Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38a1ab96-8a5b-32f3-8345-8c49e7a543b8.roa
File: 38a1ab96-8a5b-32f3-8345-8c49e7a543b8.roa (raw, json)
Hash identifier: fNVkTGXC4MUQWyMbsUtcuiapS4PC4/Dcx602NC8PTRE=
Subject key identifier: DB:23:73:58:C6:3D:23:26:A1:9F:E2:1D:E8:59:41:8D:19:E1:6E:BC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99653A06699FB5C63A4FFC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38a1ab96-8a5b-32f3-8345-8c49e7a543b8.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397234
IP address blocks: 156.154.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:53:a0:66:99:fb:5c:63:a4:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=b3843c60-894c-41f7-8ac7-24475cde45e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:9a:43:30:d7:85:02:60:15:16:ca:f3:4b:
bc:2b:a9:f6:87:29:42:b4:bd:a0:fa:b6:8f:bc:5b:
a1:77:07:ed:0d:63:55:44:0e:98:bb:14:9f:68:57:
42:79:15:3d:28:dd:8c:9e:3e:44:b1:eb:7c:eb:83:
24:60:85:11:aa:22:c5:0b:8a:e8:e5:71:87:89:35:
c1:dd:66:f3:87:a4:98:47:89:16:e3:61:46:2b:bb:
9c:be:d7:36:8e:4d:a2:5d:cc:5c:11:37:77:31:79:
fe:5b:55:90:6c:5f:f7:42:e7:87:09:0e:66:31:31:
5d:3a:af:92:fa:c9:e9:21:98:85:7a:c2:6c:5e:15:
32:6b:30:b8:f5:7c:8f:59:22:24:d5:bd:bd:da:07:
6d:8f:6b:cf:2b:b1:7a:09:7b:a1:56:c3:ad:c8:bd:
8e:1b:e5:ec:1c:34:b5:b9:2e:82:fd:21:2a:24:80:
75:f0:ae:39:3b:5c:57:65:88:87:a7:24:54:0c:34:
28:01:b4:57:09:11:fb:2a:74:ed:a7:a3:3c:c5:07:
03:3a:70:1d:9a:15:a2:1f:bf:ac:4a:51:75:65:b2:
53:c1:62:5a:27:0f:70:86:6f:cd:61:1a:b3:db:81:
77:98:25:b7:e6:ba:9d:85:c3:3f:d6:da:2c:12:16:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:23:73:58:C6:3D:23:26:A1:9F:E2:1D:E8:59:41:8D:19:E1:6E:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38a1ab96-8a5b-32f3-8345-8c49e7a543b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a0:f6:4e:6d:88:41:87:4f:14:51:01:d0:d1:c3:5e:93:1f:
10:6c:3e:47:63:50:d0:41:51:ef:41:67:29:6d:87:2d:90:ea:
e6:31:45:a2:e2:87:ee:d6:61:5f:be:de:74:54:7e:1a:95:88:
20:19:1f:d7:98:a3:90:30:ba:5a:63:e3:dc:5c:77:6a:0b:54:
e0:67:ca:dd:e3:19:19:60:32:63:8b:00:ea:51:14:2f:78:42:
ff:ba:5e:2b:0c:02:d7:8b:88:a8:8c:6f:b7:71:f8:9e:b0:53:
65:a3:21:e5:6c:22:eb:5d:91:17:fb:c5:c3:32:19:ae:68:41:
24:2a:28:72:10:c6:f2:e6:d7:04:7f:c6:a5:2f:e5:56:2a:1a:
c2:74:89:72:83:23:8a:d4:7d:c5:52:23:87:a6:11:68:7d:c5:
72:df:7e:8a:c0:e6:07:b5:82:28:59:a3:f7:ec:f5:83:55:70:
70:e8:64:c8:6a:36:e1:a1:99:9d:1d:4d:f2:1b:c1:58:2a:9f:
18:66:38:57:25:c8:21:67:db:16:03:18:8e:21:f1:c0:07:91:
8f:d2:76:23:4b:eb:19:6f:6b:0d:35:8c:91:95:b9:1a:66:9d:
7c:d7:ec:d2:3a:25:34:19:59:2a:e5:94:b2:ba:86:b4:0a:0a:
ad:b1:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:45 2025 by rpki-client