Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa
File: 0e27b779-c984-3088-944e-5d6cf8237999.roa (raw, json)
Hash identifier: vfTqSXgX+0bnULHDOKBW+y9q3KTWkJ8GhQh0v7TV0zo=
Subject key identifier: 5F:6B:1F:B5:D7:E0:95:B0:FE:BE:1E:9E:C7:4E:AB:0A:69:4F:5C:C2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848FA8BECC0B80B6E57589A0280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa
Signing time: Sun 23 Feb 2025 14:00:51 +0000
ROA not before: Sun 23 Feb 2025 14:00:51 +0000
ROA not after: Sat 24 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 162.159.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fa:8b:ec:c0:b8:0b:6e:57:58:9a:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 23 14:00:51 2025 GMT
Not After : May 24 13:00:51 2025 GMT
Subject: CN=403b6213-c663-4b52-b42e-bec9ff5237d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:cd:ae:8e:85:9f:b6:3c:9a:76:6d:5b:86:
e6:6b:a8:b9:70:2f:ae:e1:6a:ee:39:b8:d3:21:02:
12:6a:96:30:da:10:b7:f1:69:2d:fa:33:ab:8f:09:
e7:8c:31:b7:16:49:76:96:16:eb:76:f8:3b:46:06:
80:22:b7:20:a5:5d:39:60:e5:68:36:cb:0c:72:a2:
75:99:50:b7:f1:80:55:9c:c1:da:6d:34:f7:a5:da:
ad:c1:27:a7:1e:37:f5:15:30:e7:e6:b0:cb:47:23:
a4:e3:a3:9c:41:58:9a:da:35:f4:50:cd:eb:78:35:
c8:18:b0:9f:26:61:88:a3:c8:30:92:e5:54:44:6d:
b9:25:0f:2b:ba:a9:58:91:f4:24:b8:f3:e2:ad:59:
f7:91:c2:77:f7:24:7c:c4:58:bd:8f:a8:e0:23:be:
7a:4a:09:ee:b8:38:3d:a8:12:68:30:78:3a:55:96:
ee:77:9d:02:6c:2c:bc:90:09:84:e5:73:18:b2:a5:
62:51:a4:60:a4:0f:97:ed:59:05:69:23:88:4b:40:
87:b1:cc:8e:5c:8c:d9:ee:03:43:bd:c6:1c:bd:6d:
b1:a5:da:82:2f:a1:4e:23:11:19:54:55:25:e6:33:
c9:e7:a1:07:cc:ea:55:bc:e1:fc:89:10:80:82:c2:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6B:1F:B5:D7:E0:95:B0:FE:BE:1E:9E:C7:4E:AB:0A:69:4F:5C:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:8b:3a:10:e1:b7:22:46:1f:7a:7f:96:71:e7:90:bc:b2:30:
c7:90:67:bb:93:64:db:d8:57:47:65:f0:76:c8:37:ed:27:26:
f6:12:3a:58:23:32:a7:ac:5c:26:a3:c7:ca:26:40:70:10:14:
57:8c:8b:27:4c:00:92:c2:22:b6:19:ca:b3:14:64:fb:ce:d2:
3d:34:4b:5c:4b:26:39:fe:b3:08:f2:dc:3d:1d:72:da:33:54:
47:79:a8:db:4c:53:a2:05:65:df:f8:73:83:e3:25:08:4c:f9:
5b:52:d4:c2:34:f8:d1:f0:32:cb:83:db:fa:6f:3d:dd:69:d7:
4e:e1:e7:78:fa:73:20:e0:7b:b2:d5:35:1d:2a:62:2f:02:14:
45:1f:b8:08:93:1c:58:8d:e4:15:f7:8f:1f:25:9c:9a:13:f9:
71:ce:d9:bc:04:1a:10:73:d6:61:4b:04:5f:cd:a1:28:88:3f:
a2:1c:9d:75:ab:c2:c6:b1:18:6e:9b:30:1c:39:7c:7f:0c:82:
53:82:06:7b:ce:07:2e:ec:a4:c7:12:85:5f:f7:81:f8:9e:6e:
a4:35:15:95:0e:f7:48:bf:fc:cf:33:e9:bc:e9:c7:c1:eb:e5:
a9:32:c9:67:d0:67:6f:5d:06:02:c2:e9:16:57:fd:b0:52:44:
d2:97:71:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:42 2025 by rpki-client