Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7d18b9-c77e-34ee-a1b2-9beff23d4350.roa
File: 9c7d18b9-c77e-34ee-a1b2-9beff23d4350.roa (raw, json)
Hash identifier: J5faJ8zrLfx4+bjpc6iVTfA9VZLCdErxr1mwPM8Lk5k=
Subject key identifier: 5B:CD:E7:5D:94:65:A6:EE:FD:2F:F0:DF:87:26:8C:7B:60:F8:DE:75
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848387B33AF2A5DBD08608F6D40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7d18b9-c77e-34ee-a1b2-9beff23d4350.roa
Signing time: Mon 16 Dec 2024 01:40:23 +0000
ROA not before: Mon 16 Dec 2024 01:40:23 +0000
ROA not after: Sun 16 Mar 2025 00:40:23 +0000
asID: 132892
IP address blocks: 162.158.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:7b:33:af:2a:5d:bd:08:60:8f:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:40:23 2024 GMT
Not After : Mar 16 00:40:23 2025 GMT
Subject: CN=72bed9a5-73ba-43a5-9010-ec66a502100a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:37:57:a8:2a:da:37:41:53:0a:12:24:51:
1f:af:e8:74:61:d6:dd:a2:77:6d:74:a2:0a:b2:2e:
fd:c0:bd:9c:e1:47:a9:37:ad:13:cd:53:82:05:be:
60:a8:e0:49:11:d5:51:f9:c1:58:56:74:36:b5:1c:
66:05:09:7e:de:77:40:a6:ad:8a:73:27:74:ed:32:
5f:bb:06:cd:8b:8d:71:d7:57:45:41:41:6e:8f:4a:
db:93:b2:39:a8:da:1a:51:3b:b4:8f:e3:21:71:fa:
85:27:c1:56:48:5a:af:e7:75:6e:32:34:3e:0b:cf:
5f:f5:54:62:72:8e:02:18:79:73:1a:e2:19:7c:ca:
f5:e9:7d:cc:6e:5e:79:55:f2:5d:9a:be:96:db:32:
a5:59:b8:7e:7b:16:c8:12:86:04:f1:19:25:cb:36:
88:db:8e:f0:d5:5d:d7:d6:32:54:e5:28:5d:ff:6f:
ac:4e:7d:a9:f5:87:43:cb:44:f1:d8:6d:34:44:79:
60:c3:11:68:8f:3c:b0:dc:21:ea:29:81:29:ad:cb:
7d:b0:1c:d1:c5:ad:61:19:81:93:30:ac:ec:33:2c:
05:c8:2a:5c:a0:b2:bb:c2:1d:12:a5:64:00:52:53:
75:5d:e0:54:e3:6e:d1:4a:5f:a2:72:32:4e:91:41:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CD:E7:5D:94:65:A6:EE:FD:2F:F0:DF:87:26:8C:7B:60:F8:DE:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7d18b9-c77e-34ee-a1b2-9beff23d4350.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:8d:e9:a1:e3:30:f6:eb:6d:25:70:da:0a:de:43:dd:3a:c5:
b5:f7:37:bc:e7:a0:57:a2:55:d9:94:34:fc:ba:fb:48:ff:40:
9e:27:b9:a4:ca:c5:1e:c2:e2:8c:da:91:f8:ae:26:12:7e:ce:
84:7b:d7:f3:56:b6:40:b3:49:c5:82:66:54:f1:b9:fc:1b:e0:
68:ef:5b:d7:d4:ae:2c:be:a0:93:b6:0a:19:8c:94:e7:9d:c4:
86:a9:0c:65:1a:17:5a:17:6a:be:75:9a:55:2c:4c:95:bc:1c:
a3:b5:a0:62:3a:4c:11:0f:76:bf:5b:e2:23:6b:d2:0f:ad:a7:
5b:f3:94:39:a5:b4:91:92:55:fe:d8:f8:22:bc:2a:21:66:ca:
2f:fd:3f:6e:11:76:1c:46:c6:f9:f4:76:69:a0:43:1c:03:e8:
0e:de:0b:ec:b6:a1:b2:d4:d9:1b:8c:b7:1c:25:a7:60:2c:1b:
6f:f7:53:15:e2:bb:58:32:59:b5:4e:0e:a9:3c:c4:d3:fa:af:
5c:ce:da:58:fd:59:3e:9e:10:6b:64:a0:31:8b:8b:8c:d7:e3:
06:24:eb:7b:e2:f1:eb:4e:d1:46:d1:aa:60:86:91:f1:d5:94:
c8:7a:8f:4b:9f:44:d5:d7:17:95:a5:44:81:c4:f8:61:83:b2:
95:2e:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:02:53 2025 by rpki-client