Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/296067a1-8b49-30ef-9e1a-f60ab08ab63b.roa
File: 296067a1-8b49-30ef-9e1a-f60ab08ab63b.roa (raw, json)
Hash identifier: MKJru3NiUMx30/e2Ry3FRZ8EEcq2OMsoXqVrJEn8rHc=
Subject key identifier: BE:89:C1:52:48:9D:57:9A:88:7E:86:38:F1:B0:F4:00:B2:CA:11:6D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246ED37CC111E3268549800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/296067a1-8b49-30ef-9e1a-f60ab08ab63b.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397213
IP address blocks: 156.154.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ed:37:cc:11:1e:32:68:54:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=2d2e46ed-8990-436b-aaa9-3b656f2d48fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f2:ec:7c:45:2f:fb:86:99:38:f9:f6:c6:3d:
f7:9b:e7:f5:af:7f:dd:1f:a8:d3:3e:62:79:dc:31:
10:29:2f:f9:9c:e6:fc:59:93:1d:91:be:5c:3a:b4:
06:23:10:0c:74:92:8b:73:f1:1d:7c:88:aa:a8:62:
fb:f8:02:d3:a7:23:33:19:1e:e5:a9:de:43:f4:fb:
dd:56:df:ba:1e:53:27:ac:4a:76:fe:99:9c:a9:3b:
0c:8e:70:22:63:ba:a0:9b:15:4c:07:00:9a:20:e9:
73:79:47:07:33:01:4a:0f:fc:cc:6d:45:88:27:92:
12:dd:fb:db:da:6a:21:58:05:63:0c:15:d7:e6:ab:
96:d5:28:0b:e5:d6:1a:a5:d8:09:7a:51:90:55:99:
b2:04:cd:de:71:be:d8:d6:eb:bb:cb:4f:d1:20:b1:
76:be:5b:3e:a1:03:15:d9:bc:ac:93:48:4d:1f:d2:
dc:e2:af:25:f1:5e:8f:19:27:d5:62:8c:09:cc:8b:
f4:a4:f1:6f:77:a6:3f:23:f1:d2:30:51:40:d9:44:
23:65:51:d4:5c:14:33:21:d1:76:b2:03:3c:96:5a:
87:ea:73:a7:cc:ac:9a:28:2c:d0:0b:4b:ed:32:d3:
96:5a:8e:cc:55:ea:c1:59:dc:0c:50:73:fe:de:02:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:C1:52:48:9D:57:9A:88:7E:86:38:F1:B0:F4:00:B2:CA:11:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/296067a1-8b49-30ef-9e1a-f60ab08ab63b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:45:56:0f:5d:fb:97:36:0a:75:25:fe:60:55:68:ba:3b:47:
2a:a3:dd:9a:d4:8e:fe:af:3c:ad:a7:22:1d:19:32:dc:8a:41:
17:12:3d:c4:22:7e:07:d4:50:08:ea:8d:3f:0f:88:07:0f:cd:
3e:58:5b:91:03:95:75:75:52:9b:61:fc:87:7b:1b:03:6f:8e:
c0:b0:3b:bd:41:71:56:bf:25:54:63:8f:b8:89:71:3a:26:a7:
5f:83:f0:47:cf:c9:68:6c:5b:4d:a3:f3:d0:37:1d:a3:97:a6:
a4:2e:cd:72:cb:0e:26:56:c4:60:6a:37:6a:52:86:ea:cc:d0:
4d:0d:93:f1:c6:18:ee:df:c2:42:76:4a:62:44:5a:c9:92:ff:
ea:67:90:2a:39:3d:1e:8d:53:76:bb:85:05:fd:68:80:78:5a:
19:cd:b5:80:b3:4a:95:0c:8e:f7:ec:7b:be:74:b0:ed:75:df:
04:50:9d:ed:53:38:40:2f:79:4f:30:c4:65:ac:78:3d:9e:d6:
94:d2:f9:b5:df:74:47:b7:28:67:0c:c4:b8:a5:0c:84:83:55:
f4:1f:65:9b:e0:ed:74:fd:2d:57:34:02:b5:e2:ff:dd:6e:5b:
06:e6:36:d6:3c:61:60:a9:62:3d:e1:d7:e7:58:1f:1d:97:82:
89:9d:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:59 2025 by rpki-client