Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/903a6af3-b5f3-3580-9150-07eaac77ba46.roa
File: 903a6af3-b5f3-3580-9150-07eaac77ba46.roa (raw, json)
Hash identifier: Ii+qfT2b8O4y539plxklA0C0FNxxA/sNOD4wGg+cYho=
Subject key identifier: 1C:3C:06:9B:80:F4:9F:39:18:8E:D8:7F:4F:CC:41:A8:15:68:61:7A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B20C1B2A709397436E3400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/903a6af3-b5f3-3580-9150-07eaac77ba46.roa
Signing time: Tue 10 Dec 2024 01:22:09 +0000
ROA not before: Tue 10 Dec 2024 01:22:09 +0000
ROA not after: Mon 10 Mar 2025 00:22:09 +0000
asID: 13335
IP address blocks: 162.158.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b2:0c:1b:2a:70:93:97:43:6e:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:22:09 2024 GMT
Not After : Mar 10 00:22:09 2025 GMT
Subject: CN=ca2f0498-7fa3-4900-94dc-cc690dbb3bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:3b:3d:c9:0b:dd:e7:94:da:e0:3d:60:16:
52:20:d8:e9:50:c1:32:84:ab:47:9f:3a:28:89:17:
7d:be:93:91:69:4f:f2:5f:3a:fa:ee:90:0d:08:b5:
fe:6b:ed:56:75:57:22:61:0b:45:9c:61:3f:5e:a6:
28:32:7b:5b:e1:05:58:6c:57:a6:06:f1:0f:86:10:
87:57:ba:7f:98:ff:d3:1b:ba:d5:f9:b0:f9:43:16:
d9:c1:3b:ab:4f:41:f0:e8:82:65:d0:3d:56:10:7e:
54:e3:3a:ef:c9:9b:5e:af:a5:21:ff:db:ad:84:b5:
90:b2:fa:00:f5:1c:1c:c5:5c:03:3b:37:15:4b:59:
89:6a:be:3b:b0:0a:8e:59:0f:9f:cd:38:3c:53:18:
10:26:d1:0e:8b:a6:71:7b:ed:f4:59:a8:12:ed:6b:
7b:12:95:59:24:6c:f3:14:a6:d5:3c:3e:d6:2f:bc:
67:e4:c2:6e:3c:74:a2:5f:aa:cb:3f:aa:05:eb:cb:
c9:34:4d:c4:f1:13:b5:28:42:0a:72:59:a5:13:3d:
16:56:26:2f:5c:76:fb:64:33:c2:51:63:f8:21:39:
24:a4:95:ef:4e:7e:18:10:c5:4f:3b:f9:32:12:e9:
9c:90:f1:e0:ab:0f:ea:d0:1c:96:1c:c0:cf:24:b7:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3C:06:9B:80:F4:9F:39:18:8E:D8:7F:4F:CC:41:A8:15:68:61:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/903a6af3-b5f3-3580-9150-07eaac77ba46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:d2:a5:98:70:21:4a:d3:b9:4c:91:9d:8e:1a:1f:7f:6b:e3:
b8:25:c8:c2:46:c9:ae:56:40:12:1a:c8:ca:58:66:9a:f6:ae:
70:68:2e:e5:fa:2c:12:57:0d:8a:45:26:b5:c9:ee:bd:9e:1a:
c8:7e:bf:a5:fe:c5:fa:8b:1d:28:99:48:4e:ca:2f:f6:d1:4a:
84:3c:03:d4:9b:63:16:e7:93:30:17:b1:ff:57:e3:28:67:27:
4b:c2:d8:ec:3f:53:52:c9:2d:2d:cf:f4:06:a1:23:ab:8a:a5:
31:19:6a:51:81:f5:40:ce:b5:57:02:26:f7:06:c4:96:ff:33:
1b:4d:b9:0c:e0:3a:59:e7:3d:1a:0a:76:b9:02:d1:a8:2c:20:
db:c4:a6:2f:a7:4e:a9:07:5c:7d:27:f0:8d:7d:70:c3:ee:d6:
a3:65:72:00:b7:5c:f2:f2:3c:e0:ee:51:9b:07:da:e1:ab:5a:
44:96:d6:0a:f2:a1:a7:2d:07:0e:aa:11:43:3f:5a:68:55:eb:
08:5c:95:7a:16:a3:5c:d3:bf:b4:29:f3:87:22:82:a4:52:30:
8e:c4:0b:71:df:c2:85:a3:80:d4:cc:be:82:32:f5:db:89:54:
de:10:da:e4:9a:94:8f:46:5b:e5:df:57:3a:d9:c0:35:b5:c6:
24:54:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:12 2025 by rpki-client