Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52a0f98-eefd-3f6c-a0a1-575d9bef1103.roa
File: d52a0f98-eefd-3f6c-a0a1-575d9bef1103.roa (raw, json)
Hash identifier: qv/czVSY5G3A2WlfmtBNFZr9tOYxewRFavBF0Lir7aA=
Subject key identifier: 09:38:50:C0:51:09:1E:81:10:85:38:BF:9F:8B:2E:F7:F3:97:6B:D1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B2CCFA4200AE3ABD68A680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52a0f98-eefd-3f6c-a0a1-575d9bef1103.roa
Signing time: Tue 10 Dec 2024 01:23:40 +0000
ROA not before: Tue 10 Dec 2024 01:23:40 +0000
ROA not after: Mon 10 Mar 2025 00:23:40 +0000
asID: 13335
IP address blocks: 162.158.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b2:cc:fa:42:00:ae:3a:bd:68:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:23:40 2024 GMT
Not After : Mar 10 00:23:40 2025 GMT
Subject: CN=85bb4b89-f7bf-4caf-b995-38b33ae4ef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:ae:72:ff:0d:46:8d:83:dd:bb:29:b7:36:
75:fc:4a:66:00:fa:12:ef:89:b7:be:41:6f:a4:e3:
cf:fb:1a:e8:2e:16:df:b3:5a:c9:fb:d4:6b:99:46:
1e:2c:75:5c:b3:d0:c2:74:0a:2c:93:2d:5e:e8:d5:
69:d7:eb:b3:3f:ff:98:ef:c7:4f:13:8a:15:68:eb:
2a:92:7d:f2:4d:aa:86:ed:ec:b4:ab:9e:2f:2f:75:
95:38:df:8c:36:77:f8:67:a6:4b:c5:a5:0d:0f:6a:
ec:50:96:40:10:1e:11:a5:88:2f:52:e6:1f:ac:43:
be:0a:f2:b3:a1:6d:7e:94:40:0a:71:88:74:76:a2:
f3:a6:b7:87:0e:09:04:a9:4a:c5:d9:f3:05:50:0d:
fa:bc:e5:ea:6a:af:87:d8:93:a4:38:e5:d5:3a:e8:
fa:89:7d:5c:ea:b9:51:c1:80:f6:17:4f:9e:80:f1:
ec:ff:6a:f6:6b:d0:67:63:5f:68:3a:f0:47:bf:3a:
b1:f0:e8:30:7b:0e:fb:b4:7b:0e:02:27:7f:82:84:
20:1d:ef:e8:64:ea:cb:d7:78:1e:ec:cb:46:4f:a2:
dd:58:18:44:12:2f:bb:c1:fa:91:98:a2:ad:0a:ec:
74:2b:b0:ea:24:e6:c2:78:1c:59:53:b2:4f:35:f4:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:38:50:C0:51:09:1E:81:10:85:38:BF:9F:8B:2E:F7:F3:97:6B:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52a0f98-eefd-3f6c-a0a1-575d9bef1103.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:38:2f:66:b8:e6:06:3d:95:39:2f:de:07:e7:15:79:75:6d:
80:cb:7f:1e:ee:40:51:20:48:f6:52:2a:59:f4:c0:d0:e5:69:
58:4b:50:7c:2e:80:07:35:06:3d:1d:4e:b5:a7:16:00:8a:55:
70:08:ae:1d:24:47:8b:a0:65:8c:d6:a4:15:56:4f:e2:29:75:
3e:f7:89:05:ba:d2:9b:00:28:4f:ed:3b:7a:88:3d:99:d0:e4:
07:92:30:89:7e:81:a7:3c:42:69:06:b1:35:13:50:ed:8a:2c:
ef:ef:f5:82:54:e0:f6:2f:cd:26:67:88:04:16:f8:5a:b8:d6:
1b:49:85:1e:47:9b:61:00:a1:b7:de:a2:7d:b4:d4:51:fa:10:
08:31:25:2d:1e:7e:88:b5:97:aa:8c:a7:dc:11:58:55:da:f3:
b5:0b:e8:04:a8:6c:3c:2b:4c:da:bd:a3:94:30:19:5d:ea:81:
dc:cb:ff:78:22:6a:77:e2:b9:2f:6b:18:4d:63:b3:05:1e:7e:
5e:c2:14:87:d9:55:13:dc:b8:52:b9:c6:9d:69:48:ff:5c:40:
20:cd:a4:4f:cd:bc:7e:99:9a:16:fe:09:c7:15:45:95:af:79:
15:bd:f2:af:b3:c1:cb:fd:40:23:ee:90:a3:b0:68:58:ee:17:
77:3c:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:45 2025 by rpki-client