Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/920a8655-59ce-3482-95ca-ff103f2935e1.roa
File: 920a8655-59ce-3482-95ca-ff103f2935e1.roa (raw, json)
Hash identifier: 0C4N7ngT/AitH+vLikR1sVFuaWVd/a15eUzvOqAlpgM=
Subject key identifier: 95:DF:B1:3B:CF:A6:7D:3F:62:03:29:B6:29:D6:B6:B1:F4:A8:22:76
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482806B79C83B73CF92B7408C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/920a8655-59ce-3482-95ca-ff103f2935e1.roa
Signing time: Tue 10 Dec 2024 04:12:45 +0000
ROA not before: Tue 10 Dec 2024 04:12:45 +0000
ROA not after: Mon 10 Mar 2025 03:12:45 +0000
asID: 13335
IP address blocks: 162.158.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:06:b7:9c:83:b7:3c:f9:2b:74:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:12:45 2024 GMT
Not After : Mar 10 03:12:45 2025 GMT
Subject: CN=1bb10565-44c7-4c8a-b0b8-9ffee7ce70ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:ac:04:d4:39:2b:ad:09:3a:6a:8f:00:6b:
40:c6:6e:e0:df:24:9b:61:82:18:d2:53:d7:c8:43:
5d:e6:e3:c5:b8:a5:b1:d3:7e:f2:57:30:7e:c9:35:
d9:3a:db:d8:d9:d6:44:da:9c:56:bf:88:b8:7d:14:
16:3a:45:46:66:20:a4:60:cf:02:6c:7b:83:da:40:
fc:9d:bd:1f:f8:d5:5e:a7:02:b4:72:75:cf:50:05:
2b:c0:58:0c:c2:ed:20:96:a3:c3:24:f2:0d:05:73:
be:19:26:4d:f6:1c:18:cd:85:4e:1d:bc:80:9a:ee:
8b:f6:84:52:75:c4:80:6d:f5:02:52:1e:a9:2a:c2:
dd:98:63:53:14:e5:f9:13:f4:98:86:f5:9f:60:37:
0e:cb:1d:3a:2c:cc:a8:86:b4:93:cb:be:a9:fa:12:
0d:dd:74:bd:67:bf:95:63:10:64:53:7b:d2:b6:80:
7e:95:b5:32:e4:19:2b:bf:7f:d7:28:a9:07:8b:f6:
dc:58:83:18:c6:48:34:6e:a0:d2:f8:e1:c1:f9:64:
c2:c9:8b:23:e9:b9:fb:c2:60:cb:f3:a0:43:6c:dc:
72:5f:ce:93:72:14:44:a8:05:db:ea:c9:86:04:9d:
d7:7f:68:b1:57:50:de:bb:e5:5c:da:86:b5:78:6f:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DF:B1:3B:CF:A6:7D:3F:62:03:29:B6:29:D6:B6:B1:F4:A8:22:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/920a8655-59ce-3482-95ca-ff103f2935e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:39:bc:1d:5c:93:5b:e0:ad:55:66:60:58:f0:71:70:c3:29:
35:ce:46:58:f0:c3:0c:88:08:59:4a:28:0b:49:82:c9:df:bd:
bb:ed:ef:50:76:fb:c3:d5:ca:ea:4b:bd:e9:5b:32:ab:79:9a:
60:b6:73:c3:5a:0a:c7:83:5c:a1:12:79:50:7a:29:82:99:a9:
37:31:3f:fb:e2:e1:68:c9:b6:de:86:36:73:02:21:4b:90:1f:
da:29:fc:b2:57:ac:1f:6f:9f:9f:d8:13:2b:a8:d3:18:67:4e:
97:80:b7:4a:bb:b0:11:43:02:8a:52:09:14:33:63:e3:13:11:
bf:00:a9:ce:07:7b:16:d3:9b:56:d9:52:82:5f:8d:cd:0d:d1:
4f:1d:b2:e2:8b:8a:91:8b:f5:68:ad:b5:69:88:c1:1f:e5:d3:
82:28:b1:b0:cd:2c:fe:4e:39:aa:1d:77:e0:1e:cf:af:8f:c8:
e7:f3:ac:a7:f8:1d:3c:3b:ba:bd:0e:2c:5c:21:00:36:17:be:
f8:53:39:76:6a:1a:b4:76:3d:96:01:4c:e5:67:a0:6f:cb:8b:
72:3a:d7:2f:5a:0a:88:76:88:99:b3:30:32:21:aa:83:65:38:
c8:ef:c7:bb:76:7a:46:34:06:2d:56:6a:ee:61:58:2b:b8:fe:
bf:9b:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:26 2025 by rpki-client