Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/55e89130-0b22-3b45-9e39-00ccfa147be1.roa
File: 55e89130-0b22-3b45-9e39-00ccfa147be1.roa (raw, json)
Hash identifier: 85CHl6jJQD4k5J2t3Eg+oJDlkYLwYUoCC6wZuAu3Ark=
Subject key identifier: 9F:AF:A3:78:B4:03:F7:75:4E:2F:B0:8B:39:66:7E:E3:9B:E9:FC:84
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088189CF158A5D36C112EF60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/55e89130-0b22-3b45-9e39-00ccfa147be1.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 162.159.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:89:cf:15:8a:5d:36:c1:12:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=8a7bc747-c46b-4389-a5ef-a4470b8a164b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:57:63:37:b1:5c:6c:21:e4:83:bc:71:72:69:
67:7c:b6:7d:ad:ec:ca:02:fc:a5:cd:38:5a:a6:16:
2a:b5:ab:23:40:db:6a:dd:77:b0:54:7c:f2:08:bd:
e8:ab:08:05:3c:df:6a:86:6f:42:1b:de:de:b1:ee:
18:a2:e7:a3:61:41:8a:33:d1:26:22:21:7b:5f:0e:
cb:ac:e3:6d:70:7c:c4:3c:e8:33:5a:0d:08:d4:6d:
66:fa:a6:84:9c:8e:46:0b:07:ed:28:c2:5f:9b:f8:
9f:09:08:cd:e5:e8:83:f2:88:e4:a3:96:19:f4:1c:
0a:33:a9:e7:70:bb:88:98:ef:1c:c8:b7:b5:37:7b:
e9:e1:7d:56:4d:e5:59:08:bf:06:f0:90:08:6e:ea:
07:0c:9d:27:fe:76:2c:81:ad:41:5a:12:ab:ea:07:
de:55:77:e4:f5:34:d7:fe:8c:71:bc:01:1f:ba:31:
34:6d:81:69:c6:b8:a2:57:85:b0:e7:45:dc:aa:4c:
ab:e7:c0:f3:54:5a:45:2b:58:a5:a7:42:b5:ab:60:
4f:66:f5:38:43:1b:68:85:47:23:4e:07:fc:6b:dd:
17:0e:84:d0:2b:73:c6:11:e3:f5:64:05:d1:db:d4:
ac:3c:e4:6e:f0:83:02:d5:ea:ca:5f:a8:e1:78:cd:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:A3:78:B4:03:F7:75:4E:2F:B0:8B:39:66:7E:E3:9B:E9:FC:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/55e89130-0b22-3b45-9e39-00ccfa147be1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:85:69:75:cd:b3:3b:f0:d1:31:50:e7:88:22:ab:cb:ea:43:
58:60:d1:88:45:d5:50:e5:4a:ac:a0:92:12:2c:b6:b5:9d:02:
41:d5:09:02:9e:a5:ef:cb:a9:01:02:c2:80:cc:ed:c9:da:47:
66:d1:44:64:02:73:de:d0:b7:a1:e8:03:da:f4:7d:26:13:d2:
65:f8:11:73:c6:08:37:21:51:9b:13:2b:c2:e6:8b:41:2d:4b:
5d:04:c7:1e:6c:66:ed:c3:7c:25:af:c1:a8:2d:06:87:8a:b9:
4e:2b:62:1a:48:02:07:3b:e4:9b:fa:c6:6d:82:19:c2:1d:d4:
db:36:67:f9:6e:6a:3f:ea:6b:45:e4:1a:39:ae:02:6e:7a:dc:
89:35:9e:72:2e:11:59:85:09:4e:40:24:8f:b2:1e:9c:6c:46:
e0:4e:64:db:2f:db:9b:3e:61:d3:76:8e:4f:df:51:42:e9:ed:
c5:8c:77:9d:c8:17:82:c3:24:fa:24:12:1f:73:cf:0e:38:19:
e8:63:0d:eb:94:24:b2:61:74:bb:aa:96:dc:d2:f7:a3:2a:2f:
80:8e:ff:6d:89:46:55:f2:16:65:ce:87:da:1c:e2:15:ee:8f:
bf:85:33:eb:07:e2:dd:60:e3:2c:0c:b6:b9:af:05:9a:51:18:
23:75:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:38 2025 by rpki-client