Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d85215e4-3cbe-39e0-b281-ae1d307dca47.roa
File: d85215e4-3cbe-39e0-b281-ae1d307dca47.roa (raw, json)
Hash identifier: VuGKrf7FrsxyZb+sh3Dzd0mdexg325FaYkPuB+TZQto=
Subject key identifier: 61:70:5C:AD:59:F4:49:93:88:5C:96:17:6D:F0:F5:6E:19:5C:F3:B4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848279FBEB3FA7C438769AD00C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d85215e4-3cbe-39e0-b281-ae1d307dca47.roa
Signing time: Tue 10 Dec 2024 00:45:17 +0000
ROA not before: Tue 10 Dec 2024 00:45:17 +0000
ROA not after: Sun 09 Mar 2025 23:45:17 +0000
asID: 13335
IP address blocks: 162.158.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:9f:be:b3:fa:7c:43:87:69:ad:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:45:17 2024 GMT
Not After : Mar 9 23:45:17 2025 GMT
Subject: CN=30a4a85b-8d62-43e3-9609-8f41938410fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:6f:3c:e7:16:ef:66:bb:dd:bb:1a:8d:9e:
c9:9f:0a:f5:5b:bb:36:9f:b6:53:bc:a2:2b:ea:d4:
c0:de:2c:a5:2d:e0:fa:76:e3:89:cf:c0:88:2b:76:
d2:0f:11:9e:d8:65:2a:62:ea:32:19:3f:32:70:45:
b8:f0:99:75:8e:57:d3:25:f1:9f:bb:2d:82:77:1d:
ea:24:36:86:60:ac:dc:d5:f6:2d:7e:f3:1e:31:45:
d3:dd:9a:27:5a:f1:0c:0f:4f:ca:a9:12:22:c8:7f:
8f:bb:a9:e1:6b:ef:52:80:6b:b3:ee:3e:c4:0f:28:
a1:57:74:cb:45:06:82:9f:1c:22:5d:fb:ac:36:b2:
84:ef:39:90:57:76:bc:27:83:db:8e:8d:54:dd:dc:
f8:76:db:79:d5:0b:47:d6:48:e9:71:f9:9d:c9:dd:
7b:11:09:67:8e:42:35:f7:2c:f2:b5:55:60:2e:cf:
72:2b:d6:07:b2:26:a6:b1:1c:36:d3:c1:bd:6d:09:
7f:ce:fa:ba:bf:f7:bc:d5:3e:1d:18:4a:05:89:d6:
db:ae:2a:4a:58:53:4f:f8:b6:cf:43:5a:11:8d:fb:
ee:e4:72:ee:f0:b8:11:ab:fa:ec:23:e3:37:51:c7:
ec:72:70:d8:14:6f:54:d4:54:22:45:d4:79:4f:4a:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:5C:AD:59:F4:49:93:88:5C:96:17:6D:F0:F5:6E:19:5C:F3:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d85215e4-3cbe-39e0-b281-ae1d307dca47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:4f:a5:4d:2f:8f:21:f6:12:b1:ee:d6:76:69:3a:32:c4:35:
8b:79:da:2c:ad:1d:02:c6:a1:aa:17:d6:52:ee:b3:7a:3d:3d:
cd:ec:dc:30:37:84:34:16:f8:b4:a4:0d:ca:c5:95:d6:f9:ea:
0b:0a:47:e8:d6:a5:cf:23:7a:46:4d:e2:b9:74:b8:88:97:7d:
23:62:9f:89:45:54:1a:47:04:eb:7c:43:88:23:65:85:67:21:
80:12:81:18:49:4d:bf:8b:a6:03:87:ee:c4:7e:51:3b:71:e1:
51:2d:94:45:e8:f7:58:6e:33:d2:52:b1:95:71:d2:54:27:ee:
d3:b2:47:25:f8:a5:4d:7a:06:23:8d:a9:e9:37:26:10:64:5a:
82:67:c6:15:7e:c2:c0:99:c0:7a:b9:ac:67:a4:87:a8:47:19:
64:61:24:77:69:e2:25:4c:16:f8:e1:76:1e:4f:dc:bc:74:65:
49:73:56:7a:34:c6:90:9d:4f:57:e2:dd:80:ca:33:20:d7:88:
0e:b6:fd:58:87:8e:8d:9b:3e:36:45:ba:dc:9a:24:98:76:6c:
c2:72:79:2b:31:c8:0b:29:6b:19:c4:9d:b3:5f:1b:71:22:f6:
e0:02:46:4f:16:a8:47:84:7b:59:34:5e:f5:25:e9:12:1c:1c:
3a:46:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:18 2025 by rpki-client