Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33297d62-61b0-35e3-88c3-f7895d82b230.roa
File: 33297d62-61b0-35e3-88c3-f7895d82b230.roa (raw, json)
Hash identifier: EAQeklPjOSVVBMXDnPNXrRVg3SlezSf+ALl1NdfHdYg=
Subject key identifier: CA:10:A9:C7:3B:8A:3E:1D:EC:51:28:F3:C5:7E:48:30:F5:92:4D:CC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DCD502B1CD5F78C39400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33297d62-61b0-35e3-88c3-f7895d82b230.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 19905
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:dc:d5:02:b1:cd:5f:78:c3:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a830993c-c17d-4126-aac3-59c4b032cae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:b0:72:9b:98:c5:1c:f6:e8:f5:55:44:0d:
3a:93:6e:8e:41:97:5f:d7:44:5d:85:29:b4:11:c4:
97:90:4b:50:d2:4d:c5:ea:5a:06:3a:57:c6:7d:07:
da:cb:6a:b8:a6:7c:97:44:7d:81:64:b0:6f:93:1d:
75:85:f0:b2:6a:7d:31:b3:2b:97:0e:ca:c8:7d:27:
47:57:43:61:92:5d:79:b7:b5:a6:58:70:29:f5:de:
41:1b:17:d9:72:68:db:c5:f2:c3:2c:7d:38:8f:c4:
14:7c:f2:19:22:ad:c7:8e:ef:73:7a:88:a9:5e:d3:
9a:2c:7e:5e:53:c9:8d:4c:cb:f6:02:7d:02:aa:20:
c9:7a:d5:d2:36:c1:ae:31:15:58:53:da:4f:b6:bc:
12:59:a8:c2:14:39:dc:0f:99:f3:69:12:5e:33:58:
2b:f7:a5:53:77:d0:f8:83:20:b3:65:0c:4b:99:a1:
d9:03:71:76:bd:b6:5b:86:8f:a9:a7:1c:3c:3f:76:
27:53:77:79:0a:97:55:2b:e4:3a:6d:51:26:a4:8d:
d8:06:76:58:7b:45:79:a6:aa:48:98:8b:82:b4:64:
98:c4:35:d3:53:cc:73:0b:77:64:18:e1:17:39:bd:
d2:68:94:92:17:44:38:f4:24:3d:f3:52:e3:dc:6f:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:A9:C7:3B:8A:3E:1D:EC:51:28:F3:C5:7E:48:30:F5:92:4D:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33297d62-61b0-35e3-88c3-f7895d82b230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:10:52:59:dc:30:d4:63:74:ea:02:6b:0b:b2:62:e7:65:93:
a4:15:04:11:4b:95:d5:52:a2:1c:52:ef:b2:49:f3:0e:bd:6e:
1b:bd:cd:1a:5c:59:14:ff:81:46:5d:e8:41:3d:0d:ac:91:ec:
f9:31:cb:13:b0:ab:8d:ca:d9:cf:3f:72:b4:6a:fb:99:f0:c0:
55:46:f0:4a:d0:f8:f2:6a:42:cd:0f:4c:0b:ed:88:89:b4:0a:
6e:e7:36:44:66:b4:80:f1:1c:7d:40:96:1c:0a:d4:f9:c9:7e:
d8:f4:1c:ff:cf:ec:ae:22:66:7f:76:24:98:65:5f:a4:d6:c4:
40:47:72:a6:63:5d:f2:48:34:18:45:ee:52:e6:59:a2:03:6c:
53:87:2a:6c:70:81:b1:fa:2a:ad:a4:38:2b:d8:fd:e0:d2:d1:
a1:9e:37:a5:50:6c:f2:18:eb:e5:e6:4c:f7:fb:4c:3c:26:26:
4d:9f:6f:14:32:97:b4:1b:47:df:05:72:25:7a:de:c6:5c:f5:
a4:bb:f8:3b:56:db:83:32:8a:8b:ca:04:16:92:2a:8f:4c:b8:
74:ec:05:47:4a:38:36:0d:88:98:b0:f6:18:8c:03:dd:38:fb:
42:6f:1e:1e:39:2d:40:20:0b:0d:0a:3f:48:1a:3d:62:a3:56:
13:9d:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:39:56 2025 by rpki-client