Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6ab781c-7b82-3007-9e0a-3484ad3b9c26.roa
File: d6ab781c-7b82-3007-9e0a-3484ad3b9c26.roa (raw, json)
Hash identifier: pt49m3qOPkU3ixVESeM7OMfGgoosdb89CWi9maYrleQ=
Subject key identifier: BC:B0:DF:96:3E:88:C5:1E:97:0D:71:07:0C:F5:93:A7:D8:25:4F:8E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848ADC606C45D04C044FA17D7E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6ab781c-7b82-3007-9e0a-3484ad3b9c26.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 395747
IP address blocks: 162.159.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:06:c4:5d:04:c0:44:fa:17:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=e0d655f4-8e36-4d29-a9ed-1870da14dd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:92:e1:96:00:82:16:bb:a0:88:0e:30:4c:
15:20:30:b4:fe:72:73:94:be:74:39:1f:7e:80:01:
33:9e:11:d6:2d:ac:74:05:de:4d:34:ee:92:9f:40:
d8:0e:fc:6f:9d:fd:9a:67:30:cc:b0:82:43:bf:9e:
5e:7b:45:ab:28:ab:71:56:55:90:ba:f0:5e:8b:72:
7e:54:6e:11:b2:34:3b:9d:c1:ef:30:38:2f:66:fa:
35:75:b6:a0:22:b6:54:a9:b8:e3:9d:40:df:cc:75:
99:04:8b:b1:3b:7a:55:81:91:90:61:27:c7:9a:54:
98:44:0c:8c:5d:68:d2:f5:74:c4:1f:b4:52:c2:af:
2f:0c:a0:9d:ec:12:4b:dd:a1:66:7a:54:aa:d0:67:
c8:16:4a:47:71:35:c1:4f:c7:80:0c:bc:49:41:34:
b4:c4:aa:36:99:cc:6c:13:47:13:73:dc:2d:d9:e3:
c7:cc:2d:59:2d:78:f6:f6:d3:01:51:fd:8e:b3:44:
0b:17:e9:ac:eb:48:ec:99:0f:eb:f8:75:1a:24:1c:
4f:e7:4e:4e:58:5e:6f:51:03:b6:9f:e1:ae:88:df:
b3:1d:2d:ed:fa:17:30:0c:e8:cd:88:5a:98:36:97:
03:b7:93:6f:24:82:02:b5:1d:8b:f8:b3:f2:14:a5:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:DF:96:3E:88:C5:1E:97:0D:71:07:0C:F5:93:A7:D8:25:4F:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6ab781c-7b82-3007-9e0a-3484ad3b9c26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b0:5a:b7:54:1d:c6:e1:86:bc:f2:6d:5a:ed:b1:18:b9:20:
01:e9:61:98:39:79:b5:b0:89:38:bd:59:28:95:5e:6b:54:60:
3b:dd:e5:89:82:7d:3a:84:c8:88:fc:4a:ac:90:a2:18:0c:06:
98:96:45:ef:80:1c:b2:d1:01:7f:04:4d:a0:a6:31:20:2b:22:
c8:a4:0e:78:c3:fd:d2:45:1a:88:8a:9d:0d:09:67:fa:84:72:
6b:a7:c1:c5:82:1a:65:9e:48:9c:68:14:a8:10:aa:e7:80:07:
73:f3:86:9c:a0:96:88:f3:96:1d:92:ce:58:58:71:bb:99:f3:
bc:6c:d2:e2:91:a7:af:f4:b7:cf:a7:cb:ad:61:c2:54:53:ea:
0d:5e:a0:f8:74:00:d8:2f:19:d5:bd:13:f7:57:71:14:09:2f:
e2:87:ca:0a:33:41:0a:c6:1f:56:e6:76:b1:bd:c7:5d:82:a0:
28:6f:19:fc:e3:27:c1:91:1b:d2:75:3b:d4:7b:a6:f1:7e:1f:
ef:f9:3f:a6:ca:1c:c2:dd:d1:2e:98:d5:c4:40:ea:7a:9a:43:
44:46:f5:30:af:20:8b:41:67:5e:c7:1b:dc:9c:eb:46:4c:ce:
9b:e9:e9:3c:88:fa:d0:cc:56:c7:65:8d:3d:76:a4:be:1c:ba:
bc:62:05:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:19 2025 by rpki-client