Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97391d32-c5a6-369d-b6ad-163bca5260ca.roa
File: 97391d32-c5a6-369d-b6ad-163bca5260ca.roa (raw, json)
Hash identifier: 6H/XKf+1otknrus5orN0H2ZKf7BrUsSNbfUYKYcwmN4=
Subject key identifier: 51:AD:9C:06:5A:AF:0D:C1:32:D0:0B:E0:02:E6:72:74:D8:26:E9:26
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827AEEDC93B4DCCC317CE0800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97391d32-c5a6-369d-b6ad-163bca5260ca.roa
Signing time: Tue 10 Dec 2024 01:15:52 +0000
ROA not before: Tue 10 Dec 2024 01:15:52 +0000
ROA not after: Mon 10 Mar 2025 00:15:52 +0000
asID: 13335
IP address blocks: 162.158.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:ae:ed:c9:3b:4d:cc:c3:17:ce:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:15:52 2024 GMT
Not After : Mar 10 00:15:52 2025 GMT
Subject: CN=d551352b-1b01-41d4-8c41-f201a846a572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:72:38:97:92:f2:ef:8b:92:e4:27:b4:66:
3f:13:3f:2e:89:97:b7:22:7e:b4:4f:37:3d:ac:7e:
90:e4:ab:8d:2b:e8:d7:76:c4:39:9c:79:93:8b:e3:
8c:e1:a2:b8:7f:d2:05:e8:74:ff:7c:1e:02:81:d3:
fc:36:58:6d:13:e0:2d:ef:06:a6:c9:58:1e:0d:8a:
d2:de:18:27:87:d7:b6:2a:14:d9:e1:38:df:4d:7b:
c7:3a:ad:e0:51:38:f9:f7:3e:9f:28:fc:cc:3e:38:
07:c0:6a:b4:a4:c5:44:9e:20:37:df:cc:2f:ac:2e:
a1:53:35:86:03:77:b3:30:83:b9:23:ca:50:ed:31:
cb:c8:3c:05:9e:ad:26:15:87:c7:95:d8:06:fb:1e:
51:df:ce:86:41:54:19:a6:d4:da:06:bd:37:41:0e:
36:24:52:ea:fd:74:a4:6e:59:f5:3a:64:99:d8:b6:
b7:8f:33:db:1e:0c:ac:75:e1:6a:dc:a7:e4:8b:05:
87:2a:3c:c4:4b:20:16:40:a3:f4:a3:27:6d:e7:54:
1a:66:a6:24:dd:cb:71:da:9b:fc:1e:01:b0:26:99:
80:6e:3b:2c:cc:23:50:45:92:8e:b9:af:57:b0:4c:
a9:6d:d4:05:19:18:92:5e:82:14:89:40:0c:21:48:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AD:9C:06:5A:AF:0D:C1:32:D0:0B:E0:02:E6:72:74:D8:26:E9:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97391d32-c5a6-369d-b6ad-163bca5260ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:8c:db:13:9d:83:53:dd:f9:0c:c8:69:51:b9:90:8a:b2:0a:
6e:62:eb:52:3f:88:3f:79:58:64:9b:24:e5:f5:3c:c7:36:54:
b2:37:e4:a6:98:fe:f3:c0:2f:e0:e1:3b:e2:74:d4:60:59:94:
54:e8:ed:ab:af:f2:8e:61:4b:6b:ce:8a:83:5d:75:6e:28:2d:
d7:64:7e:41:8a:61:cd:84:72:f3:1d:be:f3:9a:63:3b:74:fc:
24:04:a5:9a:60:84:3d:b4:38:44:12:54:ef:9a:b1:cb:64:71:
9e:e1:25:7c:90:6a:a7:47:2d:9c:40:b7:60:80:3f:25:e7:f9:
13:86:ca:f8:71:2d:d6:3b:b2:c3:32:39:e4:90:e8:03:94:5f:
e8:54:ea:76:85:15:f1:4a:9e:a0:34:4e:a1:42:d7:85:3d:25:
2a:04:b0:46:1c:23:09:bc:2f:2e:3b:71:1b:aa:ac:04:e4:3e:
91:dd:37:e1:64:2b:cf:85:8d:d7:a6:01:71:8a:c2:5e:28:c2:
57:ed:9b:c3:d1:8b:f9:46:ee:cb:8c:cb:61:3c:e5:a8:3f:c1:
6e:98:67:e9:af:fc:5e:39:96:44:8d:40:5f:73:c2:4d:f1:24:
01:c6:3b:bb:9a:02:2c:3a:e1:b8:e8:31:02:7b:ac:5d:ea:3d:
68:45:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:58 2025 by rpki-client