Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdb8c7ca-ec5d-3ff3-b98c-a5dac80334a6.roa
File: bdb8c7ca-ec5d-3ff3-b98c-a5dac80334a6.roa (raw, json)
Hash identifier: 4HTor4fTUZhw7w/sEdI05OV1giqmCMIivhmfjXVAeIk=
Subject key identifier: E9:89:5A:53:F9:22:68:6F:65:AF:6F:61:89:3C:A4:A0:D5:67:54:AA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088188B4188A600557D6EB0E
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdb8c7ca-ec5d-3ff3-b98c-a5dac80334a6.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 162.159.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:88:b4:18:8a:60:05:57:d6:eb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=336b44ba-4059-41df-bb05-698f39d57ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:7f:6c:a1:b2:be:a5:91:20:db:51:5d:ae:
73:b6:f7:a2:46:f5:1a:03:05:6a:c6:a9:a4:28:a4:
46:68:22:82:97:e8:6c:00:e8:17:22:34:75:25:6e:
27:ff:be:07:d9:ac:c9:a8:9e:59:c4:2a:ad:52:3f:
49:dc:34:e9:2f:de:2e:a0:a6:c7:46:e1:3d:ef:cc:
c6:4a:14:82:9c:93:83:1b:7d:8d:29:3e:84:bc:8d:
ac:94:91:b4:6b:b8:69:22:f7:7d:f0:59:eb:f8:80:
29:50:81:21:6b:eb:9f:4f:db:3e:4e:28:4e:70:e4:
b0:c7:eb:62:2c:81:45:eb:91:98:1b:16:c0:e1:21:
84:8a:fb:ac:9a:81:71:1b:4a:8b:15:80:26:7b:11:
b1:97:d9:7c:0f:4e:11:70:a3:70:7c:7d:1d:7b:4f:
ca:11:7e:00:5b:87:6d:fa:6a:70:be:04:23:28:c4:
e1:d7:c6:5a:4b:05:1b:40:35:6e:8c:c5:04:7f:ae:
07:74:07:e5:10:af:d7:b0:d5:7e:33:1d:4e:96:ed:
25:ee:62:20:ef:fc:ed:cf:e9:40:c9:c0:5b:48:7b:
e9:db:72:5b:53:26:d7:89:56:30:f2:e4:47:37:e9:
97:08:71:63:4e:18:02:ee:88:21:01:b2:ee:b2:0d:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:5A:53:F9:22:68:6F:65:AF:6F:61:89:3C:A4:A0:D5:67:54:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdb8c7ca-ec5d-3ff3-b98c-a5dac80334a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:55:7e:85:cf:86:39:22:af:89:50:b8:82:d4:99:36:2e:e5:
23:a9:77:9f:e5:57:6f:24:df:72:5d:a3:36:47:c3:e5:57:60:
b0:69:63:60:cc:50:a1:08:a8:5d:52:4d:a5:de:a5:ab:9d:d4:
52:a2:d6:cf:66:d3:f0:93:21:e1:36:90:20:d9:6f:88:43:da:
2f:68:5c:c8:c5:0f:3c:26:cd:cf:5f:11:87:6e:2f:f8:96:0b:
d0:4a:6c:9e:49:bc:f6:a7:02:59:37:fc:94:c9:73:fc:71:03:
7c:6e:70:a9:c2:e6:2a:02:8e:9f:9c:e5:d9:88:3b:39:2e:a3:
61:40:17:e1:2c:1d:54:6d:d3:96:b5:d0:02:2f:99:cb:19:d0:
92:bf:52:a1:e8:99:b2:15:84:f8:82:d4:6c:9b:63:4d:04:d0:
73:05:ff:e3:d1:07:f0:8f:d2:9c:ff:26:8b:69:d2:b8:d2:72:
f1:8a:d2:01:42:60:02:3c:bd:e2:96:a3:8f:dd:ad:63:b1:0a:
de:7e:a6:0f:72:26:e7:3b:7d:0b:da:93:e2:c6:39:df:37:40:
91:3c:67:5b:b6:f2:67:0c:77:8a:d8:5b:12:09:23:a6:da:17:
a7:76:17:27:8c:26:f8:2f:84:6b:f0:91:2b:ff:4e:fb:67:3d:
9d:6d:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:00 2025 by rpki-client