Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00600845-74b3-370b-a60b-f2825d417d1f.roa
File: 00600845-74b3-370b-a60b-f2825d417d1f.roa (raw, json)
Hash identifier: cX/BzHKBwbMNEmdKVcobELK6es3VNwQTm0+P08cZQsA=
Subject key identifier: 28:D7:27:6F:BA:32:B7:7E:BC:C1:CD:39:17:47:58:2D:3A:0D:FC:55
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246EBF87B3F0679F32D8280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00600845-74b3-370b-a60b-f2825d417d1f.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397223
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:eb:f8:7b:3f:06:79:f3:2d:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=5e6c2212-393e-4a2c-bee4-94618c135abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:ec:fc:19:cd:12:d2:9e:86:86:4b:80:c6:
07:3f:1f:f1:e5:65:d3:08:3d:f9:2e:19:05:d8:47:
a2:a0:ce:83:93:dd:72:1e:7e:4d:9a:e0:ce:43:2b:
12:fa:ff:7e:b2:7e:bc:75:b0:7e:30:00:1d:93:f3:
36:69:85:9c:42:df:c3:5a:58:9d:cc:b0:0f:df:14:
08:c8:ac:9f:94:99:d2:a8:3e:cf:c8:cf:93:9e:a8:
63:1e:95:a8:f9:d0:44:39:55:e6:83:14:82:a4:93:
78:d5:32:b5:08:de:15:ba:bd:ef:7f:3a:64:76:57:
d1:8f:02:33:76:4e:9d:9e:12:80:e3:50:53:95:16:
3c:20:50:e9:4f:9e:ba:70:69:a9:09:53:80:b6:96:
e8:c4:20:18:72:b4:c9:64:f7:f3:7a:c5:47:99:94:
f8:6b:9e:eb:9b:eb:83:5e:9d:22:af:83:55:23:c3:
ef:fa:32:48:09:f0:4b:dc:02:d0:6e:5e:23:07:22:
41:bf:7e:a8:da:b1:43:0e:29:99:c8:a3:e3:05:9f:
10:2e:f5:74:07:07:63:39:b8:35:e1:65:12:40:4e:
ff:93:f4:45:a0:95:44:bf:8c:9b:25:9c:6b:e7:81:
cf:cd:ed:af:f2:75:7e:03:72:7d:8f:ef:bc:f1:fb:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D7:27:6F:BA:32:B7:7E:BC:C1:CD:39:17:47:58:2D:3A:0D:FC:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00600845-74b3-370b-a60b-f2825d417d1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:54:6c:92:e1:60:af:43:ed:e6:01:11:17:6e:5a:18:db:e9:
a6:2c:89:c3:3f:c5:9e:f8:e7:da:7e:02:6f:03:b6:01:26:51:
d2:b0:38:a6:6f:61:cf:94:36:e3:c6:27:29:b9:c7:4b:ee:e1:
e7:93:c5:eb:0e:69:f2:27:27:5e:56:60:6f:c0:db:56:14:cd:
cd:75:d1:ab:02:a2:f5:77:29:69:14:63:20:4b:d3:7f:2b:e7:
41:7f:f5:00:b6:53:b3:0f:b2:35:dd:8a:43:8f:25:35:40:10:
54:0f:3d:d0:78:b0:52:04:3e:a0:38:ba:1c:c5:7e:91:3e:df:
f7:ae:26:fc:72:cd:b8:b7:1f:60:d1:d3:95:14:d0:8e:fc:90:
99:bb:96:24:bb:9e:60:85:e2:2d:aa:db:c2:7b:24:4c:99:4f:
98:ce:1c:90:77:60:e6:46:32:3a:b1:13:cd:53:0d:f4:1a:b1:
ab:9c:e5:69:67:9f:4d:96:2e:bc:0a:a8:06:ce:ff:a7:42:ed:
8f:85:aa:fe:66:40:4f:d8:12:79:af:9b:d9:75:b8:08:71:be:
77:af:88:5f:c1:d8:d8:09:42:49:5b:5b:00:0c:2e:12:a9:21:
b2:2d:c6:03:79:9a:c5:83:ed:b0:b6:d6:5b:d3:a7:4b:b3:00:
cf:bb:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:48:27 2025 by rpki-client