Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03825f49-3c25-3d7e-9210-0a1fdb999433.roa
File: 03825f49-3c25-3d7e-9210-0a1fdb999433.roa (raw, json)
Hash identifier: Z/2lUtdIzGNY5hD953RJwBGLbAT/LVQOaTw3hW07v+U=
Subject key identifier: 3A:88:18:84:BC:D3:ED:BE:D4:80:BD:DB:7D:E0:8E:30:7F:7F:1A:15
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848F926B360ECFC3A34A8A0A580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03825f49-3c25-3d7e-9210-0a1fdb999433.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 397241
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b3:60:ec:fc:3a:34:a8:a0:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=73d2bb40-897e-43eb-80f9-bdd1de28c666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:b8:b6:6e:94:ab:77:9e:e7:c4:0c:66:f0:
82:8c:3d:49:23:dc:c5:e1:fc:86:39:0b:41:bc:55:
49:fc:21:cd:ce:ab:73:0b:24:3b:8d:a3:32:ef:9f:
30:f0:cf:d6:87:1f:15:f9:1a:c3:53:be:ec:7e:3b:
9c:dc:85:63:17:0b:23:d7:c6:dc:81:4d:4f:69:41:
15:e8:3b:27:4d:4c:3f:64:89:a3:9d:78:be:ff:db:
ec:c9:be:c2:f7:86:b2:64:4e:84:a6:94:c1:04:76:
1c:0d:16:4a:1f:87:bd:e6:e6:12:86:d6:23:a9:a3:
12:29:24:d8:9a:ed:6a:a9:f5:f4:93:c6:13:36:6a:
2c:52:65:c9:ea:3d:a0:1f:39:e3:71:25:da:08:63:
a0:02:13:fc:8b:0d:cb:be:0e:f3:e2:00:1a:ff:d9:
51:27:2c:7f:20:cc:51:03:8f:5f:06:80:6d:d1:8e:
75:5d:68:28:27:d2:65:45:17:0b:d1:0a:67:aa:bc:
a7:f6:e9:f3:a3:5a:72:fe:4a:44:d0:6e:ba:b2:99:
b2:d0:24:17:24:97:62:6a:73:da:6d:39:0d:a2:95:
04:c1:a6:74:0d:d5:bf:7f:84:a3:cd:de:8e:60:e6:
17:e5:54:d5:72:15:7d:34:58:a8:78:c4:fd:4b:25:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:18:84:BC:D3:ED:BE:D4:80:BD:DB:7D:E0:8E:30:7F:7F:1A:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03825f49-3c25-3d7e-9210-0a1fdb999433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:30:2a:97:18:d2:a8:45:03:02:71:44:97:b8:6f:45:73:5e:
34:87:1f:ad:6a:0a:ab:b1:67:5d:c9:3e:59:b4:a0:81:84:f1:
62:e7:1b:6e:d0:fa:cd:bf:53:b0:80:5c:69:d6:52:61:b2:c3:
26:8c:db:f8:77:4f:9b:04:a1:ee:b2:2b:9d:90:17:7e:44:4f:
67:c8:6d:35:cb:33:ea:9e:16:ea:e7:eb:e8:7e:4c:a7:b6:2c:
e4:31:76:3e:ac:04:7c:b9:94:0c:24:a4:e2:88:6f:22:2f:c7:
1b:95:3c:ca:97:d2:7f:79:61:b3:01:5d:7d:8a:ce:7e:ea:87:
4f:87:73:54:4a:3c:15:14:3e:4c:52:15:af:96:fd:e6:53:64:
79:cb:81:41:08:4d:33:f8:6f:f7:15:c9:d1:67:ea:be:a2:40:
97:eb:80:11:79:02:6a:83:4a:fa:2c:e1:69:8b:29:5f:7c:2b:
03:85:45:fe:c8:01:29:1d:ff:3b:b3:7e:99:6c:70:f7:18:ef:
95:27:e5:99:af:36:9c:52:bc:2a:aa:ad:af:29:ca:c4:99:ee:
20:e4:c5:a6:bd:10:d0:a7:15:74:4d:52:66:a3:c0:fb:d4:ac:
39:0f:27:2b:b4:a2:84:e5:a8:09:08:13:b4:33:00:a1:8f:49:
95:42:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:50 2025 by rpki-client