Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00d54591-f6a4-3d40-92ca-15d9ce300ee3.roa
File: 00d54591-f6a4-3d40-92ca-15d9ce300ee3.roa (raw, json)
Hash identifier: xDVRwT0XJFH5+cUhEFPylbIvWO7eb87zNTHdND9zivE=
Subject key identifier: 3A:E2:7D:8B:F9:32:9E:F6:B2:DA:92:BC:39:60:77:E2:91:55:B1:CE
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E1DEA8B1E0C4C2F79900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00d54591-f6a4-3d40-92ca-15d9ce300ee3.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397241
IP address blocks: 156.154.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e1:de:a8:b1:e0:c4:c2:f7:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=7f5dcae1-a239-4c14-91da-0030aac75ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:a3:84:44:5a:27:b9:85:e3:28:3c:0a:2a:
41:eb:25:11:d5:64:b2:47:6d:3d:07:a3:03:88:93:
ba:e8:ac:d1:ca:56:52:34:59:84:06:bb:ad:bf:89:
c6:cf:24:42:4e:28:d1:d1:a2:80:aa:a9:a9:98:5e:
12:fb:53:fc:fa:cd:68:25:87:4c:37:fd:11:3d:be:
80:d0:e6:e1:25:26:f2:85:e8:07:a7:9c:6c:ca:f8:
cc:a7:bf:cc:86:ab:03:cf:c4:62:5a:ae:bd:be:0a:
cf:dc:7f:57:85:97:85:c3:6d:a9:be:e0:36:b1:74:
22:a1:f9:e0:32:55:d3:04:50:bc:b1:5b:b7:a3:1d:
66:a2:d4:7d:ba:b8:c4:f4:d1:16:3d:ca:7d:5b:6f:
db:07:89:96:5f:7a:d8:7e:cd:81:45:48:94:ac:17:
b7:32:6f:a7:83:06:4a:36:11:af:53:d2:57:f9:dd:
e8:3f:b9:ff:c7:9b:98:ae:03:1d:ed:09:a4:d6:4c:
a6:d8:20:4c:69:a1:a5:b9:e7:37:d6:44:d3:14:c8:
a9:d6:3f:9c:10:d5:b2:ce:7a:38:6e:5b:cc:17:2c:
6f:24:50:25:9a:27:c8:21:26:e0:49:ea:ea:d5:8d:
80:ba:e4:bd:8a:aa:5d:22:1d:5f:71:97:fa:e1:39:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:7D:8B:F9:32:9E:F6:B2:DA:92:BC:39:60:77:E2:91:55:B1:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00d54591-f6a4-3d40-92ca-15d9ce300ee3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:72:51:57:10:ee:06:73:bd:1b:ea:5d:7e:7d:7e:62:3b:31:
e3:fe:15:a8:b5:b1:7c:0a:14:6c:7f:71:13:db:b4:3e:4c:ca:
15:f8:ec:fb:39:ab:97:88:5a:89:a5:7e:7a:41:01:31:74:86:
00:82:44:d3:ed:84:a3:fe:1f:18:f7:b8:4e:88:2f:05:b1:8f:
64:4b:0b:17:69:84:44:f2:15:61:94:eb:63:3a:be:56:3f:39:
9a:88:b9:f6:67:41:f9:fb:eb:ff:bb:68:62:9c:5b:e4:6b:03:
6b:27:24:8b:75:1c:59:f8:0f:32:a3:04:e4:e3:f0:fc:01:7b:
89:9f:5f:86:33:e2:d0:24:b2:5f:bf:a9:7c:79:9a:60:4d:92:
b5:09:73:1c:7d:8a:25:b6:d6:6b:bb:a0:67:75:f5:be:b1:4e:
8a:b5:cd:41:31:ad:0f:a9:62:b8:08:ae:1b:f2:bb:fc:6b:cb:
8f:9a:42:9e:3a:ce:14:40:fa:cc:4f:c2:4f:9c:6d:7c:98:fb:
a3:5e:06:82:9a:97:76:ed:29:0f:02:4b:7d:d6:06:2c:02:12:
31:75:3c:dc:11:38:10:9f:53:ef:77:10:52:82:6f:da:bb:9e:
7d:9f:07:45:ce:a5:a7:23:72:f5:b4:1e:bd:a2:c7:38:b9:ba:
2b:1e:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:11 2025 by rpki-client