Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adb6b5c5-9f32-3fda-bf50-fa62db788566.roa
File: adb6b5c5-9f32-3fda-bf50-fa62db788566.roa (raw, json)
Hash identifier: jvnIrJpQQgSY6HSnH091mWiAdK5xT5DQRh6/kEU7fug=
Subject key identifier: F0:7C:FB:53:95:23:F5:46:58:45:50:E2:36:01:F4:55:5B:BF:4C:D5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848280F3128C3591A2DF6B4E680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adb6b5c5-9f32-3fda-bf50-fa62db788566.roa
Signing time: Tue 10 Dec 2024 04:29:50 +0000
ROA not before: Tue 10 Dec 2024 04:29:50 +0000
ROA not after: Mon 10 Mar 2025 03:29:50 +0000
asID: 13335
IP address blocks: 162.158.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:0f:31:28:c3:59:1a:2d:f6:b4:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:29:50 2024 GMT
Not After : Mar 10 03:29:50 2025 GMT
Subject: CN=f0a44713-1cc1-49bc-8088-26dcfe09927f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:f7:02:aa:86:d7:3f:d5:fc:80:e5:b4:94:
6f:1d:b5:ba:5a:85:a2:da:4d:08:24:8c:1b:c3:d0:
d3:82:7f:e5:3d:26:0a:7f:fc:1e:48:84:59:e0:4e:
6d:a2:b7:df:83:9f:32:ed:d2:46:fa:19:4c:e0:67:
a9:4b:77:6b:ce:62:f0:32:cb:28:25:b3:3c:91:5b:
31:1e:ec:59:8d:8b:58:e6:68:06:5f:bb:88:bd:5c:
e3:3f:ae:c3:88:fd:22:64:89:e0:f5:52:a4:2f:b5:
55:5d:6f:62:0b:a2:86:d0:2d:05:04:9d:a0:6c:c2:
db:f9:c6:3d:0a:57:16:eb:01:0b:c2:b5:bf:44:c1:
d9:97:ec:43:e8:bf:65:8e:a5:12:33:8a:01:0a:97:
c0:45:b6:a2:d8:e1:df:0d:ca:e4:2f:8a:f0:46:f5:
ae:65:a3:08:4d:ae:80:45:0c:2e:4d:60:4d:7e:0a:
96:c1:87:0f:46:70:b6:31:a9:97:14:d6:df:cb:7a:
e7:7d:10:e1:14:75:7f:7f:2b:1f:9c:22:a6:9f:c3:
d4:f3:2f:62:0a:60:9e:2f:f8:62:eb:56:f4:c3:d8:
b8:af:f1:35:21:23:99:68:2f:06:3e:cd:09:5e:60:
58:06:d5:03:5b:4d:fa:bc:22:74:83:bb:78:b9:87:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7C:FB:53:95:23:F5:46:58:45:50:E2:36:01:F4:55:5B:BF:4C:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adb6b5c5-9f32-3fda-bf50-fa62db788566.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:e2:57:9d:55:0c:e9:64:c0:eb:e0:cc:da:4e:a3:f5:41:52:
3c:03:9e:65:9f:55:a6:e7:c9:55:ac:2c:4d:54:ea:20:91:82:
22:bf:d3:3c:a2:13:ef:69:11:39:eb:c9:56:0b:44:a1:0a:3a:
7e:22:1c:92:aa:1c:03:eb:b4:d6:22:6d:60:63:f3:ea:21:b6:
96:38:d3:cc:8c:b4:b1:03:88:ae:ff:55:1f:6e:dc:01:00:0f:
69:0d:be:a3:2d:10:2f:7a:ac:40:d7:4e:b4:de:03:c7:f6:d1:
3e:35:69:db:56:b2:55:2b:fc:b0:20:79:2e:03:f5:eb:55:a7:
be:51:a0:6d:6a:1c:fc:e4:6e:59:1d:9c:c5:a5:8f:99:b0:20:
2a:9a:d2:32:4a:56:76:cf:03:52:e1:df:b5:f5:ff:3a:33:64:
41:46:18:a4:0f:bb:b2:d2:cd:e5:49:b5:d9:be:e2:c6:78:6d:
35:4e:8e:06:dc:ec:22:61:4d:e9:0a:27:f4:3c:3b:d8:d2:b4:
36:17:75:ec:4d:d3:b5:27:78:21:4b:91:a6:d4:a9:36:54:6f:
8f:4b:9c:b3:ac:b1:73:5d:95:6b:06:08:7f:b4:ae:d2:7e:3f:
de:c0:69:03:37:e5:9f:ef:bb:72:46:c2:d5:77:ec:67:15:5d:
10:55:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:08 2025 by rpki-client