Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb9c66f0-a4b7-3d62-a215-e11e924c8a5e.roa
File: bb9c66f0-a4b7-3d62-a215-e11e924c8a5e.roa (raw, json)
Hash identifier: XCZdazf30Xc2kt52E7JlA3H37HZKLz1FHim01FwSWBw=
Subject key identifier: 66:9F:77:17:51:13:C6:AF:75:70:CE:4E:76:39:87:FE:DD:8F:52:A9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B8047C6882992B63EDA080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb9c66f0-a4b7-3d62-a215-e11e924c8a5e.roa
Signing time: Tue 10 Dec 2024 01:34:11 +0000
ROA not before: Tue 10 Dec 2024 01:34:11 +0000
ROA not after: Mon 10 Mar 2025 00:34:11 +0000
asID: 13335
IP address blocks: 162.158.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b8:04:7c:68:82:99:2b:63:ed:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:34:11 2024 GMT
Not After : Mar 10 00:34:11 2025 GMT
Subject: CN=cfa5ecf7-d1b0-4488-82ab-28803c803669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:84:6a:80:5d:f2:73:9b:58:42:78:de:c4:
99:e6:b9:12:48:27:c5:64:10:c7:a0:fb:9c:93:69:
af:e5:2d:b0:d6:81:bb:48:6c:e3:aa:e4:4a:be:8e:
1d:aa:79:b8:9f:d0:12:c7:1e:26:5f:c0:58:b5:b8:
c0:a3:d7:20:45:cc:76:69:de:07:fc:a2:df:f2:a0:
64:05:e1:31:ec:86:1c:c0:ac:5a:50:4d:0a:33:ec:
5b:54:7b:cb:10:d5:4a:9c:1a:2f:64:f3:f7:5d:00:
8c:6e:d2:65:55:49:ac:0f:a1:f4:ae:4b:eb:fa:26:
3a:c7:c7:6a:fd:f2:bf:3c:10:24:d4:55:ab:3e:44:
a5:c4:4f:d4:2e:39:02:5e:f5:f8:29:fa:14:fb:cc:
bb:1f:b6:d3:f7:d3:28:65:ca:27:7a:e6:3b:0a:08:
5a:1b:5d:4b:90:61:a4:fa:ae:dc:24:4f:5c:c8:d8:
2e:03:9b:2c:e1:a4:10:a9:d6:4c:3b:78:29:fb:03:
13:9e:4b:81:46:27:c5:54:f1:c3:83:4e:0b:9c:e1:
a4:69:7a:81:f0:6b:e9:f2:95:36:ad:b3:06:f3:ff:
85:74:21:a7:c1:3b:92:1f:bd:ba:c3:89:d5:6b:0d:
7b:01:c0:b9:66:41:bf:87:85:df:8a:1b:ef:5c:01:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:77:17:51:13:C6:AF:75:70:CE:4E:76:39:87:FE:DD:8F:52:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb9c66f0-a4b7-3d62-a215-e11e924c8a5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:7a:c2:36:92:a1:82:0b:88:bb:b1:eb:ec:1e:a9:d5:40:5f:
3a:e3:86:63:c8:ec:19:0b:b7:48:47:b8:ce:05:29:b5:1a:3f:
c8:c9:91:e7:9b:af:1c:4a:f2:f1:5f:4c:75:77:98:31:3f:d4:
74:2d:e3:80:f8:38:59:bd:78:a5:eb:37:43:33:b3:89:d1:9a:
93:8e:10:d4:79:b8:c0:e8:67:26:4c:58:ba:fb:61:42:a2:fb:
df:d3:78:52:c2:12:e5:b5:b9:76:62:78:8e:a7:ae:10:f1:56:
46:ca:54:cc:8b:50:44:98:93:2f:c4:d6:4e:e9:13:14:8e:5e:
74:84:ce:a1:c3:f0:12:b7:ea:bc:d6:a2:4b:56:32:37:83:71:
8d:60:b7:c8:5d:e6:de:a6:93:c5:c7:20:d6:d3:e3:60:39:96:
40:16:34:36:2d:5c:64:93:a0:59:3b:a4:37:36:86:65:9e:08:
61:b0:75:af:71:2a:2b:76:cc:cb:8d:bc:53:be:1c:08:06:40:
cb:cb:e6:c7:03:1c:f5:7c:af:d7:ec:66:5d:63:57:c9:70:79:
24:90:a2:b5:cb:ce:a2:cf:6e:fc:3d:98:15:34:2f:98:02:6f:
ab:b2:bd:1c:34:a1:29:cb:69:b1:46:1e:12:43:d1:9c:25:87:
35:60:7d:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnuAR8aIKZK2PtoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMzQxMVoXDTI1MDMxMDAwMzQxMVowLzEtMCsGA1UEAxMk
Y2ZhNWVjZjctZDFiMC00NDg4LTgyYWItMjg4MDNjODAzNjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoiEaoBd8nObWEJ43sSZ5rkSSCfFZBDHoPuc
k2mv5S2w1oG7SGzjquRKvo4dqnm4n9ASxx4mX8BYtbjAo9cgRcx2ad4H/KLf8qBk
BeEx7IYcwKxaUE0KM+xbVHvLENVKnBovZPP3XQCMbtJlVUmsD6H0rkvr+iY6x8dq
/fK/PBAk1FWrPkSlxE/ULjkCXvX4KfoU+8y7H7bT99MoZconeuY7CghaG11LkGGk
+q7cJE9cyNguA5ss4aQQqdZMO3gp+wMTnkuBRifFVPHDg04LnOGkaXqB8Gvp8pU2
rbMG8/+FdCGnwTuSH726w4nVaw17AcC5ZkG/h4XfihvvXAGNDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGafdxdRE8avdXDOTnY5h/7dj1KpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmI5YzY2ZjAtYTRiNy0z
ZDYyLWEyMTUtZTExZTkyNGM4YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALl6wjaSoYILiLux6+weqdVAXzrjhmPI7BkLt0hHuM4FKbUaP8jJkeeb
rxxK8vFfTHV3mDE/1HQt44D4OFm9eKXrN0Mzs4nRmpOOENR5uMDoZyZMWLr7YUKi
+9/TeFLCEuW1uXZieI6nrhDxVkbKVMyLUESYky/E1k7pExSOXnSEzqHD8BK36rzW
oktWMjeDcY1gt8hd5t6mk8XHINbT42A5lkAWNDYtXGSToFk7pDc2hmWeCGGwda9x
Kit2zMuNvFO+HAgGQMvL5scDHPV8r9fsZl1jV8lweSSQorXLzqLPbvw9mBU0L5gC
b6uyvRw0oSnLabFGHhJD0ZwlhzVgfV4=
-----END CERTIFICATE-----
Generated at Fri May 9 06:19:49 2025 by rpki-client