Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a03970ea-5a1b-3b12-81f1-cfa1063a885c.roa
File: a03970ea-5a1b-3b12-81f1-cfa1063a885c.roa (raw, json)
Hash identifier: b9h1axyMXlZBCoOttmAEGVkWM0Qt4zJkUd+VrKhfkCQ=
Subject key identifier: C2:3C:17:91:DB:42:60:72:9C:0F:0F:C8:8D:57:CD:83:E1:3E:A2:B9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C06D8300C5EC9D546F900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a03970ea-5a1b-3b12-81f1-cfa1063a885c.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.158.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:06:d8:30:0c:5e:c9:d5:46:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=f6b5308d-ef7d-4f3f-968e-b3242ed5d4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:b9:e5:7b:19:4f:12:1f:17:b7:16:18:cd:
e3:49:50:58:e4:ef:a2:c0:5e:2c:99:23:da:9c:83:
44:8e:79:37:8e:c3:3c:27:4c:8b:f4:78:89:8e:a6:
be:71:bb:5e:e8:45:c5:15:b4:42:42:ee:9c:ad:c3:
43:a7:b6:6a:e0:98:2d:90:22:51:7b:f8:9c:07:67:
62:a7:e9:7d:63:ff:c2:b1:63:74:3a:e4:b3:48:64:
9c:c3:bc:38:10:1f:6d:93:04:a8:5a:21:3a:a6:59:
0b:d9:52:06:39:ac:43:80:61:16:56:5d:9e:e5:f3:
1a:e6:d6:78:6c:a8:a3:f3:a9:6c:50:39:e0:90:4b:
4c:fb:7a:6f:49:ad:a8:44:0b:f7:c8:47:70:3f:37:
2e:82:04:b7:e9:8e:04:91:ae:20:85:44:e3:bc:b9:
d7:b3:3f:61:41:98:ea:9c:27:92:99:48:b3:b4:57:
3f:6f:af:61:15:60:d6:92:eb:9a:46:31:8e:f6:91:
1d:70:a8:9e:4f:bb:2d:6a:1f:db:e4:e7:4b:19:89:
0b:7e:53:65:af:ee:47:50:c7:55:f6:81:6c:3b:73:
9e:1c:c0:1d:04:69:00:8b:a5:36:80:bb:ab:64:45:
41:f0:57:d8:61:6c:d3:6b:83:59:9b:0f:a3:6a:2a:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:17:91:DB:42:60:72:9C:0F:0F:C8:8D:57:CD:83:E1:3E:A2:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a03970ea-5a1b-3b12-81f1-cfa1063a885c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:8f:37:7f:c6:78:11:c4:57:3c:45:c6:b5:2b:3a:7e:2c:2c:
13:11:c6:7b:4f:56:90:23:8e:fc:fd:da:66:9f:e0:47:be:dd:
69:4f:91:a6:36:08:27:3e:2e:b1:64:b9:da:bd:fa:a9:df:66:
1f:03:4d:36:67:e6:69:da:f3:2a:69:70:92:36:03:85:05:4e:
a9:de:18:42:1b:c3:a7:18:48:04:20:cb:96:b1:2e:5b:d0:af:
f7:21:ad:d9:44:a1:13:93:a8:59:8a:9c:92:a1:83:72:1f:04:
7b:e2:b6:ab:ae:bf:1a:a0:75:78:c3:2d:f4:b9:fb:11:e6:42:
16:45:de:ce:7a:76:db:0b:8e:07:6a:9b:59:81:3a:d0:66:46:
c0:a7:8c:a8:72:c8:4a:18:ea:67:6e:b0:7e:8a:bb:38:02:bc:
fa:89:e2:60:c4:92:59:2f:b4:39:26:01:a1:29:2f:00:ad:cc:
29:1c:e7:8f:ea:33:15:86:a9:a8:53:ee:71:41:a4:76:ce:a0:
26:61:1f:14:0e:1d:c5:39:ed:24:1d:ed:4d:99:69:ed:d4:68:
c1:88:3f:3b:09:0a:92:78:2b:26:c0:1a:aa:0c:d9:e8:33:4b:
6d:cb:9a:cb:b6:13:be:11:ae:c8:00:fa:3b:d3:0d:cf:c9:83:
ee:d6:a7:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAbYMAxeydVG+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjZiNTMwOGQtZWY3ZC00ZjNmLTk2OGUtYjMyNDJlZDVkNGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk+55XsZTxIfF7cWGM3jSVBY5O+iwF4smSPa
nINEjnk3jsM8J0yL9HiJjqa+cbte6EXFFbRCQu6crcNDp7Zq4JgtkCJRe/icB2di
p+l9Y//CsWN0OuSzSGScw7w4EB9tkwSoWiE6plkL2VIGOaxDgGEWVl2e5fMa5tZ4
bKij86lsUDngkEtM+3pvSa2oRAv3yEdwPzcuggS36Y4Eka4ghUTjvLnXsz9hQZjq
nCeSmUiztFc/b69hFWDWkuuaRjGO9pEdcKieT7stah/b5OdLGYkLflNlr+5HUMdV
9oFsO3OeHMAdBGkAi6U2gLurZEVB8FfYYWzTa4NZmw+jaioSVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMI8F5HbQmBynA8PyI1XzYPhPqK5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTAzOTcwZWEtNWExYi0z
YjEyLTgxZjEtY2ZhMTA2M2E4ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL2PN3/GeBHEVzxFxrUrOn4sLBMRxntPVpAjjvz92maf4Ee+3WlPkaY2
CCc+LrFkudq9+qnfZh8DTTZn5mna8yppcJI2A4UFTqneGEIbw6cYSAQgy5axLlvQ
r/chrdlEoROTqFmKnJKhg3IfBHvitquuvxqgdXjDLfS5+xHmQhZF3s56dtsLjgdq
m1mBOtBmRsCnjKhyyEoY6mdusH6KuzgCvPqJ4mDEklkvtDkmAaEpLwCtzCkc54/q
MxWGqahT7nFBpHbOoCZhHxQOHcU57SQd7U2Zae3UaMGIPzsJCpJ4KybAGqoM2egz
S23Lmsu2E74RrsgA+jvTDc/Jg+7Wp9M=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:30 2025 by rpki-client