:11:70:ee:29:6e:21:91:7b:0a:42:80:0b:39:
40:21:96:f7:ba:bb:0a:dd:46:70:fd:9c:8d:a6:a7:
d0:90:a3:20:81:2d:fc:00:bd:3e:d3:83:ac:9d:6a:
7b:98:ad:a1:be:94:f6:bb:7c:b5:50:44:4d:da:8a:
37:74:f0:3c:33:b0:8a:43:99:53:98:d9:46:03:12:
3e:a1:5b:3e:e1:ec:b2:34:10:09:b0:12:26:73:ce:
bb:e8:32:92:1c:fa:87:1d:bb:1f:5e:63:aa:c6:37:
32:74:66:82:70:78:f9:c2:d7:d9:2d:0a:4b:92:de:
e4:40:3a:bd:40:ac:5e:c0:45:6c:b5:98:66:08:1e:
c1:8d:96:89:e1:58:dc:26:a6:dd:23:69:91:c2:64:
7a:08:0d:89:85:3f:b5:cb:0a:05:0e:27:46:c7:e8:
c2:dd:5d:c0:c1:e0:01:4a:1a:c3:90:02:ad:7c:c5:
32:be:18:02:c6:43:89:3f:54:cd:ac:e0:82:1d:27:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:0C:E2:D2:C6:3E:BF:BC:54:21:7C:B8:FA:27:B3:DA:EF:2E:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7adf659b-e724-3007-952e-cf4c1d82f0e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:e6:9f:51:77:d9:8f:46:2c:44:b2:6c:a8:42:61:cb:fd:7e:
b9:e7:49:b4:68:4e:2e:31:12:bd:03:6c:79:9e:2f:fb:07:1d:
4c:34:07:86:7f:e7:2a:6c:7a:cd:a7:d5:84:02:98:e8:00:31:
82:13:43:f2:57:64:0b:71:71:c4:99:30:ce:37:38:c1:f2:83:
5d:38:a0:f2:71:56:e9:1d:05:d4:d1:f0:c8:49:f7:fb:67:a4:
71:db:94:59:39:7d:3a:63:29:f0:af:e9:71:da:29:fc:af:55:
65:87:81:a4:3d:bc:9e:ee:72:1f:ae:17:94:ac:e9:a2:43:e0:
eb:80:f1:c4:f5:d2:03:bd:3e:45:ed:3b:a7:5f:50:1d:53:21:
cc:3a:96:46:7f:03:fd:f9:4f:e8:90:b0:42:c5:e0:19:5e:b9:
9e:2f:17:2d:44:0a:20:67:79:68:02:5d:f5:34:64:bc:0a:36:
fb:fc:aa:d4:61:97:f2:60:f9:f7:0e:54:b6:38:31:90:a5:db:
ee:0f:92:97:6d:14:8d:aa:b7:77:4d:d3:b6:21:fb:91:d0:1b:
60:4d:61:65:73:2d:d8:32:9a:95:39:43:00:6a:b4:5e:f9:e6:
4d:91:51:23:b1:c6:6d:85:4c:12:08:27:dc:90:67:16:ac:28:
fd:99:ce:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:58:32 2025 by rpki-client