Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f37e063b-34ce-31be-9822-acab252989d0.roa
File: f37e063b-34ce-31be-9822-acab252989d0.roa (raw, json)
Hash identifier: 9gVPtBnQGDjXWp2uW1tzVxNLzej9lG66TDNUHcwgBFI=
Subject key identifier: 98:C8:86:F5:8B:AF:9B:7B:B5:BE:21:A7:25:E4:E5:11:AC:F9:0F:63
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B3619B40EC2B5F039BE100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f37e063b-34ce-31be-9822-acab252989d0.roa
Signing time: Tue 10 Dec 2024 01:24:51 +0000
ROA not before: Tue 10 Dec 2024 01:24:51 +0000
ROA not after: Mon 10 Mar 2025 00:24:51 +0000
asID: 13335
IP address blocks: 162.158.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b3:61:9b:40:ec:2b:5f:03:9b:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:24:51 2024 GMT
Not After : Mar 10 00:24:51 2025 GMT
Subject: CN=7cc7dfd6-4a9f-45ef-9326-2447d81755f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:87:57:9b:41:fa:e3:b5:a1:ad:bc:c8:f3:
14:84:a0:df:01:89:9b:32:62:b8:a0:ff:c9:1a:50:
18:ed:49:6d:69:17:fa:29:35:e3:f1:d9:2b:7c:56:
b0:53:25:33:1a:3f:c7:1c:e9:c1:e6:9e:d8:d4:be:
bd:6f:e1:b3:74:7e:71:d4:00:cb:a4:2e:62:5c:c2:
4d:e6:5c:c2:ee:57:5f:d2:5b:47:64:25:f3:d8:f3:
4e:19:17:aa:23:c0:f0:2e:65:8c:45:f8:5a:6f:39:
a5:35:b1:df:d4:0c:6f:0c:ba:4f:db:61:c4:ac:8c:
52:0a:ea:4c:37:cf:10:e7:93:0d:79:7f:00:21:d0:
1c:52:62:71:b5:7e:69:af:73:4e:ac:c1:a2:32:fc:
da:02:2c:ed:b4:1e:e2:ec:ef:9f:7c:8a:83:7f:77:
42:7c:49:78:d4:25:98:32:0a:a7:65:9b:ec:1c:5f:
1b:42:be:7c:dc:cd:80:75:56:23:f2:6b:88:ca:e5:
a0:ae:d0:d1:88:c3:f3:68:c8:91:4a:e1:4e:4a:ec:
59:6f:e7:37:9b:0a:46:5c:34:fa:f9:7c:93:38:66:
78:92:87:a4:0e:91:b2:b2:5b:8a:7a:ea:df:65:36:
75:b0:6f:98:cf:48:fc:28:79:64:f2:3e:a8:45:56:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C8:86:F5:8B:AF:9B:7B:B5:BE:21:A7:25:E4:E5:11:AC:F9:0F:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f37e063b-34ce-31be-9822-acab252989d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:90:97:fe:0a:65:3f:cc:5c:34:7e:86:36:14:48:8c:be:a5:
a8:f5:07:a2:7b:7c:ed:c8:d8:a2:b6:c9:7d:4e:87:7d:b9:2d:
b6:b3:29:f3:9d:14:2a:1b:52:cb:ad:bf:f3:b3:f4:0f:c7:18:
e2:93:16:67:9b:c9:2c:cf:83:ad:9c:7e:ac:d4:f8:2a:ab:c7:
09:5d:e8:2c:8f:4c:65:c0:c5:e3:3d:c6:c6:81:f4:d5:0e:2e:
51:63:15:cc:41:e4:22:d4:56:c8:f1:05:37:66:d1:9b:20:3f:
34:7e:38:83:59:aa:bb:5c:ed:7c:24:e6:7a:7a:45:6b:16:35:
c2:66:43:da:8e:40:da:4f:2c:57:3a:a5:62:b3:7a:41:19:ed:
2f:8d:68:8e:0a:e6:8a:f2:48:54:18:c6:54:4b:41:c8:7e:f5:
e3:f7:da:42:dd:5e:d2:1a:f4:07:d0:74:06:ff:9d:35:bd:13:
00:7b:76:26:d1:ea:88:0d:45:f1:d0:81:e2:2d:c2:1d:39:9e:
05:47:31:ce:08:c8:b2:32:9c:2b:ce:61:9d:15:f2:c5:83:3a:
f8:3e:72:f7:f9:96:e2:b1:e9:29:72:32:74:49:13:1c:34:2b:
27:72:d4:91:a7:4b:1f:9a:4a:b9:4c:2d:9b:ca:96:10:63:6c:
1c:97:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:21 2025 by rpki-client