Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa
File: 7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa (raw, json)
Hash identifier: sU18kJZFpojEQM+1qvjK8G7bOlWqyLIkPV0J/cyxJD0=
Subject key identifier: 49:7C:F0:8A:59:B6:93:CC:7C:F7:F7:84:B0:6A:11:19:80:88:37:02
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858483F801C60EFF1B06F6A1B33C0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 13414
IP address blocks: 199.16.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:1c:60:ef:f1:b0:6f:6a:1b:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=9c85f176-142f-4f51-ad08-3c3572f2a17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:94:b0:c1:9f:0e:b3:21:ef:19:99:b1:23:
d8:f4:3e:3d:ac:81:7b:e3:2f:03:06:a6:e0:6b:64:
1c:25:a2:2f:4b:57:57:62:06:1c:dc:6d:9a:33:56:
ea:d2:2d:d7:39:de:93:dd:8b:45:08:61:42:76:5f:
d3:f5:4a:0f:d7:90:7b:6c:15:f9:3c:bb:68:4b:62:
78:61:31:cb:0a:ee:88:93:ec:4a:e6:12:38:96:e8:
b8:2e:83:65:21:d1:fb:d5:c2:75:ab:9b:8c:f4:ee:
e0:93:aa:c0:2e:82:d3:04:0e:d8:12:bc:e5:9e:9d:
25:8d:6c:02:aa:6e:5f:25:08:ff:82:a5:2c:07:e9:
1f:f9:32:e3:f0:f7:6e:6c:3e:57:8a:75:11:ae:cb:
85:41:eb:a7:66:eb:0d:c7:68:1f:00:81:d9:bf:e2:
ee:cc:0a:cf:a0:64:12:92:8d:c7:50:66:ce:03:89:
62:82:59:cf:08:b9:29:c6:47:aa:c6:13:55:b7:65:
c0:58:9b:95:a0:e8:1b:d6:c7:66:86:a6:e9:19:28:
df:2b:a3:94:3a:f0:b1:a3:0f:98:69:e3:52:d8:9e:
2b:83:e7:82:b2:f8:0f:19:af:59:3e:2a:3a:af:8f:
e9:0b:18:43:92:b3:ab:c7:23:7e:11:3c:89:d3:15:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7C:F0:8A:59:B6:93:CC:7C:F7:F7:84:B0:6A:11:19:80:88:37:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:cb:cc:af:6f:0b:00:67:61:34:4c:91:5e:bf:9c:3c:bd:c6:
e1:c6:5a:f7:de:eb:af:2c:bc:a9:60:6f:58:9d:42:69:c6:bf:
f3:0c:0f:4a:f7:0f:a2:85:32:d3:fa:e5:41:b0:c0:53:08:ef:
4a:32:84:c3:b5:62:2e:a6:0e:98:e7:12:a6:27:3f:43:da:ad:
5a:58:98:d4:39:60:f0:59:78:c6:8e:12:88:cb:47:71:6e:e8:
1d:1a:2c:15:a3:ff:03:4d:40:c1:19:38:77:f6:a6:22:40:da:
9d:95:4c:7d:09:97:8b:3d:07:15:f2:c5:3e:96:4e:22:a6:a2:
57:38:17:f2:c5:99:3d:84:cf:02:4c:e3:2e:db:5c:4b:9d:e4:
02:b1:98:91:67:ca:27:ce:d0:8f:35:2c:ce:10:30:01:ac:c6:
2a:ad:47:d7:45:40:a9:39:51:90:53:1e:7d:5b:ad:c2:fc:4b:
c7:5c:d3:6f:c9:6b:c2:30:0d:1f:47:57:f6:6e:76:e0:d4:db:
a5:15:43:05:bc:cc:5d:7e:b7:7c:e5:5d:15:ed:a3:05:b0:91:
43:c8:64:fd:da:7c:00:af:87:3a:fa:2e:d6:34:c5:25:7b:6a:
e0:30:a3:42:c8:52:7b:a5:d3:b6:a5:09:f9:2e:4e:b5:a8:fd:
b1:78:8d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:25:08 2025 by rpki-client