Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/336add42-6abf-3062-9bd8-14b956f005ef.roa
File: 336add42-6abf-3062-9bd8-14b956f005ef.roa (raw, json)
Hash identifier: BL67elZx87Ixc7hPVrCmtheC9MbXwnofGp6eh5s7ebo=
Subject key identifier: 65:A1:47:AE:6D:1C:68:77:9E:70:52:A2:A1:67:63:7E:C0:1B:43:29
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BFCDD45ECFE1FA25A3600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/336add42-6abf-3062-9bd8-14b956f005ef.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.158.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:fc:dd:45:ec:fe:1f:a2:5a:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=df5a03ee-a193-46f0-9240-d38eb95c285a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:e5:ee:b0:b1:a3:66:c5:93:89:47:20:f4:
83:18:56:9b:d4:66:6d:be:7d:81:d8:71:cd:c7:0e:
21:30:0e:2d:c9:45:a3:be:32:07:d2:07:6e:d5:58:
ff:01:96:1d:b6:fa:69:18:ce:b6:d4:e4:ad:78:c6:
6b:21:60:10:20:68:bc:98:6a:7f:12:6a:60:15:32:
ec:db:67:49:d4:2b:fd:25:cd:89:6c:be:e8:56:aa:
03:c1:63:fc:e9:39:9b:5e:61:3f:82:eb:dc:96:f4:
14:74:41:db:d0:ac:ea:11:fb:ff:4a:44:f5:dd:df:
8a:57:2c:e6:40:9d:39:64:bf:62:8d:85:08:31:7e:
d2:95:3b:37:a8:1f:75:95:eb:c8:21:ce:0d:84:61:
51:d0:59:50:5b:4e:95:e9:b9:0a:a9:28:ff:da:ea:
9b:87:c6:31:8f:b6:b4:1f:19:c2:26:45:78:c3:f0:
45:e7:d1:31:a6:0e:1a:89:36:4b:e9:4f:8b:5d:3f:
c3:52:fd:d5:c7:d9:58:37:60:2d:27:b0:83:09:23:
2e:b9:f3:af:b1:f8:e3:63:90:8a:ff:e2:dc:cc:a4:
a7:96:c3:c6:14:0a:8c:73:05:6d:88:53:8d:99:3a:
5c:06:97:c0:75:83:9d:14:5d:d3:6c:e1:47:f0:c4:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A1:47:AE:6D:1C:68:77:9E:70:52:A2:A1:67:63:7E:C0:1B:43:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/336add42-6abf-3062-9bd8-14b956f005ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:6c:6c:77:7f:5d:9c:26:86:ad:1e:b3:fe:7a:c9:b2:3b:38:
2d:35:e5:06:d8:b4:8c:74:5b:1c:e8:6f:65:76:87:0d:cb:91:
92:72:3b:73:59:41:94:2e:85:0c:69:42:44:df:86:d1:72:fc:
41:15:3c:96:4c:a3:90:f7:de:2f:c2:68:db:37:95:65:ff:74:
68:bb:d0:a8:5c:d7:7e:2b:e4:1f:0f:6f:43:8d:f8:63:a7:17:
65:2a:24:6b:c7:43:06:61:48:1c:75:6c:fd:d1:9d:95:9c:f8:
ed:35:e2:4e:0d:85:d5:48:57:ed:e5:a4:c7:27:48:5f:c6:69:
99:4e:98:8b:52:39:23:a1:e5:a1:b3:57:f1:2f:b3:66:c2:d2:
a9:a8:4f:28:2b:b8:0d:f3:66:dd:9f:a0:87:2d:67:e1:41:cb:
d0:95:cb:fb:8b:0c:46:e5:19:39:2d:c0:ff:be:86:43:ae:a5:
0d:02:81:33:74:95:0b:6e:25:a7:cd:12:c8:cc:6c:e5:41:32:
81:ea:98:c9:79:60:94:e3:bc:8f:69:28:c4:e7:e5:a3:a6:de:
9a:02:02:d9:5f:c6:e2:6a:82:7c:e2:8b:fb:02:53:98:6a:e7:
fc:80:81:b6:d8:44:a7:af:7e:bc:47:d9:c6:9a:56:27:c8:21:
b1:0d:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:17:56 2025 by rpki-client