Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c2b7c58-17bc-3e10-b9fb-ddf59a30990a.roa
File: 3c2b7c58-17bc-3e10-b9fb-ddf59a30990a.roa (raw, json)
Hash identifier: +OL/fH4GrGvpYEUTVrgLUCDiZoKSHye2uLTo0V+zPTY=
Subject key identifier: 00:3C:62:C9:51:B1:C8:4D:A7:B7:DB:5A:61:04:EC:3B:3F:E0:82:BB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965AA11C1DB7ABA3712980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c2b7c58-17bc-3e10-b9fb-ddf59a30990a.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397215
IP address blocks: 156.154.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5a:a1:1c:1d:b7:ab:a3:71:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=fd16d3f5-1adc-4b8f-9997-9fd9f6bebf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:28:4e:40:1a:ae:0c:db:3b:cb:0a:b6:aa:
8e:4d:d8:ad:c0:e1:8a:32:aa:21:6c:99:c4:ec:00:
f5:5a:aa:2e:de:71:1b:75:1d:3e:2f:12:4b:d5:ac:
7c:6b:45:d8:0c:86:36:0c:d4:9d:2c:20:36:d6:2d:
2c:7e:9e:02:e3:77:8a:3d:bc:a1:79:e7:73:ba:81:
46:31:a7:ec:dc:c3:71:b6:93:fd:d2:f9:a7:ad:dd:
31:cb:38:31:ac:a5:e4:34:46:c9:b9:e5:cf:61:09:
60:72:2d:cc:9a:4a:c2:ac:53:d3:11:4c:c6:b2:80:
74:e2:3d:aa:6a:bb:41:7e:d3:94:2c:31:8b:d0:e0:
2a:13:3e:d7:9f:a7:84:57:3b:6c:ad:e3:6c:41:fd:
3e:67:71:96:98:c7:b7:cd:00:6e:43:24:a4:20:6f:
9a:a6:70:b4:dd:f0:48:99:8a:8e:26:6d:c7:8e:5f:
84:13:e3:d7:b6:e0:51:bd:b3:a7:c0:b9:a2:c7:11:
48:7a:14:cf:b4:01:7f:f7:46:15:9b:c7:9a:51:05:
d3:b8:3f:8c:24:a6:c9:62:2d:cb:8a:50:13:48:d6:
57:73:9f:89:ba:78:e9:64:12:50:e4:08:38:ba:9b:
92:e6:6e:dd:e3:cc:d7:de:b2:b0:55:79:aa:83:7a:
ce:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3C:62:C9:51:B1:C8:4D:A7:B7:DB:5A:61:04:EC:3B:3F:E0:82:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c2b7c58-17bc-3e10-b9fb-ddf59a30990a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:61:b4:56:7a:78:77:7b:c8:a0:55:c7:22:2f:fb:e8:0a:f1:
81:19:b6:54:50:d0:76:1a:10:2b:49:84:d5:4e:b0:12:fc:e1:
b2:20:5b:1b:53:dd:65:65:3c:bf:c6:36:08:4e:51:89:9a:e6:
49:cd:57:cb:aa:2d:7f:57:34:08:f2:a6:1a:69:67:ab:61:5d:
14:1c:cc:41:a9:e6:69:ca:26:b3:4e:e1:0e:e2:03:6e:d1:b3:
48:1c:25:72:61:de:7e:46:f5:db:da:af:7a:f2:ab:a9:fd:41:
98:83:92:6c:af:64:7b:76:bc:cd:d5:15:72:a0:25:dc:79:31:
da:79:f3:2b:e9:35:f7:dc:70:2b:72:e4:b7:bc:50:1f:c0:06:
53:77:c1:c3:88:a2:09:92:22:ec:9d:59:61:f5:51:f9:84:ca:
67:f1:55:de:dc:32:d9:0c:9c:8e:e2:63:ce:9b:bc:16:c6:c4:
0a:ba:05:b1:a2:c7:9c:9e:84:98:fc:a4:b0:df:65:59:7b:ca:
e7:1a:96:dc:c2:71:9d:64:0e:4e:51:8d:83:a3:94:a5:39:ec:
22:5f:a6:8c:ae:fc:64:0a:e5:36:39:a8:69:13:11:46:75:87:
57:b7:e2:dc:8a:c8:3b:48:35:a1:a8:5b:93:22:51:93:65:c1:
81:84:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:14 2025 by rpki-client