Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/71f518fc-cb3e-3e90-b582-81f279742517.roa
File: 71f518fc-cb3e-3e90-b582-81f279742517.roa (raw, json)
Hash identifier: pUNx3S6HgJV3iC3EXPlPCFjbHVoY0aA1/3YiDLcIPv8=
Subject key identifier: C5:B0:2F:F2:2A:06:86:8B:C1:33:EE:D7:FD:E2:F0:A6:A3:A4:72:A6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C0CC3ECAF5224A44EB900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/71f518fc-cb3e-3e90-b582-81f279742517.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.158.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:0c:c3:ec:af:52:24:a4:4e:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=21711929-d93c-4bfa-999f-f1fcb2c84bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:bf:4c:c0:59:ff:6b:4e:73:ec:43:d2:f9:
32:d7:b5:5c:9a:6a:df:aa:a5:4d:2a:58:42:48:a2:
3a:9c:5a:63:ff:00:93:36:73:c9:07:fa:1f:b9:b5:
86:1f:82:7c:eb:38:20:a7:c9:ff:5e:b8:71:13:f0:
d7:ce:d9:5f:dc:c5:9f:5a:c2:d9:b2:f5:d7:68:93:
7f:02:fd:e6:51:55:7d:9b:ce:37:97:40:25:34:8f:
7d:fe:14:1d:aa:29:e5:c6:f3:b1:cd:90:03:17:70:
b6:24:ff:5c:04:36:3e:56:53:d5:36:14:1b:33:c9:
20:94:52:f0:56:5e:42:67:e5:31:74:c6:da:1e:0a:
4f:89:48:f3:2e:83:0d:9c:3b:9e:02:83:1e:76:17:
6b:33:4b:03:9c:cb:d7:d5:da:aa:0b:94:ba:d1:d0:
ba:5a:2f:be:c9:b1:ec:6c:74:12:f8:53:18:02:c8:
7c:b6:92:f8:61:63:e3:3c:9f:c5:a9:aa:16:0d:57:
d7:e0:2e:c5:9a:79:be:1f:62:f5:d3:68:98:18:fe:
66:4e:58:ac:c3:7a:9d:68:c0:b8:8b:6d:64:e0:56:
56:48:68:bf:eb:eb:af:1e:24:80:f9:b6:b8:e7:cd:
33:17:85:df:ee:c5:91:91:de:d1:3e:05:2a:9e:a5:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B0:2F:F2:2A:06:86:8B:C1:33:EE:D7:FD:E2:F0:A6:A3:A4:72:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/71f518fc-cb3e-3e90-b582-81f279742517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:e1:d3:c7:c9:19:4b:7a:23:04:71:b5:10:9a:fe:44:43:aa:
69:0d:9b:c4:5f:0c:3a:6c:16:13:6f:d1:40:eb:d9:1b:87:d8:
6c:c2:f5:80:f9:ec:a3:c9:bd:06:33:b2:81:78:59:44:3c:48:
f0:91:d6:1f:07:3b:85:d6:e7:a5:1f:ad:2f:df:a2:61:5e:b0:
53:35:3a:c9:84:e4:d4:15:91:2e:5f:ef:4a:aa:85:76:8a:82:
24:3b:08:75:7b:eb:86:30:cc:3f:0b:96:4c:62:c4:5e:68:77:
67:90:6e:9f:7a:b4:f5:8b:f6:61:b3:55:d4:3c:eb:56:dc:dc:
1d:52:76:72:46:ba:a9:c7:2c:bf:3a:10:9c:49:b8:28:f6:07:
05:91:4e:5f:e5:ce:14:87:ca:12:1b:e9:4c:11:17:4a:af:df:
6d:a3:76:96:a1:f4:b1:5c:ff:cf:c0:e0:02:9d:c8:71:0f:2b:
f0:02:0e:dc:ec:bb:f2:e1:a3:56:28:4e:b1:26:f5:e8:07:bf:
8d:b7:2a:0d:9e:82:ad:5a:fb:9a:34:47:2e:95:d7:6d:e6:de:
64:85:cb:89:c1:fc:49:29:89:eb:0a:b6:f5:05:cb:e6:c9:83:
9f:e7:eb:9a:66:c5:af:fb:a7:37:c3:a0:39:c2:f6:90:b9:a7:
00:e6:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:57 2025 by rpki-client