Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa
File: ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa (raw, json)
Hash identifier: KEPbXf8QogWEIp8KdKs6clIK/P+BbirUYlpoQrH54y8=
Subject key identifier: 05:9A:7F:4B:BC:27:BD:37:88:FA:B4:CA:C8:E1:D7:6D:48:02:90:C5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A24AFFB686D04072061640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa
Signing time: Tue 10 Dec 2024 00:50:25 +0000
ROA not before: Tue 10 Dec 2024 00:50:25 +0000
ROA not after: Sun 09 Mar 2025 23:50:25 +0000
asID: 13335
IP address blocks: 162.158.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a2:4a:ff:b6:86:d0:40:72:06:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:50:25 2024 GMT
Not After : Mar 9 23:50:25 2025 GMT
Subject: CN=d502ce9d-c04e-4b99-b55e-179717113fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:05:8a:ed:38:0e:d8:7b:82:da:5c:1d:ed:7d:
a6:0b:75:1d:8c:0e:7d:04:ed:21:36:eb:af:db:40:
56:13:dd:45:86:b0:da:af:86:f6:d6:08:20:f7:44:
a8:c2:5e:28:6c:38:1d:1a:28:f5:51:63:2d:b6:ed:
f5:e1:4a:bf:cc:76:15:62:c3:57:53:96:13:f0:21:
d5:1c:10:9d:38:45:f2:75:19:21:eb:24:cb:7e:47:
8b:94:6b:d5:87:83:f2:c9:f1:22:00:65:8b:44:6c:
ff:f4:5a:32:64:45:2b:7c:97:a4:b9:db:70:84:8d:
86:49:3f:f5:5c:ea:e1:88:a3:49:94:22:c8:bf:5b:
35:02:c3:73:b8:f5:16:54:6b:b3:56:64:43:0c:54:
a8:d3:a7:ef:b7:c7:11:b2:2d:e5:ca:21:bd:44:b4:
03:38:6d:b2:c1:3a:d8:28:7e:08:0a:ef:1e:aa:a1:
8c:ab:c7:a9:90:ce:a7:2a:30:e7:8b:80:e8:ee:f1:
02:42:ad:d8:18:45:71:7f:f6:91:32:2f:a0:94:69:
71:70:04:8d:8b:34:4a:b2:26:39:6f:33:c6:dd:e5:
33:a7:85:70:2d:ac:26:56:20:d7:1d:ea:f7:e4:06:
4f:50:8b:fe:01:b0:c3:10:00:91:cd:17:f3:f8:a6:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9A:7F:4B:BC:27:BD:37:88:FA:B4:CA:C8:E1:D7:6D:48:02:90:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:0f:e3:00:5b:06:2b:01:b1:0a:15:80:2b:8e:64:9c:23:da:
6d:0e:c8:f8:e1:37:33:37:81:82:fe:80:39:65:a2:bb:9b:c5:
ee:39:90:3a:4f:54:87:e8:79:ef:49:71:38:e0:db:b8:28:27:
22:a1:c9:6f:c3:13:56:00:6e:6c:91:00:66:49:74:e2:71:9c:
34:e2:d6:49:3d:c2:35:40:1c:aa:c5:eb:b3:28:5c:11:95:4e:
66:82:5e:79:da:94:61:a8:ce:22:9f:ae:07:58:1b:97:ea:7b:
26:63:80:13:b8:16:cb:bb:4a:7b:59:5d:25:82:0e:c2:cc:9f:
0f:65:f5:9d:88:e7:75:65:12:c9:b0:45:d4:1a:f0:2a:8f:eb:
f9:d4:ee:02:a5:ae:01:a2:41:aa:de:5a:1f:52:13:6a:85:cf:
c6:10:71:4f:1e:c5:26:c9:67:ba:f1:97:90:00:1f:a9:da:9f:
b5:58:4f:16:01:db:72:42:91:bc:79:0d:80:21:0e:14:d9:02:
bf:0f:57:60:ec:d2:9f:b7:b6:30:b8:16:78:84:6f:b1:47:9d:
56:15:09:d4:ef:92:19:58:91:55:ed:65:d7:70:33:a1:fe:2e:
df:62:09:f7:8c:2f:76:80:6f:98:2e:d0:b9:90:12:51:86:55:
20:0b:5e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:09 2025 by rpki-client