Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27f2ed11-3c21-30a7-b853-db8f0f395837.roa
File: 27f2ed11-3c21-30a7-b853-db8f0f395837.roa (raw, json)
Hash identifier: Q5SJihrwAXebEPeZl8UPwwuiqsYX0cfWbYDELJRHzGk=
Subject key identifier: FB:4B:DD:FD:B4:85:C9:5B:6F:C7:BB:C0:24:D9:67:01:8F:94:68:32
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965CD8B15C59B3D3D912C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27f2ed11-3c21-30a7-b853-db8f0f395837.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397229
IP address blocks: 156.154.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5c:d8:b1:5c:59:b3:d3:d9:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=46292521-7cf0-4ec6-947a-a2f3563f28a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:02:41:c8:1d:a8:ca:b1:69:12:b7:6e:65:
94:0e:07:e9:43:ad:31:d3:c0:9e:4f:af:dd:79:1a:
b0:51:7b:2d:dc:c4:91:d9:ca:63:5d:5b:05:14:43:
c7:ad:87:13:58:89:80:9d:db:63:17:40:49:6d:1f:
80:c5:57:c4:96:09:92:bd:c5:6b:cf:28:b2:da:8f:
e5:60:4f:36:c7:ab:d2:1a:b0:40:8b:c3:7a:62:af:
81:b1:84:39:4f:88:a3:73:6c:7d:e7:8f:6b:4e:9d:
7d:26:0f:6d:9f:2f:93:3b:5e:7b:8e:76:30:7c:bc:
3c:56:f7:fa:33:ca:bb:11:d2:07:84:df:0b:38:b6:
75:6c:4a:6b:e1:0a:e7:04:c4:62:a3:11:82:ef:e8:
f3:35:32:e3:4c:36:d3:99:8b:79:16:85:ab:74:f4:
af:cc:95:78:e2:67:4f:08:6d:d7:bb:a1:43:e1:5f:
db:67:b8:5d:5b:22:e9:fd:14:57:6c:71:be:7d:9c:
9e:2f:6f:09:72:95:47:10:53:b7:df:db:c7:40:61:
2e:9f:62:7b:a6:f3:cc:0b:89:01:43:68:51:54:72:
bb:10:4d:6e:6e:49:a7:d9:71:ea:a8:56:6c:58:82:
14:38:26:f7:6b:74:c6:3c:00:f2:7c:fa:6f:aa:02:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4B:DD:FD:B4:85:C9:5B:6F:C7:BB:C0:24:D9:67:01:8F:94:68:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27f2ed11-3c21-30a7-b853-db8f0f395837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:c9:f8:ac:59:e7:3c:f2:9f:21:db:e3:1c:9d:79:1a:d7:7d:
92:b7:64:5a:74:c6:c4:4f:6f:ef:a4:b8:f0:78:14:db:be:80:
71:91:00:8e:69:54:4e:5e:ae:1d:17:38:8c:00:8e:88:bb:4f:
5e:96:18:85:d5:bc:1a:6e:5a:20:a3:ef:9e:b1:ff:75:db:88:
9b:06:fc:fd:a5:32:85:0d:3c:b8:48:fd:09:9b:e1:36:0b:33:
c9:10:86:2f:23:96:b2:d8:de:08:76:32:07:cc:2b:3e:d6:0c:
a6:08:e7:7f:2a:fa:27:57:2d:49:6c:fd:12:4f:e5:d2:45:a8:
b6:2b:25:4c:52:36:20:d5:aa:5f:17:54:5b:36:e8:fe:1d:bd:
27:c2:4e:34:29:a8:f7:93:aa:89:dc:d2:c3:c6:45:d1:d4:44:
39:44:d5:10:c2:3f:60:1d:da:b1:e8:b0:b2:69:05:17:3b:20:
30:eb:77:25:83:4e:1f:7c:b9:cb:03:1c:26:df:ba:d1:76:d7:
45:d6:80:17:c1:08:bc:93:4d:e9:9c:04:78:2b:32:06:56:d9:
4d:b1:bb:8f:41:49:d6:09:fd:3a:ef:70:ab:cf:83:cc:32:4b:
5d:6f:6f:34:4b:50:54:ce:08:4c:a2:a9:8b:ce:4e:7a:52:db:
ca:f9:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:08 2025 by rpki-client