Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa
File: 714385cc-6caf-3534-9571-6bf92f8ea373.roa (raw, json)
Hash identifier: Z+6w5u6+VfZMTYiqCi7ggi2rq3aQGalH0PBwF+xrqqw=
Subject key identifier: C2:FC:D6:55:2B:17:A6:61:F9:89:7E:DB:72:66:AA:E6:95:A8:01:4F
Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753
Certificate serial: 010D0C9F4328584913AC1EB3BECA6714FED2E800
Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 7922
IP address blocks: 134.195.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1e:b3:be:ca:67:14:fe:d2:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=45a973bf-7f6b-455f-9a41-b11afda39d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:53:82:42:72:15:16:5d:ec:1a:5b:b5:ea:59:
9b:47:e9:0d:3b:40:13:8f:ee:0b:e1:51:b4:5a:cc:
9f:34:3c:82:0e:0d:65:96:51:f6:3c:d6:29:cf:48:
c1:d3:ba:4e:d9:db:87:99:35:cb:e7:da:f4:6a:29:
75:3b:18:1a:b9:01:ac:61:f6:99:99:9d:99:c7:eb:
55:94:fe:8c:1b:56:bd:58:04:09:76:76:34:5e:ff:
59:a3:9a:cf:c2:d8:0b:80:29:86:f9:a6:3a:bc:f0:
66:54:fc:c9:d1:ff:df:da:06:7c:ca:01:97:57:49:
a6:5e:da:c9:fc:f5:29:a1:c0:d2:66:a9:c9:59:a2:
d8:8c:5f:25:85:e5:b7:dd:b9:b2:09:d0:9b:fa:dd:
10:40:59:5c:4e:68:7d:20:c0:30:65:15:e5:31:4c:
14:2e:4d:5e:9e:89:99:bc:f6:8b:50:60:29:27:66:
cf:32:bf:62:3f:e2:80:0f:24:0e:cd:56:c4:0f:02:
13:5a:91:cc:20:ac:b6:67:3a:d7:29:f5:77:c1:37:
44:f8:ed:73:2a:a9:fa:c5:cd:d5:ce:29:42:63:c1:
b1:b0:59:2c:3d:3e:59:5e:a5:56:1c:52:c5:24:7e:
4b:10:de:8b:25:3e:cf:0d:10:93:6f:8c:69:12:c2:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:D6:55:2B:17:A6:61:F9:89:7E:DB:72:66:AA:E6:95:A8:01:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl
X509v3 Authority Key Identifier:
keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:da:b9:65:97:9b:bf:23:94:a0:4b:70:78:ca:58:a4:7b:2c:
46:5e:ad:c6:fc:29:cb:c8:ef:db:34:29:8c:b7:cf:be:0d:fb:
59:26:5c:e5:76:6e:db:75:55:85:e2:da:cb:c9:31:4d:48:51:
88:19:32:d2:0e:ba:2b:70:4e:fd:8b:06:e7:37:45:5e:2d:59:
0a:dc:5d:73:60:56:44:ed:9a:ae:4d:95:14:c3:5a:e1:8d:d3:
80:d3:2d:2d:bd:9b:d5:cf:d2:ba:6d:67:01:aa:8b:96:81:ec:
98:33:54:4e:d2:43:7b:d9:97:cd:b0:1f:34:82:48:0e:c8:9a:
c8:29:41:d2:8c:aa:c5:2c:23:7c:0f:2c:bb:b0:f8:9e:8d:33:
0f:f3:41:f6:d0:1f:96:c4:ca:f8:1e:be:2c:43:7c:ac:71:3a:
c4:15:ae:23:fe:94:bc:a6:aa:64:ba:52:82:dd:d3:3f:52:3c:
2a:03:c7:6f:d2:95:4d:a8:47:58:97:6e:56:54:52:59:14:5d:
6c:82:79:fb:7b:c9:c0:a1:fe:c8:8b:29:ff:51:b3:37:42:ec:
38:ca:1a:7a:7f:3a:bc:02:b5:91:93:0b:6d:4b:39:6d:81:4a:
34:3d:b7:cb:d9:96:ab:85:93:e0:0e:46:f4:fd:5c:dd:17:cb:
2f:cb:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:50:26 2025 by rpki-client