Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8d40aa2-add0-3b8f-84c5-f50374afbf7f.roa
File: a8d40aa2-add0-3b8f-84c5-f50374afbf7f.roa (raw, json)
Hash identifier: 1qmHdcRXJwjyotRluYcyhOABs8Yc/dqKTRMIV0K/0pM=
Subject key identifier: 97:26:E4:69:AE:FD:70:16:05:3E:66:AA:B0:8F:50:60:F2:29:08:AD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482811492F59E15909144296C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8d40aa2-add0-3b8f-84c5-f50374afbf7f.roa
Signing time: Tue 10 Dec 2024 04:34:03 +0000
ROA not before: Tue 10 Dec 2024 04:34:03 +0000
ROA not after: Mon 10 Mar 2025 03:34:03 +0000
asID: 13335
IP address blocks: 162.159.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:11:49:2f:59:e1:59:09:14:42:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:34:03 2024 GMT
Not After : Mar 10 03:34:03 2025 GMT
Subject: CN=23955488-d2fc-47a6-a782-8ba01222b408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:ec:bd:0f:68:a7:17:e8:17:23:55:fb:72:
53:7c:78:17:a4:d2:97:99:7f:68:77:18:77:e4:9a:
9d:f6:df:60:46:1e:c9:dc:73:65:9e:d3:1d:c0:a5:
da:86:87:c8:7c:eb:1b:3c:fc:83:e4:ae:6b:cf:72:
c1:23:46:1d:15:2a:8e:f6:ba:8d:4f:5c:65:9e:01:
bb:7b:f6:bd:ff:22:4f:cd:37:fa:59:4e:9e:3a:a9:
ae:f0:de:7b:32:31:e5:99:05:79:14:25:db:01:17:
07:60:69:c5:7d:b9:92:40:06:8e:af:8c:b0:0d:b4:
60:75:bf:f6:46:07:3b:be:a3:f0:39:ca:bb:21:e0:
1e:e4:a4:db:d0:5b:a5:33:58:f7:7d:ff:38:aa:66:
15:e4:52:99:11:f0:c9:5d:8a:29:e5:8f:59:45:43:
ab:ae:cb:4a:a1:58:82:fd:1c:11:5a:76:9f:ed:13:
c7:14:77:bf:9b:00:28:4b:b3:88:cb:4a:9c:89:29:
78:7f:05:c6:19:92:69:a4:97:20:75:98:06:93:61:
bc:6a:e7:00:c1:84:a4:e9:39:8d:b1:ea:13:a4:c3:
c7:ca:a2:02:2c:50:6b:84:95:14:47:7b:36:a8:70:
c4:08:e1:07:c9:0b:f9:62:26:78:5d:24:1a:e1:b0:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:26:E4:69:AE:FD:70:16:05:3E:66:AA:B0:8F:50:60:F2:29:08:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8d40aa2-add0-3b8f-84c5-f50374afbf7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:4b:55:65:a6:67:e7:36:7a:5a:56:bd:b5:6e:df:9d:56:1f:
93:b7:1d:b1:8b:70:75:51:58:50:7d:57:d1:53:7f:fc:bb:9c:
45:39:c4:72:6d:2d:f1:9c:98:ad:5b:d5:c8:8a:d7:87:95:03:
c1:74:5f:6c:c7:5b:98:7d:38:82:e3:6d:36:a3:32:e4:5a:d8:
4b:41:61:93:12:45:4b:e1:d4:e4:d3:b8:1c:2b:69:0f:a8:fe:
5d:68:99:f5:a0:5e:9f:2a:2b:f8:5e:91:7f:ea:0b:c4:36:f6:
e4:9c:ef:02:20:34:33:f7:ee:73:3f:e5:7f:bb:5d:ed:1b:6b:
7a:a3:e0:ff:0b:7d:9f:26:50:36:ee:4b:62:1f:89:9e:53:7c:
47:8d:59:b7:28:00:87:f5:93:51:50:18:1c:4b:aa:db:8d:ec:
80:65:1a:c1:bc:9e:03:03:59:fa:e3:74:68:4c:7c:3a:73:90:
57:bf:f9:5a:15:00:7a:a6:6f:9d:8b:28:59:d9:0a:ac:fe:52:
29:6e:8d:88:d4:a2:2e:2d:24:18:cd:b3:df:ff:b7:39:7a:c6:
f5:56:c2:94:f3:8f:4b:46:ee:da:c9:8a:02:38:d9:d6:e6:f1:
dc:f7:7b:1b:60:bb:f0:d8:f7:73:8b:32:17:48:25:85:e7:08:
e8:f7:80:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:36 2025 by rpki-client