Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21c0517f-9487-3a11-9f93-dc69b7379b5d.roa
File: 21c0517f-9487-3a11-9f93-dc69b7379b5d.roa (raw, json)
Hash identifier: MR55RpjP2ol349w+7I/CwRD3l11xQt43tQnDCE4zgOo=
Subject key identifier: 55:63:62:A4:18:17:EF:95:1E:72:58:B9:A2:21:B7:2A:32:A7:B2:75
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210E78BA57E71985F6E800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21c0517f-9487-3a11-9f93-dc69b7379b5d.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397239
IP address blocks: 156.154.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0e:78:ba:57:e7:19:85:f6:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=35bac6bb-83fc-4b53-a61e-d109390567a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:a8:73:ea:50:95:ae:f5:05:f4:70:07:c9:
55:5e:83:e1:75:ba:a9:29:e5:5c:2e:51:8d:cd:78:
2b:d5:b3:58:36:74:29:81:b3:a9:35:d7:70:84:bc:
db:4f:de:ec:01:17:4f:42:59:d1:31:e0:a9:20:5d:
34:ea:14:4b:c0:d0:36:63:83:7f:62:da:20:85:d4:
4c:22:9e:39:e9:bf:76:ba:00:3e:99:e3:7b:97:98:
ae:31:4a:14:2b:ad:a8:d9:ee:c6:5b:28:31:b7:77:
0f:50:52:1d:6d:a1:0e:9b:1a:2e:c1:73:76:66:d4:
b5:da:e4:9b:4e:31:6c:0b:3d:d3:f7:22:9a:0d:cb:
a1:f0:bc:73:f4:23:05:98:2a:a7:47:61:e3:b9:cf:
50:20:8c:27:38:67:08:e6:8f:3f:b2:09:4e:40:33:
49:94:eb:04:ab:4a:da:68:76:e5:6f:2a:36:4e:bd:
1b:0d:c9:bd:28:05:96:f6:57:91:8f:4d:bb:15:99:
fd:fe:9f:ce:fc:34:0a:7d:72:65:15:34:ee:b4:99:
cd:ed:76:42:1f:ba:15:d6:64:ed:4b:e7:89:9c:83:
4e:d8:77:34:90:7a:0d:c5:46:65:53:82:8b:f9:d3:
5a:1b:7e:4e:d7:77:8b:ff:ae:49:b1:cf:c0:db:e3:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:62:A4:18:17:EF:95:1E:72:58:B9:A2:21:B7:2A:32:A7:B2:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21c0517f-9487-3a11-9f93-dc69b7379b5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:ad:51:40:5d:4b:3b:cf:75:10:a7:7b:34:4d:6e:c8:c6:55:
57:21:fb:bf:dc:08:bd:d9:da:f1:e2:19:00:bc:86:2f:8a:d8:
58:63:2b:1d:f4:41:9a:60:6d:74:cb:1e:73:8f:12:cb:22:6b:
ed:9a:c5:bc:db:1b:a7:52:9e:6c:a5:b6:79:4c:b4:71:7e:c6:
0c:c4:57:90:95:66:94:cc:1e:1d:ab:a2:5b:92:cd:4d:a9:04:
39:44:6c:4d:14:fb:be:57:f4:de:14:7f:c5:32:8e:9c:29:48:
88:07:84:1a:f1:1b:92:75:84:09:c8:42:de:20:88:0d:70:c9:
16:89:5c:01:2b:0c:e6:1e:18:31:f7:80:86:de:33:6d:8e:60:
8d:64:98:b8:98:db:29:90:e3:69:76:51:a1:38:a2:20:46:aa:
3b:0e:69:ab:20:d3:26:c7:c1:ed:23:a2:73:f5:67:be:60:a4:
1b:5b:3e:27:3f:ea:8c:96:48:b3:64:84:ff:f8:c5:6d:8a:22:
fe:be:12:d4:bb:75:d0:97:8b:87:28:70:7a:47:af:c1:36:51:
7a:38:e6:43:06:73:ba:84:7f:dc:fc:89:d0:96:19:57:78:ed:
ba:f9:13:c0:e7:d9:b9:ba:db:47:b8:c9:50:0c:f8:0f:9c:d0:
54:8a:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:08:49 2025 by rpki-client