Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/512b75b3-85f9-31bf-9bc8-fbcae6ec1605.roa
File: 512b75b3-85f9-31bf-9bc8-fbcae6ec1605.roa (raw, json)
Hash identifier: oTLMp9SmMJ6Crnn1BNRIfnVrU4KpZ+k7X00t1QTAdzc=
Subject key identifier: 00:FF:C4:7F:FF:B0:8B:F1:51:30:CB:24:C2:8E:7E:3C:EB:AC:24:10
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C0C49EA22A4B194E12B20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/512b75b3-85f9-31bf-9bc8-fbcae6ec1605.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.158.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:0c:49:ea:22:a4:b1:94:e1:2b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=32b72972-5ed5-476f-af56-86caa5a7fb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:e9:e3:07:be:73:d2:24:29:26:ee:74:b0:
3b:b9:78:c2:dc:2f:e5:02:2e:a4:9c:b1:f7:75:d4:
ca:1d:a4:df:df:c5:94:2f:55:7c:96:31:eb:d2:b6:
ff:da:1b:a5:bb:39:7b:e4:b0:d7:06:16:ba:9f:e0:
49:5d:d6:ef:8b:6f:0e:01:22:7e:a6:5e:de:a6:00:
13:08:27:d6:cb:f1:1d:89:e3:c5:e9:e5:38:88:26:
7f:db:6b:e2:4f:41:5d:81:cb:d5:55:d7:35:42:da:
8e:44:11:32:df:31:91:70:a6:9b:01:9f:df:f0:65:
9e:99:43:8e:1c:2f:db:95:7c:0b:0c:b7:72:67:b3:
78:18:ea:b0:ad:d7:9f:e2:54:87:d6:d0:f3:5b:c7:
79:d3:a1:d9:da:bf:8c:4e:e4:22:27:6f:c6:81:37:
3f:3e:a7:3a:8b:41:4f:b0:11:61:3c:6a:6a:c9:38:
b2:dd:70:f3:93:d7:cc:c6:66:d7:45:62:40:0d:d0:
4d:99:88:b3:35:21:29:ee:2d:36:c7:c9:85:cc:04:
81:59:2a:82:c8:00:39:68:1b:06:de:4b:11:e2:44:
bf:45:66:7f:22:23:d2:c8:f6:d7:c7:38:53:f6:f6:
af:ef:2f:e0:52:43:54:f3:3f:be:c2:e0:59:59:b8:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FF:C4:7F:FF:B0:8B:F1:51:30:CB:24:C2:8E:7E:3C:EB:AC:24:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/512b75b3-85f9-31bf-9bc8-fbcae6ec1605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:f6:25:0a:23:e9:a0:ed:b4:84:0d:5d:d5:e4:db:1e:32:72:
66:bf:67:fe:d5:c0:81:ce:dd:16:d3:4e:0f:07:7d:05:66:86:
a0:2f:31:d7:f9:4b:a0:ea:6c:f1:c3:a7:89:40:ae:3d:1b:07:
1d:08:4d:dd:63:ee:8b:5a:98:69:16:73:e6:7e:53:b7:de:ec:
a5:13:8c:be:6c:b7:4c:10:57:4e:e2:b8:32:61:cf:16:c5:a1:
a2:40:75:63:a6:f4:88:bd:94:50:99:12:6b:19:09:90:6b:9a:
b5:c4:51:13:19:b8:7c:2f:18:ee:26:ab:70:ed:0d:de:90:42:
eb:4d:5e:e9:a3:c8:85:27:7a:0c:dc:f3:f0:22:99:b9:7f:7f:
14:2e:e3:a2:f0:d8:8d:b6:7a:8a:10:c2:b8:3c:11:cb:bb:1f:
d7:2c:b4:e3:9e:2b:0b:dc:16:ae:09:11:cf:e7:71:02:1f:29:
ff:4c:79:d6:9b:ac:64:f6:b4:d0:58:54:68:e2:09:2b:87:a7:
04:4e:f0:4f:01:ac:c7:d1:ac:a2:52:30:55:d2:6f:54:18:84:
e8:26:47:27:0c:c3:34:66:d3:1e:5e:fc:34:58:e8:b9:25:45:
3e:75:a4:ad:62:c0:b1:43:4a:47:54:35:0f:5e:36:d2:1c:d4:
d9:28:d3:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAxJ6iKksZThKyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
MzJiNzI5NzItNWVkNS00NzZmLWFmNTYtODZjYWE1YTdmYjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj7p4we+c9IkKSbudLA7uXjC3C/lAi6knLH3
ddTKHaTf38WUL1V8ljHr0rb/2huluzl75LDXBha6n+BJXdbvi28OASJ+pl7epgAT
CCfWy/EdiePF6eU4iCZ/22viT0FdgcvVVdc1QtqORBEy3zGRcKabAZ/f8GWemUOO
HC/blXwLDLdyZ7N4GOqwrdef4lSH1tDzW8d506HZ2r+MTuQiJ2/GgTc/Pqc6i0FP
sBFhPGpqyTiy3XDzk9fMxmbXRWJADdBNmYizNSEp7i02x8mFzASBWSqCyAA5aBsG
3ksR4kS/RWZ/IiPSyPbXxzhT9vav7y/gUkNU8z++wuBZWbit3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAD/xH//sIvxUTDLJMKOfjzrrCQQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTEyYjc1YjMtODVmOS0z
MWJmLTliYzgtZmJjYWU2ZWMxNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHr2JQoj6aDttIQNXdXk2x4ycma/Z/7VwIHO3RbTTg8HfQVmhqAvMdf5
S6DqbPHDp4lArj0bBx0ITd1j7otamGkWc+Z+U7fe7KUTjL5st0wQV07iuDJhzxbF
oaJAdWOm9Ii9lFCZEmsZCZBrmrXEURMZuHwvGO4mq3DtDd6QQutNXumjyIUnegzc
8/Aimbl/fxQu46Lw2I22eooQwrg8Ecu7H9cstOOeKwvcFq4JEc/ncQIfKf9Medab
rGT2tNBYVGjiCSuHpwRO8E8BrMfRrKJSMFXSb1QYhOgmRycMwzRm0x5e/DRY6Lkl
RT51pK1iwLFDSkdUNQ9eNtIc1Nko09U=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:55 2025 by rpki-client