Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/310851c3-4b6a-37fc-aaf1-4d7086bc42e6.roa
File: 310851c3-4b6a-37fc-aaf1-4d7086bc42e6.roa (raw, json)
Hash identifier: rw7IXGYwyiZCtLhRMObMC1NPEoIk4zmwddj2/oDFz3Q=
Subject key identifier: A2:EA:1F:B1:EF:9C:C5:00:BD:CC:66:A0:FA:61:7D:7F:AE:BB:E3:1C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E0E5D304E3CA60F09C40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/310851c3-4b6a-37fc-aaf1-4d7086bc42e6.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397223
IP address blocks: 156.154.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e0:e5:d3:04:e3:ca:60:f0:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=3bb74375-a547-49c8-8f93-4312dfa3ff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:4a:d7:2e:19:d4:21:02:ea:51:cf:ee:68:
cf:5d:9a:60:e4:60:09:fb:3e:23:0a:fe:4c:75:c3:
eb:5a:51:65:ec:dd:c1:dd:82:fa:19:13:e3:3d:2b:
34:d3:79:2f:21:ca:b9:bc:fe:e5:bf:b9:90:76:57:
54:6e:b3:ec:aa:37:b0:df:be:31:33:96:ac:70:9a:
21:69:a3:56:4f:f9:3e:ed:d1:56:93:be:11:7c:1a:
99:fa:ac:10:4e:54:0f:c0:c4:f4:42:68:42:92:0d:
0e:e4:16:a5:0b:d7:ad:6a:cc:94:0c:1d:d1:57:c2:
a8:f9:18:86:e9:61:0e:4b:ce:e0:dd:4e:16:5e:a7:
cf:0f:31:51:81:c2:76:f5:69:40:2b:1d:bf:48:4c:
35:3d:ab:a1:ff:e3:6e:15:9e:62:25:e1:22:48:c9:
9b:c6:3f:1b:ea:35:2d:5b:72:98:8b:1c:0a:03:55:
48:d1:b6:ea:e9:43:02:07:02:a1:4e:b9:59:64:c6:
e5:7f:fa:5f:c9:b5:9f:38:6c:f3:11:a1:41:36:2f:
9e:ef:dc:5c:76:32:4b:85:01:6c:7a:e2:fa:fd:95:
88:44:de:af:55:85:2e:cd:d3:cf:ba:9c:82:a5:b3:
c1:fd:a6:95:a9:07:2a:c0:05:67:cf:8f:23:dc:62:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EA:1F:B1:EF:9C:C5:00:BD:CC:66:A0:FA:61:7D:7F:AE:BB:E3:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/310851c3-4b6a-37fc-aaf1-4d7086bc42e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:49:09:25:8a:85:1b:78:3e:dc:58:70:5e:a7:92:51:06:eb:
32:91:b5:1e:81:01:75:dd:0f:5d:16:e6:48:d1:55:16:3d:9f:
28:75:8c:00:5a:ac:8e:70:93:5c:6f:b3:75:15:e3:3a:d5:83:
d8:b9:2c:76:e0:de:71:96:64:55:42:dc:98:c4:8f:b4:d1:f9:
68:65:34:9e:2b:00:94:f5:1f:88:ef:51:1b:07:9c:0b:8d:e9:
8d:4d:4b:ed:09:ea:6f:83:e1:59:77:b5:58:0e:5d:18:65:19:
57:55:26:fa:ce:bf:f3:38:56:21:87:de:e1:41:1e:20:77:b3:
65:ac:b5:55:b0:ff:49:6d:8e:bc:2f:0c:48:43:2a:e6:9b:2f:
2b:95:78:c5:9b:77:3e:ce:9e:7d:fd:74:a3:eb:67:02:d3:3b:
11:75:66:2e:55:47:6b:59:2a:6b:da:94:96:2f:51:d7:d4:ea:
d8:3f:97:f8:6e:36:cd:d6:a6:e4:cc:f3:c8:3c:e8:f0:0e:ac:
f9:7e:6f:be:bb:77:54:55:4e:15:05:07:ef:ed:32:61:83:47:
7b:61:b0:2c:f3:e1:99:df:48:ae:e2:cf:05:3b:78:61:f8:cc:
fa:42:65:5a:82:82:96:54:9c:cb:d4:09:05:f9:7c:ab:26:6d:
16:ab:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:09 2025 by rpki-client