Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f37e063b-34ce-31be-9822-acab252989d0.roa
File: f37e063b-34ce-31be-9822-acab252989d0.roa (raw, json)
Hash identifier: lgFpi4J5Eqdnfbk+Hs/Av6V0yy2jEzy01GQcJRNigHM=
Subject key identifier: B4:01:A9:A9:4E:ED:0E:5B:1A:F2:67:8A:D0:B5:EA:4A:DE:7E:7C:E9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C078D3D6E157C38FE3FC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f37e063b-34ce-31be-9822-acab252989d0.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.158.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:07:8d:3d:6e:15:7c:38:fe:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=35b2d841-c745-47da-8c02-9b0da8437703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:38:3e:32:76:05:e5:37:75:39:72:75:3a:58:
66:72:de:a2:6c:89:44:fd:55:f5:ed:fe:8e:71:e9:
c9:81:07:51:7c:a9:1b:9a:0b:3d:d9:87:b5:2e:4e:
50:9e:31:dc:a4:6f:a9:97:8b:d7:7f:d2:b9:04:ff:
bf:a3:71:86:b2:a0:68:56:ac:37:e9:40:51:fc:37:
8e:9d:d3:97:e5:61:69:22:18:fe:dd:7a:84:3d:f7:
aa:86:e3:78:33:98:c8:8c:71:33:45:0d:98:2c:b8:
04:c2:17:bc:0a:61:13:fd:71:bc:b0:97:c4:bc:19:
02:59:74:f1:45:0e:3d:42:89:36:54:1e:2c:0b:77:
be:9b:7a:b1:41:bd:d6:73:44:fb:b8:f5:9c:65:2c:
55:4d:42:3b:27:8c:94:bb:04:70:b8:ec:da:f5:a1:
76:b3:e3:82:1b:9d:88:f9:28:c8:41:af:3a:f6:49:
d1:5e:f2:15:5a:af:2c:8a:d4:45:b0:8d:ca:e8:8b:
c5:cf:6d:5f:17:46:84:d2:87:10:28:2b:09:65:b6:
60:97:6a:4d:a0:f0:54:7b:39:0e:c8:28:97:11:bc:
97:e0:88:ca:2b:4a:d5:54:b1:b0:4b:81:e2:d1:d4:
f6:6b:60:83:2a:70:fc:28:6e:3b:00:81:88:85:08:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:01:A9:A9:4E:ED:0E:5B:1A:F2:67:8A:D0:B5:EA:4A:DE:7E:7C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f37e063b-34ce-31be-9822-acab252989d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:1a:98:de:2d:11:12:5b:c6:f4:65:98:43:e3:68:6c:48:1c:
e7:97:f3:93:7a:96:fb:82:24:c4:cc:53:88:46:ae:e0:97:6b:
e1:69:7d:3b:28:8f:c0:9c:14:80:62:33:bc:fe:ab:3d:9b:c3:
29:31:ec:c7:92:9b:3c:b5:51:b9:f0:d9:ba:59:89:fd:c3:0e:
3e:39:0e:cf:d6:c0:7c:00:3f:a2:90:44:9c:22:d3:0d:e1:9b:
81:e6:fe:46:07:e2:88:3c:97:01:f3:45:d9:a3:f7:8f:4f:ec:
6c:27:bd:fc:18:1c:3e:e7:40:d7:97:41:b3:d4:99:5b:1b:90:
25:2e:e2:6f:12:2d:a1:70:49:c3:4b:de:25:eb:b6:40:0f:bf:
ea:71:71:b8:4f:82:d7:25:f9:f6:e4:cf:49:a1:f2:4b:be:c4:
04:e6:ed:1f:7d:ce:e2:8d:84:ec:ed:3b:bd:2b:c0:da:18:b5:
16:e5:ec:b6:f1:b1:c2:8f:2b:8e:61:45:0c:51:94:4d:ce:37:
1c:51:76:72:0a:7f:a9:15:c6:5d:ce:42:85:9d:51:ab:b4:ba:
98:be:36:95:a0:33:ac:bb:c5:e4:03:fa:d1:bb:8d:59:48:e5:
c3:4c:7f:d4:3a:44:41:68:0b:c9:b9:da:bd:ba:37:8f:f0:53:
33:4d:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:25 2025 by rpki-client