Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a2b3d3d-876e-3cfd-a033-c8b89df81906.roa
File: 1a2b3d3d-876e-3cfd-a033-c8b89df81906.roa (raw, json)
Hash identifier: XcEKiOhO0tm59MAFTGKeMpSsHBkVZaPVNg3R7OSH5/E=
Subject key identifier: F6:55:63:1C:DB:9F:85:3B:7D:89:7E:23:3F:02:4E:4E:A6:7D:9E:D7
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246ECD857ACE62832544760
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a2b3d3d-876e-3cfd-a033-c8b89df81906.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397239
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ec:d8:57:ac:e6:28:32:54:47:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=877e35ab-4774-4d10-a50c-64d92a7615d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:f3:c9:b0:9c:3d:eb:a1:0c:0a:c7:a3:86:
7b:dd:e0:ad:aa:97:63:f6:f0:ff:c0:95:e6:09:89:
e2:ae:8d:3a:44:cd:3d:61:92:cb:97:3b:71:19:14:
ce:b5:47:be:5a:16:9c:a9:c8:5d:ec:18:55:44:a4:
25:a5:3c:f4:7f:9a:ef:60:ec:f4:5b:a5:9c:cb:0b:
79:e9:3b:37:cd:eb:c4:7c:46:47:4e:04:a6:55:d5:
d4:d2:ee:9a:bd:8b:d6:aa:34:9d:4e:6b:9a:a1:7a:
1e:cc:b0:6a:d2:d3:24:4e:a3:40:2a:e6:5e:33:1a:
ce:23:d4:b9:94:da:be:43:ea:9e:09:4e:c2:10:a5:
a2:46:cd:3a:08:95:98:3a:38:10:43:9a:37:ff:73:
0f:c5:43:d8:45:c3:81:80:a5:b0:81:a6:7d:ac:d4:
07:86:73:2a:69:30:6e:0e:cb:0f:88:ae:b3:ae:f7:
29:a6:cb:e8:1b:2f:da:36:67:7e:99:94:81:5b:29:
bc:df:f7:d2:5d:9e:28:57:78:91:42:2b:57:cd:78:
c2:7b:97:48:e2:b6:43:47:90:99:50:40:c2:1e:26:
4a:75:ab:3f:e0:5f:07:f9:3f:05:51:b9:54:93:42:
82:ad:2c:77:38:c7:4a:fa:1c:fd:5e:3a:ab:e3:20:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:63:1C:DB:9F:85:3B:7D:89:7E:23:3F:02:4E:4E:A6:7D:9E:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a2b3d3d-876e-3cfd-a033-c8b89df81906.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:4b:54:2b:b2:1e:d7:95:94:69:68:9f:32:81:d3:45:d3:c0:
8d:86:0f:cc:c3:4f:a4:3c:6a:3d:ba:04:79:dc:91:bd:88:c1:
8b:d9:dd:72:b4:36:23:dc:80:83:19:74:69:94:d6:34:e3:69:
93:42:2a:a9:42:ec:dd:3b:e2:42:13:ad:b9:9e:3f:fb:67:64:
cd:42:2b:45:f4:c3:6c:78:9a:ae:91:60:21:e1:3f:b3:7d:86:
b8:01:09:c5:82:97:5f:53:6a:46:fb:21:01:d7:e7:f0:3a:03:
45:36:92:c4:14:29:e0:c4:04:a7:5b:41:14:a4:1d:16:c2:e6:
f4:33:2f:bf:09:ad:e4:b7:43:19:4e:cd:dd:9e:2c:3f:66:4b:
51:39:ae:ed:61:79:6d:06:47:d1:81:cf:c1:18:3a:4b:7d:d8:
e4:fa:e0:70:bb:4f:7d:d0:ba:6b:0b:a1:84:b5:e5:8f:9f:57:
f2:7a:2b:ef:7d:b1:cc:e8:ad:0f:5a:5d:e1:e1:c3:27:57:c3:
3e:5a:89:c5:38:08:b4:93:36:c6:8b:6d:b0:e4:bf:ab:24:09:
7b:de:33:70:93:1f:5e:dc:26:a4:bd:d4:e4:77:7e:4c:af:39:
94:68:07:c8:2b:d2:ca:7d:c0:43:30:f4:a8:4a:2f:9e:db:2f:
41:59:b6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:21 2025 by rpki-client