Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0038ee08-3add-3ae1-9e93-c67f4f184c5e.roa
File: 0038ee08-3add-3ae1-9e93-c67f4f184c5e.roa (raw, json)
Hash identifier: FTlo+BIoPxJBk4DexeAz52XSD2ImMaqaN8uc0xDbXYI=
Subject key identifier: 79:0F:F9:48:B2:7D:8F:93:19:12:8A:FB:73:E9:21:8E:AD:7E:9E:FC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210375C9232678C6BAF580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0038ee08-3add-3ae1-9e93-c67f4f184c5e.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397242
IP address blocks: 156.154.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:03:75:c9:23:26:78:c6:ba:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=aba70dcc-d9e9-4051-a141-95787c26510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:af:52:69:03:01:9f:b0:5c:64:06:a1:7d:
28:31:7e:af:01:64:cc:57:45:67:91:28:28:e2:ea:
68:57:0f:55:6d:48:02:1a:99:3e:9a:7b:d8:d5:e0:
d1:70:93:cc:92:4b:70:0c:14:e4:b2:cd:c9:40:ea:
4f:da:df:11:c8:f1:f4:d8:21:dc:bc:66:e5:9f:c7:
b2:16:c9:42:94:04:cf:3f:d7:c7:1a:79:19:92:ce:
32:a0:6c:98:10:56:d8:c0:cf:8a:b4:55:c0:a2:eb:
9c:3b:55:8f:08:3a:1e:b7:25:8c:ec:da:41:e1:17:
96:0b:f9:67:14:ca:a8:04:05:6c:55:ff:2c:ba:0f:
b3:27:26:e0:fb:f0:cc:79:a7:c3:5b:59:3f:70:6c:
33:a7:8f:fd:bc:98:cf:82:09:c1:c3:dc:34:54:5f:
db:5b:c2:68:fe:97:9a:7a:d5:2e:c5:dd:7e:c1:d9:
78:f7:1a:6a:27:44:36:15:1e:97:b0:37:7b:c0:04:
7f:b6:e2:42:ec:9a:50:ff:2d:b6:be:cc:d1:d5:05:
f4:2a:14:7c:e8:67:38:44:a8:0c:e6:d6:db:e0:bf:
78:6e:c4:2a:18:fb:07:60:eb:fd:50:66:50:fa:66:
55:cc:ea:a9:85:94:1c:2b:7e:45:1e:d7:0d:a9:29:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0F:F9:48:B2:7D:8F:93:19:12:8A:FB:73:E9:21:8E:AD:7E:9E:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0038ee08-3add-3ae1-9e93-c67f4f184c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:16:04:fc:d0:8d:56:37:58:7d:c4:01:8c:d8:c6:da:ab:b0:
0c:1c:9d:41:a0:cf:15:ed:be:5a:e8:27:96:4f:c5:a6:d2:d8:
43:04:30:7b:50:42:7f:2c:c5:6e:e2:88:db:d0:32:c4:e9:75:
fa:c7:94:9b:10:c2:46:44:29:8a:2a:7b:83:ab:ae:f6:94:f0:
85:cd:a5:86:37:6a:09:19:13:ba:19:67:d3:48:9e:6b:d8:7b:
51:26:23:b2:ed:7d:1a:12:06:9a:64:67:05:ed:05:31:eb:08:
25:1d:f1:de:54:72:57:3b:9a:24:4a:63:32:d4:78:42:de:4d:
7a:f5:0a:05:e5:24:20:00:2d:e9:4e:53:dc:a7:6d:29:6e:b2:
df:ad:b4:3d:60:2c:11:4d:f4:4a:c0:4e:6a:ca:a8:05:a0:7e:
4e:76:20:8f:eb:f2:71:6d:3d:b4:cd:a2:c8:58:45:86:40:99:
76:94:a6:4a:09:e4:4c:45:f9:07:cb:5c:ce:13:e5:3f:c7:c9:
a1:88:e7:91:e0:23:e8:81:c1:57:d3:12:da:71:37:ef:5a:08:
68:96:33:2b:75:d0:e0:65:d0:72:45:95:44:6e:7a:39:93:7b:
3f:76:3b:cd:7d:b5:c8:10:ee:09:3e:ae:16:b3:b6:c5:55:a4:
ef:5f:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:20 2025 by rpki-client