Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db41c8be-c233-323c-9e1e-feb859eb7422.roa
File: db41c8be-c233-323c-9e1e-feb859eb7422.roa (raw, json)
Hash identifier: HbXngDOYGpBAXxtUfpfQ8sCWUPEOJqObky21EIgZrz0=
Subject key identifier: 19:DC:FA:C8:A1:87:24:83:B4:73:19:8F:EB:C3:B4:D3:37:0D:E9:A9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482819FF85B0337C71E1CC3100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db41c8be-c233-323c-9e1e-feb859eb7422.roa
Signing time: Tue 10 Dec 2024 04:51:36 +0000
ROA not before: Tue 10 Dec 2024 04:51:36 +0000
ROA not after: Mon 10 Mar 2025 03:51:36 +0000
asID: 13335
IP address blocks: 162.159.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:19:ff:85:b0:33:7c:71:e1:cc:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:51:36 2024 GMT
Not After : Mar 10 03:51:36 2025 GMT
Subject: CN=818a39ce-b5f2-408b-9d0f-25d00d25c8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:b6:6e:90:f6:15:63:fb:79:25:e0:c2:c5:
45:9a:03:1d:c5:04:5c:a2:ca:95:3d:b1:25:62:eb:
cc:68:12:26:6e:34:09:78:e0:99:01:6d:a5:c4:74:
7d:c9:e3:2f:6b:23:be:b7:14:5e:a0:29:f8:54:e4:
36:54:ee:60:14:4e:35:af:32:f3:a0:bc:ab:1a:15:
82:00:d5:ca:98:1f:3e:35:82:77:bc:ea:e1:d3:aa:
10:04:1c:77:29:c8:54:ec:7b:df:48:9f:f1:30:35:
e0:95:c3:f5:dd:de:8d:66:43:38:84:54:a3:f3:17:
f8:39:55:f6:83:78:4b:0e:10:07:70:bb:80:c4:80:
1e:41:e0:e9:ef:73:f6:f9:9f:d1:90:47:e8:dc:93:
ce:3f:e8:9e:a1:b0:bb:b1:4f:08:18:32:db:f7:2b:
36:aa:7e:02:5f:ff:84:79:6e:80:95:70:c9:54:67:
e1:e4:0c:bc:e4:fb:30:c4:09:32:82:80:e4:35:ca:
f6:8c:8f:e5:75:a7:c2:86:00:0d:ec:6d:d7:e1:1e:
79:90:9c:3c:99:bd:25:45:40:6e:7e:ec:e0:25:e9:
ef:f3:5c:e9:29:b4:31:49:b5:bd:13:6c:02:bb:47:
69:5f:f1:28:e5:78:54:b1:1d:07:86:3e:b3:92:18:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DC:FA:C8:A1:87:24:83:B4:73:19:8F:EB:C3:B4:D3:37:0D:E9:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db41c8be-c233-323c-9e1e-feb859eb7422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:7a:64:84:87:7b:11:62:29:ea:71:ed:d4:a1:8b:02:9d:0d:
c5:61:3b:0f:a6:cf:2c:8c:fd:d8:3a:e8:53:b0:42:73:98:3a:
75:f9:cc:4d:24:64:c5:18:a2:a7:34:ca:8f:89:6c:26:72:ca:
6a:c6:db:b3:0c:ab:1f:0d:c3:a7:78:5a:e5:01:e8:bb:78:35:
48:ed:e2:22:fb:54:98:42:b5:b4:f9:8f:af:35:a1:7a:14:63:
ad:07:3c:d3:2d:59:77:09:13:6c:01:d3:05:0f:53:07:ab:f7:
13:52:92:d4:72:1b:65:7a:49:15:5d:e4:8b:03:76:72:fc:23:
99:6e:a3:15:85:2f:4b:65:70:0a:4e:9d:eb:47:97:09:a0:7c:
85:b4:7e:55:30:7d:f2:67:02:6a:ef:b5:90:2d:8d:cf:ff:02:
2d:66:5b:c7:7b:8b:1b:f8:2a:32:ec:b0:ab:60:0c:2d:d9:5d:
fb:e2:34:53:00:e2:ef:47:2a:5c:f0:6e:9e:7a:99:e3:88:6e:
6e:b7:16:86:32:b0:97:57:4e:c7:4b:bc:f9:63:73:b3:59:d2:
bd:ac:27:6e:bf:e9:0b:a3:16:fc:e3:a0:8e:01:1b:8a:f3:d7:
4c:0d:2c:83:e9:1b:66:aa:79:e6:3e:fc:21:87:a2:95:de:ff:
c3:db:9e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:32 2025 by rpki-client