Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/5be5ad73-a914-3384-9e14-732ca96fcc5d.roa
File: 5be5ad73-a914-3384-9e14-732ca96fcc5d.roa (raw, json)
Hash identifier: CN2pRL09vQUVwQoBZokmSxxPu5ZkFJVFBMT70Xae1fA=
Subject key identifier: 88:C2:47:0D:A7:4F:AF:B5:63:22:42:AA:1A:8B:BF:77:CF:15:15:34
Certificate issuer: /CN=0655a237-1542-4d7b-9294-28c73bb1f8da
Certificate serial: 010D0C9F432858489E6B64ADDF7A933E0D1B9300
Authority key identifier: B1:85:3E:F6:2F:39:04:E8:FB:1E:B7:65:52:88:16:30:08:FB:07:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/5be5ad73-a914-3384-9e14-732ca96fcc5d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 396982
IP address blocks: 208.67.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:64:ad:df:7a:93:3e:0d:1b:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0655a237-1542-4d7b-9294-28c73bb1f8da
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9369bedd-2056-4373-b471-73da90086b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:0b:71:8e:fc:4b:78:ea:5d:c0:22:33:5b:
98:68:44:29:94:a1:c8:c9:34:f5:37:d2:53:67:87:
a7:9c:aa:57:ac:c7:ee:22:c5:9e:2f:a3:02:ab:b7:
01:47:06:6d:e3:72:e6:a4:2a:e0:8d:71:6c:45:aa:
31:26:ea:2b:c5:f0:da:94:2d:37:ed:1f:80:b3:60:
14:86:2d:6c:03:2e:dc:04:bd:6e:f9:cb:1b:30:a4:
25:7e:c9:14:6f:7f:01:a3:65:33:0f:b3:d9:d6:67:
42:d7:d2:0f:72:e6:2e:dc:5e:1b:69:a7:85:71:f5:
e6:05:da:46:f9:62:16:50:54:e6:cc:7a:ff:cd:04:
ce:0e:dd:e6:05:23:9a:e0:dd:3a:e5:fc:6e:97:92:
00:c0:a6:29:91:26:bd:d2:5d:1a:fd:24:ab:5f:4c:
3c:db:dc:44:8d:c1:63:83:e4:c9:52:7e:2a:08:aa:
d8:50:a8:7b:40:11:22:25:3b:a9:1b:b0:df:fa:30:
97:1e:9b:ca:09:7b:0b:a3:43:3c:3f:b9:bb:7c:ec:
cd:0b:15:79:e7:71:2c:1d:ba:ff:c4:e7:f1:00:f6:
96:33:18:c6:fc:3b:45:2f:95:2f:d3:67:14:91:11:
8a:87:97:df:25:01:dc:82:fa:a3:be:de:f3:a6:51:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C2:47:0D:A7:4F:AF:B5:63:22:42:AA:1A:8B:BF:77:CF:15:15:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/5be5ad73-a914-3384-9e14-732ca96fcc5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/0655a237-1542-4d7b-9294-28c73bb1f8da.crl
X509v3 Authority Key Identifier:
keyid:B1:85:3E:F6:2F:39:04:E8:FB:1E:B7:65:52:88:16:30:08:FB:07:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:78:d1:bf:7e:0d:37:dd:4c:65:48:8f:ad:77:0f:7d:02:ae:
b9:42:46:fa:2b:ed:e8:1a:13:cd:d1:b1:fc:85:2b:82:b9:85:
3e:be:aa:e7:d5:84:42:f8:32:d3:af:b8:26:f0:a3:e2:2a:d6:
23:ba:4a:80:6a:e0:94:1e:da:37:0d:1e:03:07:75:01:52:b2:
59:bd:43:81:40:c1:43:73:a9:86:1c:ce:7c:92:23:c7:80:4f:
f1:e0:c2:dc:c3:ba:a9:90:26:e1:c9:f7:1d:32:25:99:45:76:
37:44:32:a0:41:b0:0b:b1:78:6d:30:5e:db:0b:21:ce:c7:a6:
b4:af:52:c7:a4:69:4c:a7:91:f5:8f:c7:d6:90:6d:56:13:d6:
72:a0:b5:b8:33:d4:b8:a0:27:2c:a3:d2:43:88:4f:de:71:3d:
d3:67:33:a7:3f:e9:b8:09:b0:8e:af:86:af:a8:c4:0f:cf:bb:
8a:d4:9d:4e:4f:e2:08:76:99:5e:c7:9c:a0:c9:88:70:fb:39:
d9:25:e8:c7:e5:76:a6:d7:75:9e:7b:13:51:aa:1d:26:9c:a9:
6d:0d:c1:af:f8:5a:ba:9d:25:d9:e4:a0:56:dc:6f:93:18:cb:
2f:e5:da:6a:23:90:de:93:ac:15:62:6b:56:e1:c2:9f:25:48:
fe:19:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:45 2025 by rpki-client