Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa
File: 3ae60e70-e5fe-3802-ae55-f68e23a195db.roa (raw, json)
Hash identifier: joB21VY6nQnr89WWr+wCal9Opby3mzuUNc/cQnIHbMc=
Subject key identifier: 8C:C9:F1:D7:30:43:BE:7D:7E:8C:E7:AE:04:DE:1E:55:E7:53:A5:22
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246F039075553AC4245ED80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397232
IP address blocks: 156.154.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f0:39:07:55:53:ac:42:45:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=cce882ab-9ee7-4588-b438-7f048bd36efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:11:e2:47:1a:f1:e5:83:0f:85:86:d3:9b:
54:50:2f:dd:cc:fe:e4:35:84:1f:36:da:80:b4:3d:
e7:f4:8b:32:82:39:21:fe:b7:74:9b:c2:d3:49:0c:
c7:58:68:e5:c4:67:1c:6c:61:e4:dc:f7:a7:67:a2:
8c:25:5e:8f:67:48:e8:b1:c5:07:7e:2f:ae:05:a0:
91:cd:c8:7b:4f:b9:9b:62:c1:9f:29:59:ea:1a:99:
ba:97:9c:3e:0c:57:15:33:9c:00:e0:2e:a8:b2:d4:
4e:ef:30:56:12:6f:66:92:78:68:76:26:63:67:40:
36:9e:69:f2:80:ae:59:08:44:b9:68:58:cb:d3:f9:
d6:c2:79:94:5e:b5:29:20:01:8f:ce:76:90:2a:51:
a1:bf:d0:e9:e5:2a:d9:ce:ac:ec:e6:42:1b:f1:15:
2d:62:56:9e:6b:28:9d:f8:b6:cf:24:98:03:5d:6e:
b2:d9:ee:b7:f6:cc:42:de:44:63:80:af:0d:70:7a:
7b:5c:d6:77:3a:83:11:af:e3:05:f6:51:5d:16:c1:
bf:7d:98:ac:b5:24:d7:04:af:92:a7:ea:7f:77:56:
3c:de:d7:11:ee:78:db:c9:af:23:68:ec:f9:28:7c:
c2:c9:ee:d4:49:3f:f6:78:d3:98:a4:13:96:e1:0b:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C9:F1:D7:30:43:BE:7D:7E:8C:E7:AE:04:DE:1E:55:E7:53:A5:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:b9:82:d9:77:10:71:fb:c9:fb:de:a0:e2:4c:3b:92:1c:13:
16:23:d8:08:19:ee:36:34:2b:e9:dc:68:2f:72:72:e2:c7:5d:
1b:49:40:e3:d9:02:83:52:1e:2a:7b:02:d7:da:13:1b:24:74:
b6:e3:b4:18:3d:e8:18:d9:44:c3:d9:0b:92:e8:f4:cb:a0:8a:
5d:a5:83:b2:3e:3f:5c:f2:8e:60:f0:54:45:1a:b5:ee:9f:28:
ee:d9:19:66:da:f8:3b:82:34:35:c4:33:a5:6e:1e:27:78:a7:
45:19:0c:42:55:fc:15:3b:8d:83:d9:51:4a:49:62:44:38:e4:
39:69:25:2b:68:a2:b1:48:0c:18:ec:6d:70:a2:39:52:57:5b:
48:1f:72:a9:a1:c8:30:fd:2a:2d:51:a3:f0:af:89:9b:60:c7:
fb:99:e2:67:a2:56:e1:79:72:95:00:81:30:4b:0f:02:29:39:
bd:2c:eb:c5:2f:57:77:27:dc:6f:03:e3:30:90:4e:17:df:09:
05:ce:a5:0b:49:d7:5e:7e:4a:73:b2:b2:d9:25:c9:e9:b9:e1:
94:75:3b:cb:85:d5:5a:c9:63:b1:c2:02:a4:31:ca:96:32:ab:
f1:35:b1:b5:47:dc:c4:fe:83:4a:08:42:12:ea:b5:ff:d1:15:
9b:4f:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:39:38 2025 by rpki-client