Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5835a08-715c-3165-8299-1c465fa17070.roa
File: f5835a08-715c-3165-8299-1c465fa17070.roa (raw, json)
Hash identifier: tVStCp+2TA8Dxf4bfhi451Y7UMtwun9nLX0rP/2skNk=
Subject key identifier: CB:6A:36:CE:14:55:05:36:A0:0B:24:A1:DD:22:D7:19:30:24:94:0C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584897708892FF9E3F01DD949480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5835a08-715c-3165-8299-1c465fa17070.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 13335
IP address blocks: 162.159.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:88:92:ff:9e:3f:01:dd:94:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=088b959d-a599-49b0-aa47-6034394530ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:da:59:ef:29:cb:04:83:38:73:66:5c:4a:
c8:ac:11:69:05:79:29:a9:81:dd:e3:2b:e7:40:80:
84:83:00:e5:bd:e3:1b:d9:8d:66:f0:a6:68:2d:75:
d7:a5:4a:c2:73:21:c5:eb:c6:2e:db:0e:17:1f:3b:
5a:09:a4:33:fd:fe:cc:3f:f2:fa:16:6b:66:a1:ad:
d4:aa:16:af:94:67:94:bc:3a:77:e6:92:68:a9:f7:
4f:0b:b9:72:c1:95:df:f9:8b:f9:b0:ed:f4:71:6e:
91:d8:c1:39:25:18:d7:bf:5d:91:57:65:e6:ae:3f:
28:32:d1:6a:c3:08:c9:45:22:d3:61:94:58:83:59:
35:71:5f:d5:92:a2:03:dc:38:c4:29:ef:7a:dc:03:
dc:32:9f:47:88:0d:80:52:6d:02:ed:e1:dd:54:85:
ba:16:47:e3:ba:97:97:da:0a:3e:3d:e5:e0:a9:65:
1f:ad:33:e4:03:f5:ca:12:bc:e4:03:d5:a2:7d:6a:
d7:5f:8b:17:4f:26:05:75:84:4f:fe:06:42:9e:97:
80:4e:d8:10:74:69:c3:d8:94:cc:a0:99:8d:ef:e5:
98:67:bd:f4:3c:fa:e3:73:21:1c:82:09:11:38:25:
b5:35:01:ac:10:22:77:76:98:f8:f6:cf:21:d7:9f:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6A:36:CE:14:55:05:36:A0:0B:24:A1:DD:22:D7:19:30:24:94:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5835a08-715c-3165-8299-1c465fa17070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:76:4f:c6:a8:3e:52:37:27:ff:f3:b9:69:da:ab:90:5d:6a:
59:d0:a2:e5:50:06:64:cb:67:50:8f:af:2f:97:37:7a:ef:8f:
b2:e1:83:a4:60:46:a9:2a:a0:33:c2:e9:18:c4:e0:86:aa:74:
ef:9b:0d:9e:78:1a:24:b7:ef:56:88:05:0a:06:58:df:62:d7:
48:c9:58:74:3e:5a:1c:e8:30:aa:60:10:7f:e8:5e:30:0f:19:
d0:64:11:05:d2:cf:7c:55:67:33:18:a7:4e:cb:8a:9f:18:f1:
2d:a4:f5:80:2d:99:a8:9e:2f:4a:6a:84:4d:64:63:e1:80:40:
43:6f:4b:c8:1b:ac:8b:4c:bc:de:51:e2:6b:30:81:87:3d:c8:
86:f1:2c:e6:fb:d0:ae:fe:1b:c3:a1:db:be:c0:04:9d:b1:94:
26:85:b4:25:12:e0:ca:78:b0:cd:cb:b8:a8:3b:7e:c4:5f:d3:
97:3d:27:78:b3:5f:bb:24:83:89:7f:33:38:7c:7e:52:3a:a8:
c7:fb:e9:82:2b:3c:7a:31:03:99:82:e4:12:4c:06:87:cb:ff:
22:3b:85:de:25:dc:b1:50:68:d8:a6:1e:f5:cc:99:5f:1b:2c:
4d:d5:04:c2:40:80:fc:08:fe:dd:68:8d:5d:ba:d6:a1:06:0f:
3d:c3:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:49:36 2025 by rpki-client