Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c705d406-ce36-3072-bfb6-5dcdf10ad291.roa
File: c705d406-ce36-3072-bfb6-5dcdf10ad291.roa (raw, json)
Hash identifier: KVUtNKe4VA9fWToCK9jo8oYP4+DsC30R/mSBfLd5FWs=
Subject key identifier: 04:FD:C5:24:98:36:E3:79:FF:24:FC:BE:62:98:56:13:D1:97:13:DF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C07D924C2E4855177A380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c705d406-ce36-3072-bfb6-5dcdf10ad291.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.158.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:07:d9:24:c2:e4:85:51:77:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=e81bc0b4-b59c-4514-b7a0-5cfe98c04666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0e:ff:aa:dd:46:cc:2a:48:15:7c:ff:cf:de:
79:ad:3a:30:02:b6:df:97:6a:cf:f2:c5:7a:25:cb:
c4:cd:6c:6f:60:89:5d:4b:a1:1a:8c:f1:d5:00:1c:
ff:1a:12:f5:3d:bd:bd:56:ec:3a:c6:38:7d:0e:4f:
b2:36:95:b0:55:89:43:2e:89:e8:2a:52:29:14:6f:
dd:1d:a6:c3:91:25:71:6f:24:1d:15:a7:31:f6:1a:
6f:2f:c7:66:31:44:ff:b0:b9:43:59:5c:55:91:d2:
85:07:4a:e4:0e:d8:52:cc:6d:f1:55:b6:55:b1:88:
7e:43:d7:44:aa:09:64:ba:3a:d6:b5:28:18:d6:e9:
a3:ab:c9:2e:d1:a7:f7:26:43:76:6b:34:1a:e0:79:
e9:0d:6a:df:89:25:c3:1d:cc:21:68:ba:2f:83:fd:
6f:68:8c:a2:bc:fa:b3:3b:29:1f:4f:14:b7:a4:b9:
61:38:7a:47:5b:94:bc:e5:32:e0:36:33:d5:d7:d7:
d5:cc:51:c7:19:8b:86:81:d5:b1:65:83:cc:9a:d6:
0e:c8:39:04:ff:8d:b4:93:9c:72:bb:8a:0d:81:f9:
eb:8b:ee:61:91:03:d2:b3:87:23:51:97:99:06:ca:
17:10:16:69:98:55:26:04:ae:92:f7:85:96:a3:3e:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:C5:24:98:36:E3:79:FF:24:FC:BE:62:98:56:13:D1:97:13:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c705d406-ce36-3072-bfb6-5dcdf10ad291.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:57:3a:69:43:40:b3:13:82:c7:aa:e0:ec:0d:8b:2c:f9:d3:
77:55:bc:88:b9:ce:e2:1e:1a:8e:23:a4:30:88:12:3f:9d:bf:
84:cf:a7:ee:ac:38:52:38:9b:6c:8b:79:5f:5a:41:0c:60:7a:
a5:8d:4f:00:e5:f0:42:51:c5:61:22:9f:d4:45:07:da:0f:3b:
2c:d1:a4:23:e4:db:06:93:79:19:2b:8d:0b:4b:88:a5:2e:30:
57:2c:9b:ad:ae:dd:98:02:69:e1:0f:3c:32:dc:29:a4:a0:e0:
ee:58:82:f5:de:6c:fe:27:a8:e0:96:27:6f:6a:fb:c7:18:f9:
4c:65:7d:16:00:a2:86:44:4f:7e:1c:3e:cf:dc:ac:4d:63:36:
ec:ac:b5:35:ee:bc:64:c8:dd:7c:13:99:88:39:08:01:aa:78:
45:94:1c:05:72:4c:0d:95:03:d6:0a:e6:73:4a:e6:60:9a:4e:
5e:7c:0b:d4:7d:52:13:a4:bc:a6:01:be:c4:ed:a6:13:8e:6c:
d4:37:a6:61:8b:f6:02:12:d3:14:2c:9e:0e:a7:14:1b:21:32:
e3:16:fe:a6:c6:42:3b:91:9d:74:d6:2f:26:3d:a6:da:cd:32:
6a:ec:a7:c6:43:09:5a:f4:0e:20:79:a9:a2:a7:64:65:47:0b:
70:69:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:06 2025 by rpki-client