Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a554c993-404e-3223-91b4-e0714b2ae583.roa
File: a554c993-404e-3223-91b4-e0714b2ae583.roa (raw, json)
Hash identifier: V4q98Df5p9/MmvxFrR91J+eYkhl4HJQ44+T6jDmNc3c=
Subject key identifier: 35:A9:5C:B4:BC:A6:89:E8:CF:F4:A3:2E:8E:2B:FB:70:79:F0:6C:7B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B32DD199439EDC6EE9DAF0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a554c993-404e-3223-91b4-e0714b2ae583.roa
Signing time: Tue 10 Dec 2024 01:24:26 +0000
ROA not before: Tue 10 Dec 2024 01:24:26 +0000
ROA not after: Mon 10 Mar 2025 00:24:26 +0000
asID: 13335
IP address blocks: 162.158.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b3:2d:d1:99:43:9e:dc:6e:e9:da:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:24:26 2024 GMT
Not After : Mar 10 00:24:26 2025 GMT
Subject: CN=5381c48b-119a-4ab9-abf8-ae90d5cbd4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:e5:46:ec:1d:c9:6c:38:d8:d0:03:62:a6:
84:3b:14:fd:c5:04:0e:03:ef:49:9e:4b:14:81:22:
ef:7c:5d:53:57:9d:fc:ed:28:78:f5:32:ec:99:f5:
c8:0f:01:42:42:33:45:0e:4c:a4:32:81:16:c8:fd:
30:a6:f0:cb:8e:e9:7c:96:67:31:1f:d3:a6:98:47:
a1:da:3c:53:4e:81:12:18:cd:77:14:ba:05:38:ad:
5b:bc:29:8b:3a:1f:cb:52:0e:d2:98:c2:01:3d:d1:
d9:d7:c2:06:bf:46:06:eb:eb:cd:8b:3b:d2:a2:c3:
2a:1c:66:ec:81:52:4b:34:06:25:29:01:d2:c3:89:
5e:48:76:32:c0:30:2e:cc:e5:31:82:7d:9e:92:ca:
6a:cb:4a:f1:fa:1d:f6:09:05:66:fa:29:53:84:70:
d4:cf:51:e3:70:9b:09:d3:a3:12:68:b2:6e:15:cd:
a6:3b:fc:d1:18:74:01:84:1a:5f:d8:a2:69:8c:f4:
5f:ea:b8:64:b3:fd:a2:71:57:fb:fc:25:de:0c:15:
7e:29:b0:90:56:07:ee:d1:eb:26:5e:48:cf:9e:11:
42:6c:f6:ac:77:36:5c:8a:ee:16:c5:19:eb:04:2a:
c7:66:6b:e5:21:7c:d7:b3:9d:67:b9:6d:93:71:12:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A9:5C:B4:BC:A6:89:E8:CF:F4:A3:2E:8E:2B:FB:70:79:F0:6C:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a554c993-404e-3223-91b4-e0714b2ae583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:88:89:16:4e:2b:7d:23:48:a1:22:17:5c:85:d8:34:c0:73:
d4:b5:38:df:d6:55:37:e4:19:46:91:74:94:2d:26:18:d3:9e:
db:c2:71:b2:40:d6:b9:45:ee:61:c6:ee:0d:01:05:ef:16:32:
c8:27:2b:a0:85:bc:be:8b:9f:bc:fe:ad:24:7c:c9:15:65:bd:
43:7f:35:82:dc:fc:d4:1f:d3:8e:59:c6:d6:07:a4:d9:49:31:
50:12:b4:0a:ee:e6:67:eb:e2:66:9c:5c:a1:63:6b:f4:88:d7:
26:39:6a:1a:ad:5e:82:7f:36:4b:0e:44:06:81:16:68:1e:48:
ec:c0:d0:8e:04:5a:95:14:ca:99:20:0d:3f:70:96:f1:0b:a5:
8c:79:b4:b8:75:df:ea:fc:09:37:30:bd:2d:05:21:de:2e:86:
91:85:20:28:b2:81:52:c3:8b:0e:54:0d:a3:c5:d7:2b:a2:05:
f6:0f:4f:38:a6:44:0c:c4:8c:0d:2c:02:cc:54:7e:57:24:99:
66:f6:cb:8e:24:89:51:15:bd:c9:0b:a2:91:87:52:e4:e1:01:
b6:66:d4:a3:1c:59:be:63:3a:93:5d:f8:dc:c4:a9:4b:b8:83:
5f:70:05:25:99:72:90:f7:2c:dd:0c:d3:8b:d1:f4:c8:ab:46:
05:ce:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:24 2025 by rpki-client