Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d5ac27-0993-3251-a77b-79fe9f4c9ea7.roa
File: 06d5ac27-0993-3251-a77b-79fe9f4c9ea7.roa (raw, json)
Hash identifier: y7VOshpQ976n0Z9qfPN0f5D9DC3DlKlRy7n4Uc7oECQ=
Subject key identifier: 78:1E:8D:70:C9:FF:9F:29:9D:9D:88:5E:C4:EC:FB:00:73:A8:92:93
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB5E0F2DFA9A68CAD249C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d5ac27-0993-3251-a77b-79fe9f4c9ea7.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397222
IP address blocks: 156.154.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:5e:0f:2d:fa:9a:68:ca:d2:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=66a4a643-b4b0-4201-bae2-851f4e89c71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:72:a7:0d:ce:51:f2:65:b4:ef:1c:ca:30:
dd:c9:2b:91:1d:bb:bb:1d:8a:3e:5b:3c:2c:24:e1:
54:b5:89:ed:2b:e6:4a:2d:a6:f0:02:08:18:64:b2:
b9:42:9a:94:0d:a7:80:a8:5d:97:f4:38:29:05:e6:
a5:0b:6f:ab:b9:a5:30:6e:89:05:a8:2d:2e:66:6a:
0a:ec:57:be:91:70:64:78:12:26:e5:43:bc:d3:52:
c2:fc:14:90:07:1b:94:f4:f2:56:61:75:bc:35:fb:
b2:26:23:62:44:1d:ce:cc:19:91:3a:f4:34:dd:0e:
3b:23:dd:50:d6:f1:ee:ad:ca:a0:a4:82:a9:49:45:
66:3a:9b:10:c4:3d:12:4d:76:75:0b:08:bd:27:c9:
d1:cd:14:a9:fc:9b:d4:ec:7e:6b:49:3c:d2:fe:98:
ed:28:0e:d3:a6:33:57:d1:06:bb:9a:4e:6b:21:d9:
f3:86:30:3d:ef:78:17:37:38:f8:c3:f7:5a:ad:18:
17:7d:c6:a8:ed:b8:fb:66:7b:4c:78:12:87:47:d4:
c3:9c:22:da:50:8e:97:51:9f:eb:a9:2d:62:1c:92:
8f:2a:92:a0:91:67:cd:28:dd:52:5f:94:40:ee:e4:
28:ed:2c:38:e5:87:ea:45:8a:09:9c:f0:68:af:a2:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:8D:70:C9:FF:9F:29:9D:9D:88:5E:C4:EC:FB:00:73:A8:92:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d5ac27-0993-3251-a77b-79fe9f4c9ea7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:47:82:b7:91:b9:aa:c1:65:44:c7:bf:aa:c8:76:15:e4:b5:
5d:c3:3b:e0:e7:df:9a:dc:f3:f3:17:9b:2d:0e:1c:5f:03:e4:
e7:e9:26:eb:a8:ed:11:5c:21:3b:86:e2:59:83:c9:f3:95:f3:
b4:d3:0e:a5:e1:ed:a5:94:84:5d:83:2b:dc:76:96:e3:80:25:
a5:51:d8:6c:48:e7:d0:9c:2b:66:3a:9f:c5:db:8d:3f:c8:7a:
e7:8c:55:04:7c:1a:31:b0:ef:f2:fd:aa:5b:9e:fd:57:23:e4:
a2:57:b8:14:92:3d:fa:6d:32:9b:d9:9c:d7:99:5f:77:92:73:
e7:82:ef:f0:bf:04:ed:cc:05:fe:90:fe:e7:51:d0:23:8a:f1:
8a:13:e7:de:9f:1a:65:97:95:51:c3:83:bb:15:b0:5a:1b:30:
30:fc:dd:31:dd:e2:e2:a8:ad:19:35:d1:10:97:f1:eb:18:d8:
bc:61:1e:d3:14:6a:1c:c4:a2:92:76:c8:dc:d3:17:72:14:b9:
cd:c8:d8:a5:6a:ab:be:15:71:79:ce:67:a2:08:9c:e6:34:d2:
47:e7:a0:ff:7f:ea:9f:cd:42:b0:e5:16:df:7d:49:d9:cd:e1:
ec:00:a3:2e:fc:1d:19:25:6a:af:13:d2:37:69:30:3f:e4:49:
e3:b2:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:31:29 2025 by rpki-client