Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/7400a854-9ce1-369f-9bd1-4b942cd0108f.roa
File: 7400a854-9ce1-369f-9bd1-4b942cd0108f.roa (raw, json)
Hash identifier: j01RKfRSsCk/VGa+x4aM6uZ8Up157aAWbAFX+OPqw3Y=
Subject key identifier: 49:28:B7:92:FC:8D:C8:65:68:13:23:D9:8F:11:3E:90:34:BE:79:F6
Certificate issuer: /CN=85befeae-24b8-4c74-a4dc-19e1382944ad
Certificate serial: 010D0C9F43285848BFEBA17A30084EBF344D3700
Authority key identifier: C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/7400a854-9ce1-369f-9bd1-4b942cd0108f.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 16509
IP address blocks: 156.154.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a1:7a:30:08:4e:bf:34:4d:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85befeae-24b8-4c74-a4dc-19e1382944ad
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=cc980560-f660-494b-b081-44e8e4c0e4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:5c:77:f9:4e:89:42:14:94:45:82:e6:3d:
88:ae:03:da:b9:16:f2:47:63:3a:2e:7b:db:1a:b7:
08:77:66:e1:c5:00:3a:cb:c8:7e:7e:63:01:7c:51:
3d:b9:0d:d6:4f:0b:ca:38:16:63:b2:50:7f:4e:bb:
51:ee:f8:5e:5c:aa:b8:da:9c:80:03:6c:f3:f6:71:
26:87:52:7a:5e:51:91:84:2e:bc:67:54:12:cb:b6:
48:61:3a:f5:eb:86:a5:c9:6e:ad:c2:90:12:9c:57:
a0:27:0a:c5:e4:be:4f:22:86:5d:3f:82:73:dd:22:
22:41:f3:d9:b8:3e:62:b3:94:7d:c7:1f:fd:22:59:
20:aa:4e:ae:cd:73:19:bb:81:7c:79:75:0b:82:3e:
82:7b:7e:4c:3a:9a:72:75:1a:f4:3c:09:21:b6:40:
17:63:e8:eb:0f:95:c9:4d:89:e9:71:a9:b1:c3:11:
d0:22:c6:0e:a7:05:42:07:b5:74:34:97:5b:93:9e:
5d:8d:09:85:a0:69:f1:8a:4b:dd:97:14:d5:03:01:
f1:b6:59:81:44:21:21:71:ab:e0:1f:3e:6c:6b:04:
88:54:1e:9b:db:a9:81:31:ec:eb:fd:3a:46:12:90:
cc:c0:db:c7:8d:75:32:7a:9b:15:68:59:f2:67:ba:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:28:B7:92:FC:8D:C8:65:68:13:23:D9:8F:11:3E:90:34:BE:79:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/7400a854-9ce1-369f-9bd1-4b942cd0108f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl
X509v3 Authority Key Identifier:
keyid:C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:79:1a:f3:58:60:f9:dd:b0:1c:a3:d8:12:9d:6b:f1:4f:c9:
ae:37:5c:0c:26:ca:e4:d5:ea:43:f7:ce:6d:ff:48:58:7d:97:
31:e8:e8:1e:c8:1a:71:34:7d:97:67:e8:98:28:14:a9:5a:24:
3d:9a:3f:2e:8e:00:05:a0:ab:5f:52:fa:54:1a:20:f7:e7:e5:
1c:d5:f9:de:7e:98:1d:9b:37:72:55:b8:06:26:f7:d6:78:b6:
9e:2d:9b:74:5f:38:33:a7:ab:2c:03:e1:0b:92:e2:89:dc:09:
09:6b:b3:67:10:8b:f1:52:f4:fd:68:a9:a2:d0:41:a7:ef:2a:
ec:7f:3b:73:06:14:0c:d5:31:cf:87:0e:24:c8:8a:19:62:ef:
a5:49:c1:6d:aa:f9:fd:72:73:43:b2:54:34:d9:d3:c7:91:3d:
cb:90:69:a5:15:dc:b5:7b:3f:f2:b4:6a:b6:79:37:20:f1:19:
e3:42:b1:9e:dc:90:9c:34:46:ba:da:47:b6:17:02:57:ae:ae:
0d:3a:0b:0f:e0:00:b1:22:63:3e:ff:9a:5d:4b:2d:87:d0:d0:
44:77:65:ae:86:cd:b2:9a:57:40:33:b1:cb:0a:3a:41:5b:41:
c2:85:65:24:94:04:08:a2:46:84:bf:cf:6e:37:f9:0e:04:67:
d4:bd:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:32 2025 by rpki-client