Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/55e9cd37-5265-36bd-ab2d-c384724f9e0a.roa
File: 55e9cd37-5265-36bd-ab2d-c384724f9e0a.roa (raw, json)
Hash identifier: hTLX/IQDmU0UnY3lW0iFlaj311Sb2+mLHiXF4R8kFEw=
Subject key identifier: BB:6F:81:6C:F0:5D:9B:CE:B7:E9:77:11:AD:37:95:9A:19:63:C0:CD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C084A6A4932B0AC550FD8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/55e9cd37-5265-36bd-ab2d-c384724f9e0a.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.158.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:08:4a:6a:49:32:b0:ac:55:0f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=dcb61d83-9bb8-4cb3-9e66-f3069467aeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:a0:93:2b:f2:fe:98:44:f9:f4:fb:5e:f9:
af:d0:44:31:e9:a9:eb:e3:b9:1b:a2:31:b1:0b:7d:
25:a0:b9:b4:3e:96:11:6a:fe:9f:04:c9:7f:17:71:
8e:f5:d8:02:d2:8d:90:39:cc:77:ab:54:9e:6f:cc:
9b:bc:1c:16:03:d9:6a:98:cd:ce:42:44:29:9e:0f:
26:0e:1a:1e:78:63:34:50:5a:a3:92:95:2e:9d:c7:
18:e4:39:1b:f5:fb:1d:83:8b:99:69:9c:44:4a:c4:
9f:10:c6:67:87:37:f6:af:ad:f2:5e:e2:d8:f0:55:
55:43:ea:50:b6:c0:ab:52:0b:11:e3:96:d4:ef:db:
12:ec:82:05:ff:3a:d3:02:e8:f8:15:14:09:86:a8:
f7:84:53:0d:93:5c:ee:89:e9:16:55:df:47:f5:6a:
85:df:05:a1:0d:f5:a6:6a:f3:5b:86:65:bb:a0:bd:
0c:55:03:fd:04:3c:6d:dc:31:fe:58:fc:cf:93:68:
cc:1b:5b:cb:15:33:48:64:af:d8:75:3e:5f:ae:2a:
c7:08:a8:8e:59:26:1d:67:d1:c6:59:1e:be:ee:11:
05:3b:e9:ca:b6:12:85:6a:78:f0:ef:5a:f4:21:4b:
a6:91:9e:e5:97:bb:6d:06:41:18:8c:6d:92:08:d9:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:81:6C:F0:5D:9B:CE:B7:E9:77:11:AD:37:95:9A:19:63:C0:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/55e9cd37-5265-36bd-ab2d-c384724f9e0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:70:b1:64:7c:8b:79:6f:8e:af:eb:5a:02:ef:04:41:6d:de:
b0:a2:c6:68:bb:ec:20:d6:38:78:36:59:c0:76:a0:39:1a:a2:
9b:32:d0:9b:84:3a:bb:34:29:19:7f:da:e9:da:88:18:09:a9:
bd:ef:48:9b:61:bb:34:3b:28:cd:6c:bc:95:e8:c6:5a:be:15:
d6:45:f7:0a:c4:43:94:6d:92:c5:d0:77:77:a9:a6:dd:bc:4b:
a7:48:fb:3f:88:e0:0c:d0:d5:4c:3c:80:d3:d6:ae:32:5a:8f:
20:2e:b4:35:bc:20:69:77:21:91:79:25:80:69:16:ea:ab:bc:
91:1c:07:96:59:ce:23:5d:4e:99:af:93:01:8e:e2:8e:22:cb:
61:00:19:37:70:c0:fc:31:07:0e:7b:54:33:d0:5a:bf:89:a1:
ce:66:ab:4c:1b:42:5d:2a:02:fd:33:2d:11:b8:78:18:8d:01:
ae:cf:ae:c8:24:74:1c:da:c5:e8:d2:58:fe:25:12:4d:1c:bf:
42:70:72:b3:0f:41:b7:76:44:92:7d:94:7b:03:7a:07:d9:63:
8f:35:98:28:6d:9b:19:c4:1f:5a:97:05:7b:14:99:c6:33:4d:
b3:e0:fd:9c:d8:e9:f1:ed:8e:c3:61:5d:86:5a:00:be:bc:df:
2c:a3:a5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:12 2025 by rpki-client