Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb45f54a-b3b2-33eb-a44b-c5325930af0d.roa
File: fb45f54a-b3b2-33eb-a44b-c5325930af0d.roa (raw, json)
Hash identifier: y1W1o+zKwcPvIQAhoDXhv62inUWiOHgLEve3UwhEGsA=
Subject key identifier: 0B:89:7E:81:AC:10:86:F9:9E:88:A1:0A:BA:B5:56:B4:3D:56:56:8F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848279FE1A7E689C40690C11A40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb45f54a-b3b2-33eb-a44b-c5325930af0d.roa
Signing time: Tue 10 Dec 2024 00:45:33 +0000
ROA not before: Tue 10 Dec 2024 00:45:33 +0000
ROA not after: Sun 09 Mar 2025 23:45:33 +0000
asID: 13335
IP address blocks: 162.158.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:9f:e1:a7:e6:89:c4:06:90:c1:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:45:33 2024 GMT
Not After : Mar 9 23:45:33 2025 GMT
Subject: CN=bd8e49ca-7a5e-4f1c-8646-2992812142d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:de:05:1e:98:36:cf:6b:6c:88:49:25:96:
ac:cb:ef:71:d0:3e:82:65:14:12:3e:ef:e7:99:ac:
99:56:8d:e9:e7:65:2c:c5:a4:ad:3a:3d:44:e6:c0:
e0:8a:94:31:94:6f:bc:42:8a:a9:a0:e3:f0:17:fc:
4b:79:bd:82:88:71:a0:9c:2d:38:99:ed:0d:39:c6:
0d:23:55:c9:3d:21:48:f8:cc:09:c3:fe:c3:1f:85:
34:9a:6b:8f:f5:46:d2:4e:a8:5b:ce:29:b6:6f:6a:
09:66:24:97:a1:4f:6c:c5:a5:e8:21:0f:d2:bc:a8:
f3:fc:05:e1:d9:b8:a6:2a:7f:54:ba:76:0e:88:29:
32:b9:f5:d4:17:47:72:12:d7:23:d7:1d:3c:82:45:
31:32:d9:df:4f:97:af:0e:9a:de:e9:86:75:67:33:
74:2d:83:89:bf:d2:ca:0e:da:4c:c0:10:1b:56:6f:
4b:2d:e8:49:a9:8a:b7:81:47:a7:91:ef:2e:5a:93:
35:52:ce:cc:8f:16:3d:01:32:2f:28:49:4d:20:41:
3e:5f:0c:26:33:34:dd:a5:ef:16:f1:1a:14:e8:aa:
e8:cf:5e:3d:0c:a2:30:16:c8:77:44:52:03:fa:81:
ab:ee:f7:4e:92:85:16:c6:9b:be:4f:3a:75:49:8d:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:7E:81:AC:10:86:F9:9E:88:A1:0A:BA:B5:56:B4:3D:56:56:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb45f54a-b3b2-33eb-a44b-c5325930af0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:f0:e6:ae:2e:8f:1a:06:dc:e7:36:36:77:be:67:a7:c3:1d:
2a:c9:e0:0f:48:f7:af:55:b7:fb:5a:a9:29:09:20:41:81:05:
5c:aa:08:42:ba:45:97:fd:ab:b4:f5:dc:1b:75:7a:2b:c7:6b:
96:a0:fb:64:71:82:a8:dd:4e:b8:ec:c3:88:20:2a:38:ea:03:
9c:b6:5e:b0:1e:bb:65:84:76:ac:7e:55:ba:bc:d0:ae:84:2c:
45:3c:59:3c:09:2d:a6:d1:31:64:b5:c6:e7:c9:ad:4a:69:df:
a1:68:2e:35:75:16:6d:ec:e7:6d:1c:14:bd:88:30:70:c6:95:
bb:78:86:9b:56:5e:f9:68:1e:59:70:fd:e5:e1:a4:35:46:6c:
07:c3:06:90:d3:5a:30:4b:9b:70:cf:89:22:98:da:5a:07:d3:
00:3f:90:d9:b4:2d:a7:79:99:5b:73:fb:05:53:e8:44:3e:28:
8a:ba:60:59:b1:f1:8a:52:d2:aa:db:2d:bd:eb:4e:60:12:59:
20:5b:33:67:98:12:7e:24:40:4d:f6:6e:42:2f:69:28:ae:b4:
7a:9b:43:7e:3d:d5:9d:bc:67:1a:55:50:3d:1a:16:42:2a:74:
3a:93:c8:9a:38:e0:3d:a7:63:c1:ee:c1:73:57:14:69:b9:1c:
79:52:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:12 2025 by rpki-client