Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d119bd5-f956-38ab-aef2-6f905afa72f4.roa
File: 3d119bd5-f956-38ab-aef2-6f905afa72f4.roa (raw, json)
Hash identifier: duf0O1Eoatycbz2OsiJCukDZsZRcZpuu/+0BSEIIDdA=
Subject key identifier: ED:25:CF:71:9A:C9:A2:8A:FC:35:2C:04:97:90:0A:07:BA:38:C7:B7
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99659E2D3A1B90C11485240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d119bd5-f956-38ab-aef2-6f905afa72f4.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397235
IP address blocks: 156.154.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:59:e2:d3:a1:b9:0c:11:48:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=60bad7db-4f0d-4018-a5b3-34fabcf59576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:80:3a:64:15:cf:93:5d:f0:02:e9:1e:d3:
8f:36:f5:b5:da:94:35:99:06:78:11:b7:94:b6:39:
82:d2:ff:b4:4c:6c:43:25:0f:d9:cd:8f:36:65:34:
6f:2d:bc:fb:54:df:af:76:ba:e5:da:5e:3a:65:56:
a9:e7:a5:89:8a:22:02:54:fd:94:c1:87:b4:41:e1:
e0:65:0f:9d:46:49:27:83:2f:eb:13:1a:c2:fb:69:
2c:d0:49:ac:cd:15:d8:09:be:fb:e3:51:62:7b:0c:
a8:fa:66:70:00:62:c8:0c:aa:4e:35:b9:d3:f1:9a:
d8:5c:4e:28:b7:40:c3:ab:3e:8a:9c:20:9a:01:12:
61:60:98:8c:b3:48:86:0a:3f:2d:41:91:98:29:d4:
63:e0:22:be:07:de:3e:82:02:4a:69:cb:fe:ec:d3:
81:7e:88:48:9c:02:31:47:59:0a:e2:8d:36:6d:7d:
f0:b0:a4:37:59:1c:1a:49:91:be:3c:f8:a6:c7:00:
a0:fc:dd:7c:ef:60:33:c5:0d:3d:ba:33:a9:19:1b:
6c:54:22:53:fe:9a:5c:57:64:4c:c2:23:ca:93:8f:
aa:63:69:b1:b1:a2:82:d8:e5:7d:f1:93:a3:b2:12:
c4:0c:16:f6:7b:32:36:60:b3:a7:c7:fa:3a:db:39:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:25:CF:71:9A:C9:A2:8A:FC:35:2C:04:97:90:0A:07:BA:38:C7:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d119bd5-f956-38ab-aef2-6f905afa72f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:06:4f:8a:33:df:db:2b:02:ac:e0:07:82:7d:48:3b:a0:6a:
80:8b:f8:c9:28:b6:95:b2:1a:4b:2a:c8:64:7b:66:ed:ba:f5:
a1:59:30:e3:9d:4b:41:46:23:11:84:47:a6:36:5a:92:fc:3c:
d8:a7:f4:4d:74:30:7c:33:52:bc:5a:a1:28:be:67:bb:fa:35:
a7:0c:2e:28:07:c8:39:f4:cb:bb:a7:55:8b:ea:25:a5:b6:63:
e2:94:e5:a6:b3:d9:2a:85:cf:63:bc:17:38:c2:d6:89:f2:b9:
22:0c:77:8f:59:db:76:38:ce:51:60:68:5b:48:a8:1e:b8:15:
25:18:9c:e3:51:81:a3:af:5e:06:c1:c5:65:e4:32:f2:a9:f2:
03:98:c9:e0:38:06:db:48:cf:69:8f:03:25:6a:92:57:b0:37:
a2:0c:04:11:9c:de:e8:06:57:74:22:f5:3d:c1:28:51:3e:12:
51:47:37:7c:7f:c4:ed:49:b3:86:ae:63:7d:89:20:d1:8e:a9:
e9:d3:af:dc:6d:5b:0d:39:51:2d:79:29:b3:26:0b:52:53:45:
7a:9a:22:98:1f:4a:cc:78:97:5a:e0:95:f5:f6:c2:81:98:bb:
04:c7:2e:04:0b:e3:f1:45:20:ae:be:b0:b7:0b:2e:07:e7:77:
53:b1:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:31 2025 by rpki-client