Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78a0cc7a-1ca1-3b8c-8cf6-51f11381cc47.roa
File: 78a0cc7a-1ca1-3b8c-8cf6-51f11381cc47.roa (raw, json)
Hash identifier: Np1GbRXjxbjunXUTf9gY1aeblM5v9pWW49MrLyJ11Y0=
Subject key identifier: BF:60:A0:4C:35:F4:89:78:E6:AE:DF:61:5D:37:80:C9:13:BA:D4:37
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BF5A3A3E01CE3340B8200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78a0cc7a-1ca1-3b8c-8cf6-51f11381cc47.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.158.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f5:a3:a3:e0:1c:e3:34:0b:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=17d7d598-5e52-432d-95a9-7bb18e333532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:b3:b8:2e:76:f3:ca:41:33:c9:a7:de:20:
5f:de:68:f0:e5:38:02:fb:10:26:2b:25:cf:29:2c:
9d:44:c3:cb:57:a9:83:05:a2:b2:a3:0a:96:d3:3a:
a8:02:37:b1:74:e7:db:9d:44:ab:ec:b1:09:38:7b:
17:4e:ea:27:6e:3b:03:61:4c:4e:c7:8c:c5:81:57:
5f:e0:0f:e8:25:4a:53:27:0c:ee:39:ad:b0:0d:7d:
fa:aa:af:82:c4:2e:09:ca:10:71:2e:5e:f9:64:94:
a8:da:3b:71:dc:b0:ff:3b:b7:61:56:13:77:ce:ca:
f1:7b:90:e3:99:c4:bf:c9:1a:e6:00:63:ed:8a:15:
52:70:40:0c:43:ad:cc:fe:1b:e5:e3:51:b1:55:35:
b1:07:ee:5d:4e:d7:e8:65:8c:87:3f:08:2e:59:24:
94:45:e8:e7:55:49:b8:60:95:29:01:ca:b6:59:36:
37:0f:db:c0:48:b8:28:e6:2a:59:98:50:1b:bc:18:
7d:f9:0b:1f:62:27:ce:d3:96:bb:2d:00:6c:ad:82:
40:52:ae:93:60:99:9e:54:dd:38:83:e6:24:df:0d:
95:3b:e7:d0:a9:d4:ad:a1:72:c6:d9:48:30:25:06:
7c:58:20:50:99:51:7f:03:c8:df:ed:1c:27:ce:76:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:A0:4C:35:F4:89:78:E6:AE:DF:61:5D:37:80:C9:13:BA:D4:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78a0cc7a-1ca1-3b8c-8cf6-51f11381cc47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:6b:02:28:0d:8a:f9:eb:4e:ab:ac:cc:2a:84:94:18:5e:64:
e6:0f:64:1f:fd:b1:1e:0c:d9:45:37:ab:fc:20:f9:cf:7f:cb:
05:a1:86:77:35:02:1e:bf:d0:02:85:9c:95:8f:b5:6b:ec:2f:
ce:2d:e6:ee:0c:d2:53:99:9c:fd:c2:21:80:95:68:5d:90:eb:
87:81:6a:96:f4:2d:a4:a7:7a:9f:93:aa:8b:bf:8b:77:fd:9e:
12:74:bd:dc:8c:97:d4:8c:2e:51:11:71:6f:da:d7:06:f6:c8:
b2:bf:1c:b5:b0:f4:19:f6:56:73:2c:26:d1:f3:9f:e1:27:f0:
02:e2:67:75:de:ac:22:90:2d:e6:2c:16:68:dd:3a:2d:0f:c0:
62:e2:00:34:68:af:5b:a8:c4:c9:f9:5d:fb:54:64:1b:d8:8f:
3f:55:52:79:c3:f5:79:e3:8f:0d:04:c8:9e:96:2a:5a:e3:c0:
2d:5b:e2:23:5e:8a:9a:35:32:4f:68:ca:f5:f0:b6:22:99:a2:
29:ec:9b:c3:b3:2e:d0:5c:ff:22:8e:5f:7a:76:ad:3c:e4:7f:
06:df:b2:2a:e0:4e:f7:c4:df:84:6b:2f:ea:a2:61:4d:71:91:
a1:68:24:8e:b1:be:56:1f:5a:00:7a:7a:fc:0b:f2:b9:fb:c8:
a0:8d:e2:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/Wjo+Ac4zQLggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
MTdkN2Q1OTgtNWU1Mi00MzJkLTk1YTktN2JiMThlMzMzNTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucCzuC5288pBM8mn3iBf3mjw5TgC+xAmKyXP
KSydRMPLV6mDBaKyowqW0zqoAjexdOfbnUSr7LEJOHsXTuonbjsDYUxOx4zFgVdf
4A/oJUpTJwzuOa2wDX36qq+CxC4JyhBxLl75ZJSo2jtx3LD/O7dhVhN3zsrxe5Dj
mcS/yRrmAGPtihVScEAMQ63M/hvl41GxVTWxB+5dTtfoZYyHPwguWSSURejnVUm4
YJUpAcq2WTY3D9vASLgo5ipZmFAbvBh9+QsfYifO05a7LQBsrYJAUq6TYJmeVN04
g+Yk3w2VO+fQqdStoXLG2UgwJQZ8WCBQmVF/A8jf7RwnznbheQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9goEw19Il45q7fYV03gMkTutQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzhhMGNjN2EtMWNhMS0z
YjhjLThjZjYtNTFmMTEzODFjYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop5MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5rAigNivnrTquszCqElBheZOYPZB/9sR4M2UU3q/wg+c9/ywWhhnc1
Ah6/0AKFnJWPtWvsL84t5u4M0lOZnP3CIYCVaF2Q64eBapb0LaSnep+Tqou/i3f9
nhJ0vdyMl9SMLlERcW/a1wb2yLK/HLWw9Bn2VnMsJtHzn+En8ALiZ3XerCKQLeYs
FmjdOi0PwGLiADRor1uoxMn5XftUZBvYjz9VUnnD9Xnjjw0EyJ6WKlrjwC1b4iNe
ipo1Mk9oyvXwtiKZoinsm8OzLtBc/yKOX3p2rTzkfwbfsirgTvfE34RrL+qiYU1x
kaFoJI6xvlYfWgB6evwL8rn7yKCN4uM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:26 2025 by rpki-client