Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8b40f68-e2f5-398a-a91d-0c618db7eb8b.roa
File: f8b40f68-e2f5-398a-a91d-0c618db7eb8b.roa (raw, json)
Hash identifier: mPDE+DOndhjY+JT+BNPfqbzywhV9eAJmImxo9FGjI0w=
Subject key identifier: 4F:89:BF:94:35:B1:CC:9E:4A:C4:FE:95:73:B4:7D:3F:B5:C4:D9:21
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490881837F194C315822E50C40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8b40f68-e2f5-398a-a91d-0c618db7eb8b.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 162.158.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:83:7f:19:4c:31:58:22:e5:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=fae6883d-679d-4f7c-9785-0bac22b9f99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:13:60:22:63:5e:fa:a1:c1:07:12:a2:93:7d:
ea:e6:b6:38:80:0a:fd:9a:1b:0e:95:3e:3d:e8:19:
3e:30:6b:37:ff:92:57:3a:c0:10:6c:c4:b6:7e:71:
05:a8:9b:25:a1:33:ae:53:58:58:b7:81:41:70:d6:
7c:6a:7a:00:b7:60:19:0d:9a:70:12:ab:8e:3c:77:
c5:31:36:1f:89:1a:f0:60:5e:96:9f:59:72:fd:bc:
c8:ce:5c:37:7f:c8:ba:b3:43:f2:54:32:97:38:00:
cc:ee:bc:6b:e1:e5:ad:aa:26:28:85:44:af:6c:33:
42:f9:29:36:23:4a:e2:e7:34:bf:94:f4:c9:ea:08:
f4:71:fd:5d:85:d5:74:2d:9e:c4:fd:ff:a5:14:b5:
52:34:0d:2b:6e:e9:43:52:4a:ef:92:05:86:12:85:
dd:fe:04:13:d1:82:11:b8:e5:fd:c5:8c:a6:78:ce:
b8:f4:c7:0b:9b:6b:fa:3e:a1:86:c0:7d:89:41:7b:
3c:9d:c0:e5:69:c7:be:25:e1:4f:08:43:67:14:ea:
ac:63:d8:e1:d1:bc:30:0e:41:02:b6:40:59:cc:e1:
a9:6e:e0:fa:3c:b7:ac:9a:49:d2:60:71:be:7f:66:
20:d3:9a:c5:de:82:ad:ac:62:9b:d4:18:7f:39:8e:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:89:BF:94:35:B1:CC:9E:4A:C4:FE:95:73:B4:7D:3F:B5:C4:D9:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8b40f68-e2f5-398a-a91d-0c618db7eb8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:bb:d7:6a:d5:d9:0e:76:36:4b:f7:9a:d6:ad:df:c2:0c:62:
a7:a2:1e:36:20:13:36:db:9e:13:d7:15:31:e7:95:b1:45:da:
aa:08:78:53:04:f4:36:28:ad:7a:3f:e7:df:24:5e:10:da:1b:
83:26:5e:f0:57:bc:ca:f8:16:6d:74:7d:5f:05:10:c0:4d:dd:
8a:af:38:05:b7:dc:57:92:f0:9b:7e:37:31:d9:72:5f:39:2d:
e7:96:cb:eb:29:be:05:c4:71:d2:45:84:53:d0:61:10:99:39:
f1:55:eb:2e:0d:48:ea:d9:49:57:a7:e7:51:20:4b:5a:4d:6d:
d5:77:85:e7:fb:10:89:05:c7:05:21:42:fe:5c:9e:d8:d2:b2:
d4:fc:c6:80:16:75:9d:26:df:c4:63:45:a6:39:49:af:1a:9b:
f7:f3:03:b7:4f:b4:6d:f8:3b:dc:91:43:2a:60:5c:ca:3d:c6:
6f:a3:fe:0a:51:75:ea:f5:09:fd:4e:ab:e8:72:8d:b4:2e:dc:
26:34:d5:03:ec:89:e2:39:45:40:0c:24:67:cc:05:79:db:ce:
8d:bb:75:27:4d:76:78:be:32:12:7a:98:d0:a1:65:6d:c7:ac:
e3:6d:b0:56:33:b0:02:85:a4:1d:7b:c6:96:9d:4d:29:d3:d3:
b6:3b:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:02 2025 by rpki-client