Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa
File: dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa (raw, json)
Hash identifier: m35KB7X+pWXxCK2BTJ+/qnG0ww+2E5SBJCqlRi6h0nw=
Subject key identifier: 87:F6:EE:9C:7E:EE:87:81:67:E5:43:68:86:04:F5:99:E7:9A:9E:EB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6CB4E507545E55BC668BA
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 162.158.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:cb:4e:50:75:45:e5:5b:c6:68:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=1494108d-d6b6-46fb-a15d-b1a192d47f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:22:2e:9c:5d:dc:14:84:df:c3:f6:6c:9c:
7d:a8:f0:35:0a:e8:85:9e:47:25:76:f6:80:62:ea:
77:30:a1:9d:ee:7f:d7:78:a3:68:55:4c:ae:94:60:
bf:3a:87:8e:97:41:6e:b0:55:54:bb:be:ea:20:21:
01:5c:2b:1e:48:18:85:d9:29:66:60:0e:f2:13:78:
00:55:eb:1e:38:54:73:77:c7:94:d3:4f:33:7c:0d:
99:cf:7e:0d:a9:38:41:76:f8:22:10:d4:aa:c4:4f:
79:a6:7c:b1:43:7a:34:db:53:9b:a3:4a:94:2b:f9:
31:55:a6:66:2f:2c:cb:00:01:40:d9:25:e5:cd:ca:
38:38:a8:1d:1c:bb:4c:42:94:4a:e7:f9:62:a4:00:
05:26:fd:98:fe:6e:33:e6:cb:c4:3f:5e:c1:4e:44:
0d:72:86:76:60:34:56:83:46:6f:55:40:67:62:e6:
37:38:30:a2:30:98:83:1a:68:20:d9:76:3f:61:23:
37:09:11:2c:2c:02:a6:ba:f6:b9:0d:a3:c6:db:21:
1e:61:7d:53:66:db:e3:95:bb:85:45:24:fa:20:08:
e3:46:fc:e2:e7:7a:2c:d0:15:58:33:fc:7d:12:20:
e0:67:12:41:d7:c3:10:d9:e3:02:08:88:da:b9:e2:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:EE:9C:7E:EE:87:81:67:E5:43:68:86:04:F5:99:E7:9A:9E:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:87:54:37:41:07:dc:6e:b4:24:2c:e0:aa:fd:ba:08:d8:79:
de:14:2f:c4:3b:ed:25:79:64:cb:c9:ef:dd:f8:2e:4a:ef:20:
e7:97:ae:a3:e6:94:8c:7a:13:ab:6f:fb:c4:8c:20:3d:87:83:
19:ab:64:bc:0b:b2:d3:19:91:08:a4:06:0f:07:e4:21:db:b6:
2c:d7:dc:9a:63:86:b5:0e:a9:b2:65:f0:96:35:9b:7f:da:26:
ed:76:09:cc:58:28:ab:ad:26:a4:c6:39:89:00:00:95:b1:1e:
3b:28:c8:37:27:7e:c3:3b:5e:3a:0f:a4:dc:8b:4d:29:8a:b6:
f6:d4:3e:93:89:85:eb:eb:fa:61:b7:b2:ad:ca:f1:81:50:af:
86:8e:6f:9c:69:d1:35:e8:98:fa:bd:72:57:cc:18:97:eb:d5:
12:b2:2a:f3:90:0c:dd:09:03:8e:a4:cd:c3:a7:5d:01:ac:5c:
35:d2:50:93:66:30:e5:14:ea:d0:84:b2:9b:6c:c8:0e:22:8e:
d9:20:0e:b7:b9:c6:74:67:72:50:60:d5:94:d1:2e:ae:2b:82:
f7:ef:90:a3:ce:43:1e:29:60:3a:7f:6a:69:a4:21:2c:5b:a0:
ba:45:a4:46:a8:d6:d2:de:d6:7b:47:1a:c4:38:d3:09:e9:ad:
6b:02:2e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:06 2025 by rpki-client