Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc9cfdf5-bd35-35ec-a9e9-eb6a0fa5a038.roa
File: dc9cfdf5-bd35-35ec-a9e9-eb6a0fa5a038.roa (raw, json)
Hash identifier: qLFrziBCJA0wNBVbmDeiXeEvEGnUgbdPRJihFeL/78g=
Subject key identifier: 47:AB:83:9A:76:94:51:8B:0D:45:73:6B:19:7F:FB:13:48:C5:98:6F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490881861AF99318EA19CAD500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc9cfdf5-bd35-35ec-a9e9-eb6a0fa5a038.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 162.158.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:86:1a:f9:93:18:ea:19:ca:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=ef05de1a-2385-45d2-b862-9caef28ebd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:0f:5d:a4:4e:2b:3b:b6:37:a6:c7:1b:ea:
7c:79:5e:0a:4d:4a:e8:21:ee:16:11:4e:50:5a:fd:
c0:44:b0:08:06:2b:86:d6:98:27:9a:02:02:8f:6f:
8e:ac:5b:17:b5:79:af:5f:eb:09:0a:82:36:47:60:
3a:68:cd:15:39:09:a6:e9:c9:af:52:91:80:ff:4a:
37:c3:c5:0f:6b:4c:55:f8:95:e2:22:f4:ad:df:f6:
ee:ec:5e:49:43:6b:bc:ce:89:e6:62:f4:23:54:ec:
6b:75:ba:7d:39:f5:5b:29:09:e8:95:2a:0a:82:51:
38:36:b5:0d:3b:f7:86:32:81:fe:e5:c9:47:5f:49:
db:bc:0e:dd:64:71:0f:7c:b9:b5:53:69:91:16:f1:
86:43:34:5b:db:fc:af:e0:5d:80:5c:e8:a7:2e:ef:
be:56:52:24:8d:97:a2:22:14:4b:85:08:83:64:ee:
34:87:e5:12:fa:a1:d7:74:6b:3a:b6:f1:f2:3e:33:
ad:df:5d:38:3f:b3:64:a4:21:67:e4:19:94:32:fc:
7b:64:04:79:e5:a8:ec:de:1b:e5:d6:a8:6d:ac:ae:
5f:09:24:aa:c7:29:dc:48:1c:a6:0e:3a:f5:d1:ca:
68:2b:9e:25:95:07:1e:78:53:ad:cd:0c:95:80:6d:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AB:83:9A:76:94:51:8B:0D:45:73:6B:19:7F:FB:13:48:C5:98:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc9cfdf5-bd35-35ec-a9e9-eb6a0fa5a038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:fc:0c:49:82:af:cc:54:e4:f2:ec:57:33:28:5e:10:71:54:
1b:40:c5:39:a7:20:18:21:86:63:74:bf:0a:a4:ab:03:ad:25:
87:3e:d5:5a:31:61:e4:1d:1c:a2:96:81:e4:c2:21:8c:7b:da:
8d:9f:c2:6f:ed:83:cb:0c:35:e5:f3:34:b4:e1:62:b0:ad:6c:
df:2b:63:48:b7:e4:b4:d0:fb:28:db:3e:01:15:7a:d1:48:9c:
fd:43:2e:d8:a7:3f:28:59:aa:cf:cf:15:8e:c7:43:47:1b:63:
c2:8f:1e:a8:c1:f6:61:a9:b8:7a:18:38:1a:a3:97:0d:95:a9:
ea:c4:fa:9f:d6:24:4e:3d:c6:f2:ce:af:f9:4d:9e:72:ec:c6:
5b:fc:0a:fc:71:e9:09:06:b0:e0:68:51:73:b5:9f:f4:bc:55:
4a:5d:71:54:88:81:ad:1b:04:44:72:33:44:b6:21:7e:ca:95:
60:f1:ce:e2:f1:b5:5b:85:a0:ae:ab:3d:ff:c2:83:e6:bb:8b:
0d:30:3f:af:53:fe:aa:53:86:45:62:73:17:6d:2a:41:91:58:
c7:fa:bf:0e:5c:f8:2c:30:31:6d:8a:00:b1:d4:3e:3d:b5:a4:
bf:f0:71:17:73:d3:7e:c0:52:1d:3a:fb:03:83:ae:9c:21:fc:
69:a8:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:34 2025 by rpki-client