Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad53e4ff-0450-3925-992b-779101ce3165.roa
File: ad53e4ff-0450-3925-992b-779101ce3165.roa (raw, json)
Hash identifier: klCLqpGiH9IwyjzNePZ7vp+eoqP71JpanvCodeZz/Ko=
Subject key identifier: 88:EA:81:C4:42:7F:DD:A3:3A:01:A4:C6:CD:1D:E7:C8:99:23:8A:E4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848280B9881A2CED066F8C51500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad53e4ff-0450-3925-992b-779101ce3165.roa
Signing time: Tue 10 Dec 2024 04:22:35 +0000
ROA not before: Tue 10 Dec 2024 04:22:35 +0000
ROA not after: Mon 10 Mar 2025 03:22:35 +0000
asID: 13335
IP address blocks: 162.158.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:0b:98:81:a2:ce:d0:66:f8:c5:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:22:35 2024 GMT
Not After : Mar 10 03:22:35 2025 GMT
Subject: CN=399a7f64-e0f3-4010-8814-4bfb6008bd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:30:fe:af:46:9d:53:e0:2c:c0:ed:31:20:
6f:63:85:b9:a1:a7:ad:6c:9b:22:47:16:b9:31:97:
2b:5a:46:e1:39:98:b3:14:37:4d:1c:3a:22:8d:52:
50:15:db:5c:1e:0f:fa:ca:f8:82:7b:97:5a:ab:ff:
e1:05:17:5a:ef:a3:a9:41:01:df:79:15:b5:4a:55:
d6:e8:e8:1f:92:0a:f0:ee:73:25:1e:38:b1:3a:d5:
1a:9b:e2:73:3c:c8:16:6b:1b:76:83:47:63:e6:18:
60:c8:6e:1e:d8:85:30:65:08:b0:d6:87:6c:8b:cd:
ca:47:90:79:2c:98:b8:10:43:ea:7d:a8:54:17:aa:
01:87:30:44:61:15:23:c2:b2:7f:b3:85:68:b1:2d:
39:0f:9c:57:54:ad:6b:81:c7:8c:51:63:b4:89:51:
c3:71:e2:f8:ee:01:a5:9b:9d:6f:12:45:b5:ba:54:
36:5b:c9:ab:90:31:5e:0f:d1:b8:e7:08:8e:3b:10:
f5:0e:4b:fc:02:6a:3f:72:95:89:8a:4d:76:52:b3:
78:b2:9e:9e:73:d8:4e:14:db:3d:f3:93:ba:be:01:
30:5e:c7:2e:0d:ef:bc:17:8b:dd:5b:b8:9c:64:87:
98:e2:b3:39:8f:a0:09:00:35:21:3b:a6:d8:4b:c4:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EA:81:C4:42:7F:DD:A3:3A:01:A4:C6:CD:1D:E7:C8:99:23:8A:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad53e4ff-0450-3925-992b-779101ce3165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:92:ee:c5:0f:30:12:a0:79:3c:11:ff:1a:10:3e:3a:80:fc:
33:16:95:91:5b:16:76:e6:2a:dc:53:05:e9:06:ad:9a:a3:15:
4d:82:7d:f8:c4:64:e9:47:eb:ec:37:7d:87:14:c6:e7:22:35:
35:86:a5:26:52:55:e5:d0:88:97:15:b0:d3:02:f7:82:ce:e8:
8e:83:65:fc:32:aa:9c:28:4d:42:d9:40:55:3e:1a:40:6d:1a:
5e:0c:b9:cb:db:f3:da:a6:4d:9d:7b:06:08:3e:7e:96:f4:0b:
db:5f:29:30:71:ee:84:ef:cc:7a:5e:e1:97:0a:24:63:1b:4e:
45:69:d2:57:0e:64:55:e1:97:35:3f:6d:2b:4f:f5:09:69:11:
3a:ff:f0:6c:5d:2d:b2:26:00:e9:5a:c6:84:71:e5:1a:80:22:
c0:f8:02:86:81:1d:d3:fb:34:26:76:fc:5a:8f:18:5f:c3:da:
ac:17:06:e1:f9:4c:64:cb:c6:08:5e:87:cd:06:06:bd:31:23:
61:7c:ad:25:18:17:4b:bb:ec:b8:84:ee:1e:8b:d4:5a:b2:7c:
d0:a8:2c:69:1f:01:2c:ab:8e:e0:e3:db:e8:af:69:a5:b1:45:
24:56:25:8c:75:41:4a:3c:99:c6:d8:75:6c:0b:e1:51:c0:5a:
ba:ff:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:12:42 2025 by rpki-client