Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c39d1a8f-c720-39df-a632-0715be7fdcc5.roa
File: c39d1a8f-c720-39df-a632-0715be7fdcc5.roa (raw, json)
Hash identifier: qtLOp+FYEIMockfdfbJCAMrdke/BraQyGYJO+fSeFd8=
Subject key identifier: BD:E1:C2:44:5C:A3:64:55:29:6A:57:7C:E2:D7:54:BD:26:DA:5C:8C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490881828278F1CF4A48CAFE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c39d1a8f-c720-39df-a632-0715be7fdcc5.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 162.158.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:82:82:78:f1:cf:4a:48:ca:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=67db4a77-1633-4431-ac01-c23a3575d8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:9b:63:54:cf:4e:98:fd:64:73:fa:3e:f4:
2d:42:97:22:8d:01:7b:99:27:79:57:fd:44:a2:79:
38:f8:bc:68:fd:23:ef:7c:2a:b0:aa:9f:37:86:fb:
f5:07:fa:e2:f2:3a:84:05:7e:86:f3:81:0b:72:63:
3a:31:05:cf:64:3f:0f:a6:67:ab:d2:20:b2:6c:5c:
4b:ab:f6:f3:6c:41:9e:5d:41:6a:42:87:d0:8b:cf:
b2:df:85:62:24:b9:12:17:b1:77:14:fc:1f:be:bb:
e3:36:ca:ad:dc:22:74:94:7a:4f:e2:1f:5c:27:a2:
cc:56:63:29:32:93:2c:7b:a2:88:02:3c:93:e1:cf:
56:c6:c6:75:10:f2:6b:33:63:7c:ad:8d:63:b3:0a:
47:18:32:73:38:0c:cd:49:aa:4c:87:4a:a5:16:e9:
aa:43:79:fd:6b:be:5c:9b:16:3c:f0:60:cb:1a:33:
01:b0:ea:bf:97:30:0a:70:1c:d1:92:35:16:9c:7f:
24:21:2b:80:f4:3b:ee:2a:44:df:5b:cf:73:0f:32:
14:59:a8:b6:5e:ff:11:8c:44:d6:94:42:f1:18:b8:
ff:6b:f1:21:3e:a5:45:7c:81:28:9d:bd:56:0f:9f:
2c:92:fe:8c:95:2c:e5:db:45:37:92:77:51:ea:95:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E1:C2:44:5C:A3:64:55:29:6A:57:7C:E2:D7:54:BD:26:DA:5C:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c39d1a8f-c720-39df-a632-0715be7fdcc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:95:e3:1b:2c:e4:37:48:6c:9d:0f:07:f8:f4:eb:b5:14:1f:
f4:3d:1a:22:95:1d:8d:28:66:29:f4:45:0d:91:24:d3:03:09:
2d:86:f1:80:3c:ce:b6:83:99:16:f3:ef:98:82:ca:00:95:13:
3d:b7:b4:16:51:82:07:42:68:2d:6d:15:a1:05:e6:d4:67:61:
56:f9:35:15:8d:5b:88:3d:49:9f:9f:f3:54:25:d8:c6:9e:d1:
78:9c:e0:c1:b3:e2:fe:58:68:b1:aa:f3:50:29:b1:0a:cd:2a:
33:9a:e4:34:44:b8:70:7d:6e:e1:df:16:3f:e0:68:14:aa:79:
b5:52:df:2f:9d:bc:d3:a1:2d:a4:25:8f:d3:2a:89:2b:bc:a2:
62:07:34:48:bc:1f:8e:d2:81:05:24:40:a9:0d:33:36:d7:67:
67:bb:65:e6:f6:f0:73:9b:49:4f:ce:d4:e1:2e:82:bd:2f:cc:
c9:73:86:c3:1d:16:a9:1a:51:6f:b0:d2:9c:23:60:e8:31:4e:
db:a3:87:ef:7a:f5:47:1a:3e:09:f5:c9:7b:47:65:c1:44:8f:
86:3b:b0:fd:d8:ba:c2:1c:33:eb:7a:1f:91:07:1b:88:af:4d:
51:d2:44:6b:d5:b4:ad:af:04:6b:1c:48:cf:84:a3:b6:d4:e0:
55:1a:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:42 2025 by rpki-client