Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb140d9f-3941-3d05-b458-3b1bf60c2605.roa
File: fb140d9f-3941-3d05-b458-3b1bf60c2605.roa (raw, json)
Hash identifier: AoGm/AEC2qcz/Bge2czTa/0dyQULKzyKUoLCr7h1T9s=
Subject key identifier: 64:92:5F:E7:32:89:F2:AE:5F:AE:CC:4A:0B:58:F1:BF:7F:0A:FF:1B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088185FECAC5579E68DE8600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb140d9f-3941-3d05-b458-3b1bf60c2605.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 162.158.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:85:fe:ca:c5:57:9e:68:de:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=019a460c-de27-48ea-8f51-b584914292c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:ae:ee:a3:85:61:67:8d:b3:a9:6a:53:16:
4c:c2:65:d3:54:9e:88:20:41:87:89:63:2e:4f:18:
e7:4e:10:26:15:8f:d2:df:75:28:90:e5:91:47:48:
d3:86:a4:bd:cc:2d:7f:5e:ab:6d:e0:f6:52:b0:c4:
7f:b8:e0:d8:1a:f6:65:c6:80:83:70:1f:74:ac:24:
ee:95:b3:f8:7d:8f:0f:48:b6:48:44:68:c2:70:70:
34:c2:c0:7e:2b:3d:80:0d:6d:8f:03:ab:45:a5:ac:
ee:29:48:b5:cc:8e:f9:54:47:05:c8:f9:ff:f0:87:
14:17:2b:98:94:ee:7b:ee:c2:a7:57:a8:b9:81:e7:
df:be:c2:78:62:13:bc:5b:27:cb:d2:96:ee:e1:3f:
d2:6c:80:73:ce:6b:43:24:f3:49:d4:3a:58:31:85:
26:4b:de:98:2a:af:e5:e6:51:d6:ac:4b:50:6f:03:
a4:0a:11:4f:65:4d:c6:47:2b:07:7d:22:ec:10:f4:
7f:cb:8b:cd:79:ef:dc:d9:12:ea:e3:4e:3c:a5:03:
eb:00:16:5b:8e:06:7b:b2:42:8a:2d:5d:bf:1c:2c:
70:11:ea:d6:d8:9b:ec:b0:07:43:6a:55:ad:bf:af:
22:27:b5:5f:fd:80:8b:0e:b4:79:41:41:97:7a:8c:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:92:5F:E7:32:89:F2:AE:5F:AE:CC:4A:0B:58:F1:BF:7F:0A:FF:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb140d9f-3941-3d05-b458-3b1bf60c2605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:9b:b8:f8:ba:b5:94:70:00:7f:31:eb:35:82:d9:39:71:33:
24:30:88:ee:07:6a:a8:c3:e6:e0:eb:42:94:49:1b:16:8b:20:
47:bc:81:b0:53:19:d8:65:0d:2c:68:92:53:0b:28:20:35:1f:
69:b5:46:fc:40:a5:73:dc:f6:e5:33:46:00:b6:6c:08:51:97:
37:3c:48:aa:33:50:09:82:f0:11:8d:7b:14:ff:8c:06:99:6f:
e9:f6:47:ee:8d:60:78:56:62:4d:bb:e6:b4:d9:3a:ab:dc:2b:
de:d9:78:e3:78:cf:95:de:e2:07:93:c3:e8:dc:df:4c:4b:fd:
ea:c9:f8:7a:d9:32:a8:a9:7e:75:af:cb:f7:1b:31:d8:2f:a3:
98:ae:65:f0:4e:1d:7f:ff:13:99:32:1f:fa:2f:9c:a6:19:39:
0b:38:9c:35:77:05:dd:eb:7b:24:b0:06:6d:4d:36:7d:da:38:
b1:02:47:65:d9:9b:e9:57:69:5e:00:e9:e9:26:f0:52:86:89:
92:b8:9a:d3:bf:96:92:f0:8b:9d:5f:8c:06:65:5b:9e:80:8c:
38:5b:c0:ec:bb:91:a4:a2:af:1a:9c:e8:d1:86:e6:9f:37:38:
39:7c:cb:62:86:f8:8f:0e:9a:ce:1d:c1:20:ca:aa:7b:72:b4:
b8:d3:0d:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYX+ysVXnmjehgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
MDE5YTQ2MGMtZGUyNy00OGVhLThmNTEtYjU4NDkxNDI5MmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIKu7qOFYWeNs6lqUxZMwmXTVJ6IIEGHiWMu
TxjnThAmFY/S33UokOWRR0jThqS9zC1/Xqtt4PZSsMR/uODYGvZlxoCDcB90rCTu
lbP4fY8PSLZIRGjCcHA0wsB+Kz2ADW2PA6tFpazuKUi1zI75VEcFyPn/8IcUFyuY
lO577sKnV6i5geffvsJ4YhO8WyfL0pbu4T/SbIBzzmtDJPNJ1DpYMYUmS96YKq/l
5lHWrEtQbwOkChFPZU3GRysHfSLsEPR/y4vNee/c2RLq4048pQPrABZbjgZ7skKK
LV2/HCxwEerW2JvssAdDalWtv68iJ7Vf/YCLDrR5QUGXeoxhiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSSX+cyifKuX67MSgtY8b9/Cv8bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmIxNDBkOWYtMzk0MS0z
ZDA1LWI0NTgtM2IxYmY2MGMyNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop74MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACibuPi6tZRwAH8x6zWC2TlxMyQwiO4HaqjD5uDrQpRJGxaLIEe8gbBT
GdhlDSxoklMLKCA1H2m1RvxApXPc9uUzRgC2bAhRlzc8SKozUAmC8BGNexT/jAaZ
b+n2R+6NYHhWYk275rTZOqvcK97ZeON4z5Xe4geTw+jc30xL/erJ+HrZMqipfnWv
y/cbMdgvo5iuZfBOHX//E5kyH/ovnKYZOQs4nDV3Bd3reySwBm1NNn3aOLECR2XZ
m+lXaV4A6ekm8FKGiZK4mtO/lpLwi51fjAZlW56AjDhbwOy7kaSirxqc6NGG5p83
ODl8y2KG+I8Oms4dwSDKqntytLjTDX8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:49 2025 by rpki-client