
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/878412f5-6e05-3921-ac5b-69bbe1e1142d.roa
File: 878412f5-6e05-3921-ac5b-69bbe1e1142d.roa (raw, json)
Hash identifier: FDWEKuxRHSKlKj27jnZhwxq6Oe+luxou42O6iDOeZ58=
Subject key identifier: 54:30:D6:16:22:C4:46:D9:DE:4A:47:96:DB:63:81:48:B3:11:C3:CB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848256153C0A29C22157625FF60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/878412f5-6e05-3921-ac5b-69bbe1e1142d.roa
Signing time: Mon 09 Dec 2024 05:27:54 +0000
ROA not before: Mon 09 Dec 2024 05:27:54 +0000
ROA not after: Sun 09 Mar 2025 05:27:54 +0000
asID: 13335
IP address blocks: 162.158.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:61:53:c0:a2:9c:22:15:76:25:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:27:54 2024 GMT
Not After : Mar 9 05:27:54 2025 GMT
Subject: CN=0b8d35ed-a350-4078-b998-9c2b38295dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:a1:55:96:71:3c:02:10:77:ba:10:21:9d:
9a:92:40:5c:bb:36:29:85:c8:0e:bf:da:4e:4f:5f:
b8:75:7e:c2:0c:46:70:75:f8:ea:54:c8:60:9b:ec:
47:32:f5:69:fc:89:df:70:da:91:78:26:50:35:cb:
f6:11:d9:b4:0b:41:1a:7b:c7:73:ae:e8:f2:ca:12:
76:7b:77:7f:7b:ea:49:b5:32:48:89:13:04:b0:82:
6f:32:70:27:e1:71:4f:79:6b:c7:fa:84:3a:c8:6e:
41:38:ca:0b:af:31:8e:9a:ae:08:71:f3:7c:ec:f9:
2c:f1:ca:2d:77:45:fd:66:a0:73:16:33:e9:2b:4c:
5f:d4:22:ee:f4:07:6a:a9:15:fd:ee:e1:6d:d7:d0:
c2:89:4e:62:8b:93:6e:79:ed:6f:51:4e:32:13:cf:
70:77:de:87:cc:d0:18:74:55:01:99:d6:54:b9:d0:
80:62:0f:96:3c:5e:4d:ee:1a:2a:c8:4f:67:65:7c:
61:97:32:7d:76:40:93:06:cf:54:8e:2c:b4:10:43:
89:18:9f:b5:05:6a:6e:d7:dd:c3:2c:c1:d2:13:6a:
2d:ab:b9:da:b0:80:80:1e:1c:66:33:42:1c:5e:e9:
45:c9:ad:9b:37:65:d3:dc:28:45:1d:ee:a0:17:9e:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:30:D6:16:22:C4:46:D9:DE:4A:47:96:DB:63:81:48:B3:11:C3:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/878412f5-6e05-3921-ac5b-69bbe1e1142d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:16:73:a4:f2:7c:2f:72:d1:3b:85:23:35:99:9d:71:2d:ca:
52:d3:8c:fa:0d:d1:e0:51:fb:73:7d:a0:26:c2:6e:80:ea:03:
11:2d:4c:29:fe:1a:fc:f3:fe:f3:03:86:d2:01:d0:0f:f2:63:
9d:1d:ab:f7:14:6a:03:48:13:68:a5:79:b6:e5:50:0b:20:a8:
17:f4:ce:fc:74:0f:66:b2:1e:6e:ba:b0:f0:ab:d8:de:17:18:
fd:b5:e8:37:be:dd:cb:e4:9a:45:e1:c5:d2:7a:af:b7:ee:84:
a7:6f:82:43:83:5c:02:fc:2e:9a:0a:a1:6c:55:d7:55:f4:44:
ea:74:d1:dd:cc:83:cb:3b:86:c8:7a:51:2c:80:27:c7:a7:73:
ac:48:3f:0d:9b:9f:2f:a8:df:4e:03:87:d2:9d:d6:de:75:a3:
38:8f:94:0f:e2:7d:6f:e1:4f:87:b5:16:32:72:5d:5e:d7:e2:
15:19:8d:2e:bf:e3:6a:34:66:c9:ac:62:6e:53:4d:f7:db:ed:
cb:7e:8d:27:8e:60:8e:72:61:07:55:5c:fd:9f:f2:b7:73:b3:
d6:31:cd:ac:89:e4:07:44:3a:9f:ce:b9:3b:7e:04:5b:21:91:
92:57:25:de:20:73:64:15:49:b7:01:63:48:d8:0c:ed:d0:fa:
cd:c2:3b:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglYVPAopwiFXYl/2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA1Mjc1NFoXDTI1MDMwOTA1Mjc1NFowLzEtMCsGA1UEAxMk
MGI4ZDM1ZWQtYTM1MC00MDc4LWI5OTgtOWMyYjM4Mjk1ZGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCihVZZxPAIQd7oQIZ2akkBcuzYphcgOv9pO
T1+4dX7CDEZwdfjqVMhgm+xHMvVp/InfcNqReCZQNcv2Edm0C0Eae8dzrujyyhJ2
e3d/e+pJtTJIiRMEsIJvMnAn4XFPeWvH+oQ6yG5BOMoLrzGOmq4IcfN87Pks8cot
d0X9ZqBzFjPpK0xf1CLu9AdqqRX97uFt19DCiU5ii5Nuee1vUU4yE89wd96HzNAY
dFUBmdZUudCAYg+WPF5N7hoqyE9nZXxhlzJ9dkCTBs9Ujiy0EEOJGJ+1BWpu193D
LMHSE2otq7nasICAHhxmM0IcXulFya2bN2XT3ChFHe6gF56hnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQw1hYixEbZ3kpHlttjgUizEcPLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODc4NDEyZjUtNmUwNS0z
OTIxLWFjNWItNjliYmUxZTExNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4Wc6TyfC9y0TuFIzWZnXEtylLTjPoN0eBR+3N9oCbCboDqAxEtTCn+
Gvzz/vMDhtIB0A/yY50dq/cUagNIE2ilebblUAsgqBf0zvx0D2ayHm66sPCr2N4X
GP216De+3cvkmkXhxdJ6r7fuhKdvgkODXAL8LpoKoWxV11X0ROp00d3Mg8s7hsh6
USyAJ8enc6xIPw2bny+o304Dh9Kd1t51oziPlA/ifW/hT4e1FjJyXV7X4hUZjS6/
42o0ZsmsYm5TTffb7ct+jSeOYI5yYQdVXP2f8rdzs9YxzayJ5AdEOp/OuTt+BFsh
kZJXJd4gc2QVSbcBY0jYDO3Q+s3CO+E=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:17 2025 by rpki-client