Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d64269c-576f-3f0a-9a82-3f99d3b246e3.roa
File: 1d64269c-576f-3f0a-9a82-3f99d3b246e3.roa (raw, json)
Hash identifier: T2JTwElQoBGSE+5KsIEqH7bXF60fQB6PbAkFbnmjUtI=
Subject key identifier: F4:71:EF:59:93:31:F1:3E:CE:C6:87:05:0A:0B:2C:EC:2B:E8:5E:D6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99653DDA7975B2574A23980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d64269c-576f-3f0a-9a82-3f99d3b246e3.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397239
IP address blocks: 156.154.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:53:dd:a7:97:5b:25:74:a2:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=4d32db3b-d144-4860-91fc-fef40b8234bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:cc:21:d8:f3:83:31:c5:f2:47:d1:c1:b2:
fd:31:ee:95:44:84:ed:45:04:ed:15:8f:70:db:d8:
08:ad:d8:c0:60:e1:d1:1e:1c:00:6e:63:a8:03:3c:
b6:3b:78:37:92:a2:28:11:39:95:42:d5:14:9c:f7:
6b:a6:13:bd:4a:16:83:25:8c:5d:cc:b7:41:2f:28:
f5:b3:7f:14:df:8c:d8:0b:c2:89:62:74:b1:ae:73:
f7:b7:20:27:3f:2f:32:a1:44:48:e5:22:15:85:2d:
ad:69:a7:49:d1:9e:33:c1:1f:2d:9b:87:e4:7a:7e:
8f:e6:22:ab:ae:cc:83:5e:60:61:8f:70:b3:ef:f2:
1a:a1:a8:5b:3f:de:4b:e3:cc:fb:a7:97:2d:60:48:
61:a1:93:af:3c:cc:65:2f:29:ac:3d:63:58:72:1b:
d8:63:1b:83:b2:64:d1:7f:e2:10:65:49:76:50:25:
2f:68:f4:9b:b3:94:24:7d:f7:42:00:2f:e3:4c:86:
de:16:1b:64:12:35:34:0d:41:14:6d:05:eb:35:62:
85:e2:91:d9:aa:91:15:39:6f:f4:ed:66:16:1f:49:
36:2a:f8:37:0d:de:16:77:36:44:e1:b5:4f:40:29:
c4:82:3a:39:da:ee:55:2e:01:43:41:66:ab:89:5f:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:EF:59:93:31:F1:3E:CE:C6:87:05:0A:0B:2C:EC:2B:E8:5E:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d64269c-576f-3f0a-9a82-3f99d3b246e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:27:6f:00:4b:c3:07:60:f1:56:29:a7:b7:3a:fe:fb:12:64:
59:75:e1:29:6d:63:59:7c:1b:ac:2e:8d:80:05:b8:d8:57:3d:
e3:55:a0:9d:9c:30:fe:41:af:5b:65:5b:2f:a7:28:b1:1b:52:
7e:3f:3c:20:0d:78:a0:27:db:23:b5:f7:1d:da:bb:f6:cc:45:
1b:02:bf:ac:5d:03:58:f5:19:b9:c9:37:83:33:3d:38:0c:14:
59:ba:f2:23:4f:b2:0e:47:e6:85:dc:d0:d9:9f:e6:4d:bd:94:
a9:4d:fd:0c:11:e7:90:ee:ca:7b:85:6b:fb:8d:04:88:2b:21:
bb:ba:13:d5:e1:f1:6f:e0:08:db:a6:e8:12:61:f2:ac:60:8c:
b6:86:22:c1:39:21:0d:03:c1:4c:fc:dd:fc:c0:8d:26:53:09:
f8:7b:d2:e2:58:6c:5f:d3:61:47:4f:c1:69:e6:fb:f4:8d:0c:
38:15:d3:41:90:d1:5d:9c:d1:17:fa:18:0f:11:e9:74:eb:af:
72:de:c0:f1:5e:60:5c:36:df:46:59:05:91:24:ab:6b:e5:53:
d8:d1:47:95:90:40:85:a1:ac:9b:6a:ae:41:f0:5a:74:7c:f8:
f7:c9:2e:a7:61:45:2e:df:71:23:41:3d:e7:6c:8e:84:c4:a9:
73:05:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:38:17 2025 by rpki-client