Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa
File: 520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa (raw, json)
Hash identifier: aL1tQfU2ykCjTr3dfK+7Elk+gRSYDwdeXvx7VLEZMmU=
Subject key identifier: 21:4E:F9:9F:74:C4:9B:9E:9D:00:88:E8:93:EC:57:D0:7C:E3:B1:69
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858491ED6DF67D961E86964ECF9F0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 13414
IP address blocks: 199.16.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:df:67:d9:61:e8:69:64:ec:f9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=2af77e08-0ece-46dc-9c89-139c27f19ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:b3:ff:91:6c:7e:37:af:87:93:12:4f:7c:
08:6c:dc:d2:2e:a3:88:b2:a2:46:ce:ed:c7:5b:05:
48:b6:34:f6:55:d0:4e:80:3d:be:b1:32:d0:bd:07:
fe:b3:da:0c:e7:e1:e0:b4:a7:e6:47:3d:69:75:74:
b3:20:db:6e:11:77:f2:5a:8a:4a:a1:e4:21:2b:94:
b4:81:41:f4:88:61:1c:c7:d6:07:78:d5:2d:c2:26:
9a:b7:ae:d0:b6:86:e2:72:0f:b0:9e:bf:58:2c:fe:
1a:c9:d7:68:62:83:d6:e2:8e:ed:ac:e4:5b:70:13:
35:b8:6e:95:8c:c3:6b:5b:18:55:8b:2b:62:b0:0c:
3d:c6:d9:ff:59:ed:2a:07:8b:40:7a:9a:a1:7c:4a:
1d:46:78:8f:05:c0:a0:79:3c:2f:c7:61:28:d5:79:
e6:98:55:b2:92:07:b5:83:6f:70:e5:b3:43:2b:0c:
52:fa:3d:c1:8c:4b:9b:8a:ff:2e:4a:af:bf:6a:fa:
71:20:74:16:77:9e:01:64:1e:fa:1d:76:6d:54:a2:
ff:52:b7:5a:c5:c2:de:db:84:18:bf:df:6b:71:bd:
97:8f:87:3f:a7:93:15:7c:ab:df:ff:e2:a0:88:2f:
fe:20:43:5e:d3:3c:c2:6b:7b:e7:ef:4d:1a:91:59:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:F9:9F:74:C4:9B:9E:9D:00:88:E8:93:EC:57:D0:7C:E3:B1:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:7b:bb:73:ea:3c:46:48:85:4e:08:6e:d9:12:5f:a5:61:d0:
15:38:0d:f1:3d:70:15:eb:62:28:77:61:1a:80:6a:18:05:37:
a2:dc:02:42:dd:63:0a:c6:26:40:a7:d0:58:18:25:bf:1f:5f:
0f:dc:d2:dd:9f:f8:51:2f:64:16:4d:a2:d0:21:5e:e4:51:e1:
b1:1d:23:12:42:77:ba:42:e4:c7:f9:24:40:76:47:93:b2:55:
8b:e8:54:ef:97:68:d3:d4:dd:14:6b:15:ac:c2:ac:34:4a:e4:
49:89:af:f7:3a:25:4c:71:f4:fb:92:5a:a0:24:4e:7e:92:b6:
45:ff:f6:f7:31:ee:26:05:2f:ad:52:41:57:90:05:47:9b:36:
b8:65:b3:64:87:d4:de:82:40:83:03:46:b4:b1:78:84:95:57:
16:57:6a:f7:f4:56:20:65:5b:02:23:85:86:04:e8:42:a6:d6:
57:38:01:ea:9e:3a:4c:c0:61:30:a3:7e:e9:5e:18:36:c4:9c:
e9:35:2b:e9:05:65:e3:b9:5b:c6:57:94:fc:47:88:b1:da:99:
a7:98:54:9f:b2:ea:51:5f:9b:49:88:61:d8:e9:3e:4c:8a:ff:
29:9e:a8:47:1e:00:ed:9c:54:92:13:19:fe:d5:e2:8a:96:1e:
5e:2e:79:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:09 2025 by rpki-client