Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa
File: 520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa (raw, json)
Hash identifier: 5Wvpd2SYkxdC2i45oczvLfQ0ro0e/dOll2Nb4ZdVI9k=
Subject key identifier: B1:C9:04:F9:F0:68:60:42:C2:13:7D:A0:9D:7E:2A:B4:FA:09:71:8F
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858483F802695DD67925913F75D00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 13414
IP address blocks: 199.16.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:26:95:dd:67:92:59:13:f7:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=410c991e-fa1c-45a3-b631-473efb80ecdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:fe:ef:c5:ad:1a:b3:b6:88:ac:ac:7f:a7:
1b:2e:de:5c:a0:51:2c:b6:64:68:b0:07:ff:c3:d7:
13:ce:4f:fc:0d:c9:1b:10:4d:94:31:d1:3d:3f:25:
27:2f:c1:9a:29:1c:a7:72:e0:22:8b:df:34:23:74:
3a:7b:d0:b0:98:25:03:f5:f8:44:b7:82:2d:51:45:
35:b8:3c:e6:8c:6d:4f:a8:d3:57:93:fa:3c:2a:96:
cb:2d:1a:f4:77:82:09:a0:c6:3d:cc:16:33:1a:ce:
a0:30:97:4a:4f:10:bb:dc:5d:8e:92:c2:00:21:f2:
78:b2:ab:ac:52:50:d6:08:19:19:4b:af:c2:1c:7c:
f8:e1:e7:b0:19:6d:01:27:7d:b3:f0:83:00:ef:c8:
e7:96:d5:60:b5:1d:a4:6d:7c:bc:aa:45:12:9c:01:
7d:02:34:8b:56:1f:f2:ac:1a:27:17:e8:f1:f5:1b:
ed:89:3a:27:ee:6e:51:8b:b1:9a:f9:5e:52:29:a4:
93:d2:ad:b9:49:ee:f9:70:0a:68:32:a3:c3:2e:ed:
84:7f:aa:b0:a4:5f:bb:27:ba:60:4b:16:c8:a0:8b:
5d:c2:85:8f:88:2c:36:be:97:c7:26:0c:42:66:21:
e4:7f:b0:b5:22:e5:87:8b:ed:b5:d2:90:09:90:8d:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:04:F9:F0:68:60:42:C2:13:7D:A0:9D:7E:2A:B4:FA:09:71:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:ef:9c:f9:f7:af:18:ee:37:8b:2d:ab:af:b9:bf:a5:78:7d:
84:bd:25:83:21:fb:dc:cf:69:9c:2f:5e:4a:89:2e:71:6f:8f:
a1:4d:a3:64:e6:6d:33:a6:a5:13:a6:74:d0:1f:f9:0a:00:b0:
ce:29:ff:d4:d8:2b:80:78:8e:3e:3b:58:6d:f5:fb:35:48:b7:
55:db:e7:f0:6d:e4:e4:c9:03:50:30:38:af:42:ad:11:16:86:
7c:c7:9c:08:f3:17:18:ad:94:fa:b7:77:39:24:a2:47:4b:65:
20:47:1d:9a:fd:b6:e9:6e:47:87:04:28:f4:f1:4e:11:6b:29:
c2:82:12:3f:78:d9:17:13:d8:1e:c6:e8:1a:00:e6:20:47:8a:
8e:b0:3f:67:4a:00:f2:f2:f1:46:3c:54:45:84:c6:94:c9:66:
4f:c9:19:ec:8e:28:be:ff:d6:d4:11:db:36:4a:27:dd:ac:5b:
7b:81:43:b6:34:88:df:53:7c:3d:60:62:de:15:5f:6d:aa:b4:
74:cc:6d:90:8b:d0:56:b0:d7:fe:8d:28:e5:d1:43:0f:a2:aa:
cb:56:08:24:51:c4:00:d8:64:c9:a5:e7:54:4c:88:2f:bf:35:
6e:58:29:7a:5e:e2:f0:71:3d:cf:c7:05:8f:dd:c6:a4:f9:c0:
88:c8:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:25:07 2025 by rpki-client