Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cbf9a1e5-8296-3dd7-b165-a687fdfc8717.roa
File: cbf9a1e5-8296-3dd7-b165-a687fdfc8717.roa (raw, json)
Hash identifier: lJLoDz+OS5qVJPqfQv58wbV9kKkGVo1pM6TKcMU+HZ4=
Subject key identifier: CD:15:FA:BA:6E:B3:13:E5:21:C9:DA:EE:94:8F:39:22:62:2D:53:AF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482811F7F62FDBDB26A43F9A70
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cbf9a1e5-8296-3dd7-b165-a687fdfc8717.roa
Signing time: Tue 10 Dec 2024 04:35:26 +0000
ROA not before: Tue 10 Dec 2024 04:35:26 +0000
ROA not after: Mon 10 Mar 2025 03:35:26 +0000
asID: 13335
IP address blocks: 162.159.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:11:f7:f6:2f:db:db:26:a4:3f:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:35:26 2024 GMT
Not After : Mar 10 03:35:26 2025 GMT
Subject: CN=eb404436-368a-4194-a0b7-be9388a6016d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:c8:ca:4a:ab:3d:6a:6c:6a:c3:7d:a3:5b:
a5:5d:30:aa:ff:8b:d2:53:ba:70:7f:6b:ca:45:72:
f1:2c:bb:0e:da:45:9a:c1:96:d2:1b:14:ff:10:2a:
f4:3b:83:c1:b7:d1:e2:9e:65:07:64:50:86:2b:d6:
52:dd:2c:9c:bf:9c:d5:ce:8b:fd:47:46:a3:79:ae:
11:05:16:56:74:0f:cc:73:5e:bb:04:6a:e7:62:fc:
c9:0c:93:f9:3b:5f:5c:1b:64:ef:c4:54:89:8f:b0:
44:25:1a:3d:30:32:37:81:4b:97:09:e4:65:5d:e9:
74:7e:5d:43:66:df:b0:8a:15:64:f3:45:c3:65:aa:
48:f7:28:d0:5c:bd:9e:a5:15:f5:21:50:3c:fe:33:
23:1e:7d:87:88:99:5e:7e:81:d7:22:9f:59:1d:a8:
cf:59:5f:02:ad:7a:bb:0e:04:e5:05:f2:08:37:fc:
a5:06:96:14:88:32:12:da:ed:4f:f8:33:7a:b4:da:
99:46:aa:84:4e:3e:9f:f6:70:03:88:a2:08:fd:2f:
38:25:16:d0:e4:c5:5b:46:5d:fa:97:75:3f:09:cd:
56:98:f6:a8:50:7a:75:ce:8d:49:06:30:83:38:f4:
3f:4c:6e:65:e0:0e:eb:ad:31:ac:d4:98:c5:89:42:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:15:FA:BA:6E:B3:13:E5:21:C9:DA:EE:94:8F:39:22:62:2D:53:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cbf9a1e5-8296-3dd7-b165-a687fdfc8717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:55:4e:eb:b1:12:e5:5f:2e:90:d2:aa:c2:3a:f6:50:b6:0a:
ae:54:ec:3d:02:4c:00:54:d9:69:36:83:1b:73:ea:18:af:7b:
4a:41:ab:55:5e:c1:d2:cc:4e:52:5b:05:c3:43:ba:63:73:83:
ba:b7:2e:c6:5c:40:a0:6e:2f:fc:c8:a6:07:fa:00:39:73:4a:
bb:dd:13:f3:44:7a:51:fb:fa:15:09:c7:30:1a:1c:ab:a5:ae:
dc:eb:9a:9f:dc:52:85:c9:a4:7c:02:49:a2:13:99:8b:8d:dd:
fd:da:c7:0c:4f:0d:ea:22:b8:03:94:0f:e2:f2:1f:e7:07:20:
dd:14:b7:11:06:a5:0c:c7:c3:4f:37:70:04:74:ce:94:e6:fe:
d8:c2:47:81:32:d3:ae:d2:21:9f:73:8b:bb:46:be:61:2f:d9:
3a:b1:f6:b5:1d:f0:12:e7:85:68:a2:23:0f:70:ce:08:b4:c9:
09:55:43:3d:9f:8f:e4:5f:f8:fe:d1:1a:aa:e3:ae:12:18:2c:
8d:5c:62:38:11:41:1d:ba:7f:0e:07:ff:1c:3c:79:32:e6:30:
2a:63:01:e4:85:58:22:ce:46:19:28:2e:d5:07:4d:4a:6a:45:
45:7a:f5:a9:a1:33:e6:95:84:4d:bc:82:b6:75:24:23:09:4d:
9c:3a:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:55 2025 by rpki-client