Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c298c9b-7223-3d9c-bd3c-c1564b001d05.roa
File: 5c298c9b-7223-3d9c-bd3c-c1564b001d05.roa (raw, json)
Hash identifier: XA9ennwnwLXYXTXOSlSJhMuYjaiacSyP5poJH7w+/3g=
Subject key identifier: DB:46:EB:6D:D6:7A:D7:48:A4:D0:DF:2F:BC:29:72:4E:2F:85:4C:04
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088182CA0E7B0D4F9AFAB700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c298c9b-7223-3d9c-bd3c-c1564b001d05.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 162.158.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:82:ca:0e:7b:0d:4f:9a:fa:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=cbe4142f-e226-4dff-ac8d-723ebccf5a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8a:1c:31:5c:96:c0:0b:b3:0f:82:cb:0a:fd:
16:e0:01:d5:86:99:66:8a:58:19:b9:e7:03:9c:90:
13:07:19:69:f7:5a:d0:79:b3:23:7a:4e:dc:49:0b:
6c:bd:f3:0a:c5:96:b7:f2:63:2e:a4:32:24:bb:2d:
bc:86:8f:74:20:7f:2e:cb:22:6c:db:94:6f:2d:00:
b7:af:f7:1f:96:fa:d1:8f:90:02:da:ae:d1:7b:10:
38:c1:7b:15:57:34:f2:ca:07:7c:9b:f3:8f:a2:5a:
4d:a0:e8:65:a5:8a:d7:99:77:53:52:ee:d2:1c:0f:
ab:ea:5f:be:1d:7e:3f:1f:6b:70:b4:48:b1:fc:1a:
25:85:9f:dc:a7:00:51:98:8c:da:18:5d:5f:95:b7:
7c:ae:1b:e0:5d:fe:55:b8:86:d4:12:70:99:29:75:
2b:44:84:0c:bd:17:d7:a8:71:fc:49:e4:e7:03:61:
e3:20:34:c7:04:90:5a:a8:ec:19:45:24:42:a3:cd:
ac:fc:fd:dc:21:df:ca:0a:da:a7:05:d1:70:06:52:
bc:43:f8:a2:2f:f2:33:23:1c:84:79:dc:11:59:5a:
dd:71:df:9f:7b:81:a0:c8:9f:ba:a4:8b:5c:b1:ec:
4b:0e:ba:18:1c:e4:3c:36:b7:fd:8a:4d:64:66:70:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:46:EB:6D:D6:7A:D7:48:A4:D0:DF:2F:BC:29:72:4E:2F:85:4C:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c298c9b-7223-3d9c-bd3c-c1564b001d05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b4:90:06:32:42:8e:04:21:13:cc:bc:c4:2b:35:61:75:98:
de:07:ff:e0:32:ab:27:21:22:a4:fa:1f:22:7e:7f:03:9d:01:
93:1d:48:50:e5:66:6f:fa:c6:01:5d:8b:b4:05:be:13:74:74:
05:48:07:7e:8a:df:34:14:9a:11:69:08:7a:b5:41:63:d9:d8:
52:96:07:fa:30:aa:8f:eb:e8:be:47:26:d9:09:48:f1:db:b9:
c4:7f:4f:13:8b:70:5f:54:7c:31:78:9a:a7:f2:8a:78:28:6b:
01:cd:7f:46:5f:b8:ed:c2:17:83:f3:a9:1f:b8:1f:8a:51:0c:
fb:e9:84:cc:57:5b:44:48:68:73:7d:5e:1e:0f:67:45:c6:e2:
d2:69:eb:10:8f:c2:63:24:05:f6:e5:d9:95:1e:01:d0:ab:8d:
47:bc:ed:72:a2:4c:be:4c:62:f1:1e:b3:38:f0:4b:c4:71:80:
4c:d7:93:64:d5:11:47:87:34:d7:ee:07:13:0b:08:75:1c:e3:
bf:c0:82:04:b3:a2:a2:00:fd:5c:cd:7d:29:7b:bd:11:64:d3:
3c:b9:3f:27:09:d1:96:bd:fd:53:0c:a6:7d:dd:be:69:6c:20:
c5:5f:a4:83:4b:6e:1d:70:8f:b0:30:55:e5:78:2a:2c:4c:f0:
a3:d8:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:37 2025 by rpki-client