Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01e947c3-8cde-3b85-81e3-7061cd6fe86d.roa
File: 01e947c3-8cde-3b85-81e3-7061cd6fe86d.roa (raw, json)
Hash identifier: djlx6Na1t6A+etaocP5FdnWV48hgrL+KOBmibOgFvw4=
Subject key identifier: CD:8F:BE:3F:47:D6:9E:1B:A0:C0:2B:6C:06:D7:71:B0:E9:D9:91:CB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9963C647AC4785F27514000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01e947c3-8cde-3b85-81e3-7061cd6fe86d.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397228
IP address blocks: 156.154.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:3c:64:7a:c4:78:5f:27:51:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=761bffe4-f530-42d8-a544-5f5fc83df4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:71:6e:6e:f7:eb:49:88:0d:0f:04:10:42:
94:b6:c4:06:7e:d1:fe:01:b3:6d:e8:81:fd:0a:17:
75:f8:c7:e6:3d:5c:81:72:a5:5f:c1:29:6b:47:d2:
0b:07:85:c5:b5:16:41:68:a1:13:3b:6c:db:26:b4:
30:47:a1:1c:c6:26:61:46:6c:be:d3:c6:a7:8f:52:
c6:a5:a5:6e:c0:97:e7:63:e2:2e:99:ec:ea:60:90:
8b:b3:1b:3d:b4:05:b5:9b:0f:5f:02:d8:54:8e:a6:
94:64:0c:24:1a:9c:36:e0:8e:f0:36:60:6b:d9:ba:
68:d1:95:3a:30:dc:37:28:e2:b9:dc:bd:97:7f:ee:
08:a2:58:2f:55:39:b4:f0:ab:d4:b3:e0:cd:af:f4:
14:c8:bb:8b:9b:2d:09:75:c8:95:05:01:9c:5c:85:
94:b7:3e:37:5d:c8:9b:de:84:27:31:56:cf:aa:6f:
26:b0:25:c1:39:17:cc:b8:27:18:ae:4c:f7:b3:df:
ba:aa:96:2d:35:75:b5:5c:3a:91:c0:58:fe:7b:dd:
7e:44:7c:a8:21:74:3b:0f:fb:8e:da:e8:fc:15:0a:
52:d4:6d:23:73:53:b7:de:4c:49:95:81:17:75:74:
61:eb:a2:df:5c:02:61:f3:22:dd:15:71:99:8a:bf:
5e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8F:BE:3F:47:D6:9E:1B:A0:C0:2B:6C:06:D7:71:B0:E9:D9:91:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01e947c3-8cde-3b85-81e3-7061cd6fe86d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:0c:ef:93:fc:2c:9c:f7:e8:14:40:0f:79:01:06:7f:b6:17:
dc:01:24:79:8b:b6:51:84:73:3a:e3:f6:96:66:5c:4e:89:6f:
33:94:d8:8e:42:e5:38:b7:de:f9:2c:92:4b:d5:15:21:90:be:
34:ad:d5:2c:e3:ef:60:75:dd:87:88:45:57:1c:77:6b:de:cd:
85:7f:00:c0:4c:3a:ef:3b:eb:dd:8d:8e:e7:6c:15:f3:f9:13:
b0:00:f3:88:04:a9:59:35:5d:ec:6b:d3:f5:3b:cb:62:b1:26:
76:64:51:65:14:9c:8d:0b:c0:49:ef:ab:0c:b7:80:ea:06:2d:
f1:93:80:23:53:95:10:28:30:9b:34:ff:e6:3e:3c:32:77:36:
96:6c:4f:0e:8d:49:55:6a:c8:b2:a6:f8:4e:23:69:fb:50:98:
a8:38:78:23:14:f6:ad:06:01:40:6a:8c:e9:b8:59:5d:b5:4c:
f7:0d:c8:c9:2d:7b:84:99:0f:df:e7:a1:56:bb:d4:e9:1d:3a:
6d:95:12:6b:c1:0e:cb:06:b3:f1:26:a8:15:0f:76:6d:8a:a9:
16:29:2f:8f:11:4c:a4:13:4e:5d:c8:0b:76:e0:be:44:24:ce:
cb:d7:f8:07:91:3e:0f:57:e6:28:22:21:c5:03:48:f4:4a:70:
e1:03:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:34:59 2025 by rpki-client