Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9553f915-37d0-3807-984b-c446d4cb4509.roa
File: 9553f915-37d0-3807-984b-c446d4cb4509.roa (raw, json)
Hash identifier: LgDOivyTubM7PSWSlhwulEJOLPnufY9wbTB2CRO/LQA=
Subject key identifier: 9E:57:AE:F4:04:10:8D:17:26:3F:83:48:79:7F:B2:8E:DF:CC:33:97
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088183F7FB38316C10FF0A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9553f915-37d0-3807-984b-c446d4cb4509.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 162.158.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:83:f7:fb:38:31:6c:10:ff:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=70e37851-abb5-4191-b0fb-a1fb074552a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:47:b6:2b:b7:b0:a0:af:b6:4f:b0:da:14:
3b:2c:0b:5b:7c:5d:25:ac:8b:9e:b2:4f:97:b6:ee:
0c:e6:7f:ed:b5:43:49:9c:7c:33:e5:eb:b0:1d:2c:
a2:73:c9:59:f7:1f:b6:5c:ff:5d:14:f9:61:4f:4f:
02:d1:2e:c6:ef:84:2f:cb:26:0d:1a:12:ed:c6:5f:
8c:ad:2d:df:f7:14:a9:a7:90:2b:14:d9:1c:77:29:
3c:1d:43:2f:f0:f0:ea:39:2d:91:85:ab:95:91:ab:
33:22:95:39:30:95:49:4b:55:bf:4a:7a:aa:3f:2d:
2a:55:7e:0b:b9:6e:2c:b6:70:14:e9:ef:fb:aa:01:
bd:47:bf:ad:db:8d:7a:af:da:2f:38:f7:f5:d4:f6:
05:ff:33:ce:bf:32:68:10:b1:d2:10:66:3c:06:16:
43:78:d0:af:86:60:26:fa:e7:b6:21:71:18:a9:8c:
84:04:f4:92:95:6d:00:23:f1:4e:99:b8:df:85:79:
55:04:af:1b:76:66:8e:57:af:c2:04:2d:7a:44:4f:
39:6b:23:de:1b:2f:55:8f:79:8c:7c:c5:55:2c:00:
f9:5d:65:93:19:31:df:a8:55:6e:d8:dc:87:3f:3d:
97:36:19:92:4b:f3:f9:73:5b:c7:74:ff:5f:9f:91:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:AE:F4:04:10:8D:17:26:3F:83:48:79:7F:B2:8E:DF:CC:33:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9553f915-37d0-3807-984b-c446d4cb4509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:d8:11:b2:69:c9:26:02:cb:6a:75:18:d8:7f:f8:f8:3a:6a:
a6:18:21:0d:79:f0:90:c2:dc:0a:7d:1a:f2:de:84:84:3c:8f:
1c:1a:7a:78:a4:8c:40:69:23:cb:5b:ec:96:42:a0:cb:57:b2:
6d:94:c6:9f:ab:0a:8b:78:52:56:fd:a4:98:9f:5c:7f:80:d1:
3d:e4:6c:ec:23:7b:a6:b2:84:f4:a1:0c:40:b9:88:d6:2b:03:
78:4f:fb:8b:4c:f2:87:69:ac:5c:2f:54:b1:6b:41:e9:f7:ff:
62:34:fa:46:df:f1:be:71:36:4d:1d:37:62:7e:ed:d0:28:6a:
9e:ee:4e:21:67:9b:7e:c4:62:8a:b2:c0:24:50:67:af:9b:85:
7e:5b:d9:6b:a0:48:7f:5c:8b:a5:28:ad:77:26:03:b1:47:01:
d6:5e:33:ba:39:94:ef:44:ab:80:f9:bb:f6:97:27:a6:84:61:
2f:53:c1:df:38:3e:7c:bb:16:ac:dc:1a:a8:63:e6:e0:e4:31:
4a:fb:cb:65:19:c8:98:ba:32:57:bf:a4:3a:70:58:08:05:af:
9c:4c:d5:cd:14:ab:fb:2a:5f:04:94:3b:be:4b:4a:08:7f:ab:
f0:d9:d4:07:64:75:51:0b:64:37:3a:55:9e:9c:4b:11:82:0c:
62:4f:cb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:54 2025 by rpki-client