Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d72e025c-b211-3e31-98ec-c3c76b5193fd.roa
File: d72e025c-b211-3e31-98ec-c3c76b5193fd.roa (raw, json)
Hash identifier: YhYE2zkBqe2zceZhatjpV5DjNpwM6aXymta/0HpboDs=
Subject key identifier: 6B:74:6C:F3:DF:A4:90:2F:4F:78:05:94:FC:BC:90:5A:B9:91:82:3A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A25C543F625B85A042FC58
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d72e025c-b211-3e31-98ec-c3c76b5193fd.roa
Signing time: Tue 10 Dec 2024 00:50:33 +0000
ROA not before: Tue 10 Dec 2024 00:50:33 +0000
ROA not after: Sun 09 Mar 2025 23:50:33 +0000
asID: 13335
IP address blocks: 162.158.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a2:5c:54:3f:62:5b:85:a0:42:fc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:50:33 2024 GMT
Not After : Mar 9 23:50:33 2025 GMT
Subject: CN=8bc9000c-5ee5-4bb6-82ea-e9f37c4dabc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:f8:40:1a:a4:d2:35:b7:cc:3d:2c:ae:ca:
82:4f:40:21:d3:f1:b7:3f:56:08:e3:11:f3:03:5f:
4a:ea:a4:c3:34:d7:bf:f9:07:02:d9:10:2f:53:56:
15:69:5d:0f:a8:5a:3f:19:32:29:06:13:ae:a5:1f:
3a:f2:c6:39:bf:49:a6:d5:a5:0a:5e:26:f2:2c:9e:
16:c5:23:27:9a:ef:a0:e7:f1:3c:10:cd:ee:dd:8b:
f0:79:76:f4:82:94:26:85:47:c2:45:37:07:87:0f:
89:c3:45:69:dc:58:cf:66:79:cb:93:de:4b:ac:38:
84:62:2b:18:35:e4:f2:4c:56:8b:83:a7:9b:61:47:
49:63:51:9e:28:d5:ce:c1:d2:c0:d2:0a:22:92:31:
c6:e8:c2:1f:5d:a9:d4:84:bc:02:10:4a:ba:aa:de:
b4:d4:89:a3:12:85:c5:72:dc:28:53:19:c4:4c:58:
ae:2c:ea:60:7b:62:d1:a0:8e:bb:33:aa:2d:21:8c:
ff:9e:34:6a:f9:74:c0:c6:67:9e:e5:68:3f:98:6f:
c7:8f:f8:e6:95:96:ac:84:df:b4:0e:16:9d:c9:0f:
68:0a:15:3c:25:71:72:32:98:ce:18:5c:40:d9:3a:
34:66:7d:dd:65:a0:c4:0d:fb:3d:d1:f2:0a:32:7d:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:6C:F3:DF:A4:90:2F:4F:78:05:94:FC:BC:90:5A:B9:91:82:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d72e025c-b211-3e31-98ec-c3c76b5193fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:2d:33:63:2b:83:57:50:fe:6b:ac:95:fc:83:65:95:b5:0f:
28:ab:3d:a6:75:92:fb:f9:e2:c9:ae:ce:13:a5:95:1e:4e:b4:
5e:ec:78:b1:e7:07:a8:86:1d:87:79:ee:a1:c7:d0:bc:88:a5:
f8:10:ea:c9:4e:a4:5a:d2:11:2e:0f:2a:5f:6e:e0:97:8f:ef:
28:04:d6:4a:a6:d5:20:45:1c:ba:c1:12:3e:11:21:76:27:8f:
1f:4b:13:c9:25:7e:47:2d:7f:70:7b:a8:b2:0d:06:25:20:3a:
ba:f5:97:98:00:73:a2:26:1c:56:20:ac:55:99:b5:a1:02:9a:
28:d7:12:e5:16:68:29:9f:fb:24:16:74:93:e5:26:b2:5a:1c:
ab:77:b0:81:82:ed:62:3b:03:20:38:85:30:36:4c:d6:66:8b:
fa:85:92:39:53:d1:6d:e7:bd:68:91:80:2c:1f:8f:fd:5d:49:
d1:1d:08:7d:40:6f:b6:41:4d:2b:48:74:03:7c:b3:ca:62:0e:
94:3e:2d:75:1b:f5:c5:c6:39:77:35:c0:2a:1f:83:18:7d:0a:
f5:da:5e:f9:cd:b0:80:f6:02:6f:1e:5d:77:3b:78:80:0c:06:
13:94:99:4b:7a:75:dc:b3:5c:45:d7:e0:c5:cb:b8:1d:77:67:
62:5a:c7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:17:34 2025 by rpki-client