Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a5bcf22-7e73-3b55-b7d9-f51a79014b90.roa
File: 2a5bcf22-7e73-3b55-b7d9-f51a79014b90.roa (raw, json)
Hash identifier: CfsxcVstYJO9EbQbQ19YcX/AdT/SdxP+TfMstm6IvNY=
Subject key identifier: 39:08:F8:54:8C:36:B8:47:B8:E8:ED:C8:D8:55:01:A8:8A:4C:CF:87
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2110C67D011673538F42D0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a5bcf22-7e73-3b55-b7d9-f51a79014b90.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397213
IP address blocks: 156.154.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:10:c6:7d:01:16:73:53:8f:42:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=bd4f007a-cf3e-421a-b6ce-825d8db76202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e9:81:7d:22:37:17:3f:82:12:64:72:00:24:
3f:9e:bc:fa:1c:63:e0:0a:94:b8:e3:90:32:54:a5:
1f:9d:41:e9:b6:2c:8d:88:c0:e9:3a:8d:de:e1:7c:
b0:6e:01:89:0c:4c:88:3e:3d:1f:37:2e:bb:f7:98:
ac:76:d0:2a:4f:0f:f2:67:13:c3:9a:47:81:19:4e:
b5:02:f6:da:b2:fc:5c:3c:91:f0:5b:87:c5:91:38:
35:45:87:5a:47:17:3d:57:37:49:c5:bb:44:19:35:
03:48:dc:63:f2:c1:67:fc:5a:dc:cf:66:2d:69:7e:
38:73:7a:aa:a9:8d:09:64:63:fa:54:e6:53:01:e9:
7e:bf:ff:54:f9:67:28:72:95:e3:43:94:0f:f4:7a:
93:d7:de:99:c8:e2:14:a7:04:02:e7:11:4a:31:05:
f7:52:a4:d5:3a:2a:4b:6a:e8:32:51:08:ba:39:c4:
75:47:c0:4e:15:56:c8:63:df:d3:b5:57:f1:34:19:
4d:73:48:0d:06:13:fa:a1:d7:97:51:3c:a9:44:38:
84:06:71:f3:74:97:d8:a2:b7:f7:31:53:6a:25:55:
51:f9:7f:52:52:4e:48:2f:05:10:10:9a:38:97:38:
05:4f:5a:00:3a:e4:8a:ca:66:4a:7e:95:9e:cf:86:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:08:F8:54:8C:36:B8:47:B8:E8:ED:C8:D8:55:01:A8:8A:4C:CF:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a5bcf22-7e73-3b55-b7d9-f51a79014b90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:65:98:6e:a5:3d:57:79:d8:ca:d7:89:d0:67:73:dc:a9:8d:
4b:d6:d2:f9:f6:de:58:07:8e:a2:f3:de:1f:57:c8:83:62:d2:
e4:0d:28:53:9a:b5:a3:68:67:70:13:fb:5f:6b:07:8b:fc:9d:
9a:ba:16:4a:77:1b:1b:60:36:5f:01:af:ee:79:12:b2:20:1e:
26:2a:8b:5f:1a:8a:b4:93:f0:f0:8b:db:4f:c9:59:5f:88:9a:
bc:99:6e:49:2c:75:e7:46:d3:ff:57:9d:c8:e6:3c:3c:23:a9:
bc:aa:8a:f9:5c:a2:0a:25:d6:e1:05:30:b2:38:73:d5:49:47:
ca:bc:0e:ff:12:09:8d:8f:92:d1:43:0f:b0:a2:3f:4d:b4:eb:
06:23:f0:41:c0:ec:ed:b5:91:2d:b9:19:46:bf:c2:29:fa:cc:
20:f4:4a:8a:21:5d:0a:7a:44:aa:88:35:b3:32:81:21:18:14:
9a:45:39:dd:cb:7a:ec:19:8b:26:f5:f0:f2:02:42:6a:1b:eb:
aa:20:0f:19:f0:d6:8b:63:c7:b5:50:eb:35:cc:34:0a:fb:02:
b2:66:65:0f:6d:70:1e:a0:22:93:b5:b9:1b:b6:ea:66:d6:9f:
16:c4:e3:2a:12:b8:38:99:e7:35:70:d3:96:e8:75:d5:48:2f:
8c:cf:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:05:00 2025 by rpki-client