Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40b080e8-671e-3436-bd77-0141d7461aaa.roa
File: 40b080e8-671e-3436-bd77-0141d7461aaa.roa (raw, json)
Hash identifier: A9r1e17TqtRahtRJhrKwPoHkmYZRvri478YcJ465TSI=
Subject key identifier: 88:43:C9:E4:A7:F0:A8:F4:11:A9:2D:0B:20:B6:92:B5:CB:60:03:AA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C08E607E317034FDA2680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40b080e8-671e-3436-bd77-0141d7461aaa.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.158.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:08:e6:07:e3:17:03:4f:da:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=6f6622fa-87ce-49bc-b050-ab4c1c41b8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:01:72:77:b6:70:47:95:0b:0b:5c:74:d8:
04:92:b1:78:93:06:f5:8d:db:21:e3:5f:65:5f:4b:
5f:24:24:43:1a:40:0c:20:7f:b5:38:70:7e:30:4a:
bb:b3:ea:29:5b:b2:ad:91:f8:60:c2:1d:fc:ae:33:
78:bd:7e:80:3f:63:32:84:5c:61:1b:2b:aa:c0:3c:
47:93:f7:0f:16:b0:7d:79:4b:99:89:05:4d:91:b9:
e5:7d:a0:42:ef:ec:28:b0:82:3b:45:a4:01:4d:66:
14:6b:dd:0e:18:11:c7:02:12:95:17:ab:21:1d:41:
e7:c5:13:af:c8:81:ba:cf:2f:ff:02:c8:f1:70:94:
32:eb:22:7d:a0:45:0d:96:42:00:96:b6:15:b7:02:
47:5c:19:ed:21:fc:dd:c8:60:08:47:b8:b1:ac:1c:
36:a5:f1:81:45:cc:47:95:2a:b4:87:47:c1:b9:ac:
30:15:67:58:f8:41:a5:f5:e8:00:01:a7:24:72:bb:
0c:63:d4:8f:4a:d8:3e:89:19:3a:65:72:23:e3:97:
1d:ea:d6:51:30:0c:30:8c:4c:25:72:19:1b:a6:a9:
3d:aa:4d:a1:35:93:48:a0:22:f3:59:15:d6:b9:a7:
03:a3:20:1f:a1:84:57:2b:da:b7:83:56:af:a0:37:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:43:C9:E4:A7:F0:A8:F4:11:A9:2D:0B:20:B6:92:B5:CB:60:03:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40b080e8-671e-3436-bd77-0141d7461aaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:e8:51:68:41:31:b2:ce:38:6a:ff:61:5c:b8:6e:0e:66:48:
05:41:50:d0:9a:41:f3:83:82:45:fd:11:78:0a:81:e9:12:c4:
52:29:f0:db:86:0b:a9:5b:b3:e1:68:ca:09:7b:5f:0f:ed:46:
d3:7a:e9:8c:23:6e:6c:a0:c3:6a:8a:4e:8b:24:21:9b:c6:7e:
7d:ac:73:ac:f8:d8:2b:9c:4d:fb:24:65:3b:0e:ef:97:f3:2b:
05:c2:b5:17:19:9a:fb:47:40:d1:bf:a1:f9:cc:80:9d:98:2a:
dc:b9:b0:b7:67:b3:80:b3:6a:c7:f3:59:0e:60:0e:e5:19:95:
1c:01:d1:4f:03:86:8a:b9:33:4a:b9:c6:0d:89:1c:9b:f9:2c:
68:30:61:95:4f:1e:4f:42:b7:6e:9b:01:a1:91:16:ff:5d:31:
89:69:1e:57:c1:0a:60:d7:ee:cb:78:50:0a:27:69:2e:02:31:
ad:98:de:26:11:ee:ee:b0:42:5f:c6:70:23:3a:32:28:f0:9b:
5e:9b:62:66:8d:27:27:22:c9:49:7f:f8:cb:ae:69:3c:59:56:
fb:f5:a6:80:3a:5d:61:79:8f:e1:c4:9d:78:aa:82:66:ff:d7:
0c:9e:f2:91:9b:0a:7b:7c:75:03:c3:41:05:e8:44:59:56:43:
e1:73:eb:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAjmB+MXA0/aJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
NmY2NjIyZmEtODdjZS00OWJjLWIwNTAtYWI0YzFjNDFiOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+MBcne2cEeVCwtcdNgEkrF4kwb1jdsh419l
X0tfJCRDGkAMIH+1OHB+MEq7s+opW7Ktkfhgwh38rjN4vX6AP2MyhFxhGyuqwDxH
k/cPFrB9eUuZiQVNkbnlfaBC7+wosII7RaQBTWYUa90OGBHHAhKVF6shHUHnxROv
yIG6zy//AsjxcJQy6yJ9oEUNlkIAlrYVtwJHXBntIfzdyGAIR7ixrBw2pfGBRcxH
lSq0h0fBuawwFWdY+EGl9egAAackcrsMY9SPStg+iRk6ZXIj45cd6tZRMAwwjEwl
chkbpqk9qk2hNZNIoCLzWRXWuacDoyAfoYRXK9q3g1avoDekpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhDyeSn8Kj0EaktCyC2krXLYAOqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDBiMDgwZTgtNjcxZS0z
NDM2LWJkNzctMDE0MWQ3NDYxYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLoUWhBMbLOOGr/YVy4bg5mSAVBUNCaQfODgkX9EXgKgekSxFIp8NuG
C6lbs+Foygl7Xw/tRtN66Ywjbmygw2qKToskIZvGfn2sc6z42CucTfskZTsO75fz
KwXCtRcZmvtHQNG/ofnMgJ2YKty5sLdns4CzasfzWQ5gDuUZlRwB0U8Dhoq5M0q5
xg2JHJv5LGgwYZVPHk9Ct26bAaGRFv9dMYlpHlfBCmDX7st4UAonaS4CMa2Y3iYR
7u6wQl/GcCM6Mijwm16bYmaNJyciyUl/+MuuaTxZVvv1poA6XWF5j+HEnXiqgmb/
1wye8pGbCnt8dQPDQQXoRFlWQ+Fz62I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:33 2025 by rpki-client