Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3da5e597-bcdc-3224-a1aa-9d2888a70f0b.roa
File: 3da5e597-bcdc-3224-a1aa-9d2888a70f0b.roa (raw, json)
Hash identifier: iqSGkCZ59UbTtSl+qJRu45MHdrNXb+E/5Pxd9Cyw1tc=
Subject key identifier: 50:27:04:E5:3E:D9:CB:CD:96:20:19:C5:16:0C:D8:A7:9C:96:7F:E3
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9963CA35F0116DEE9A94700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3da5e597-bcdc-3224-a1aa-9d2888a70f0b.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397232
IP address blocks: 156.154.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:3c:a3:5f:01:16:de:e9:a9:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=ab4992a6-a225-4485-ba56-257cba5572b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:66:5c:55:18:55:69:3c:22:56:0e:7f:73:4c:
16:37:e2:25:a6:62:c1:73:18:29:be:50:cf:ad:b4:
84:95:b4:92:34:62:da:e6:87:2b:ae:d6:50:f9:e4:
30:77:47:05:ef:83:c3:a2:24:1a:06:21:a0:83:df:
bf:82:d7:a6:b2:1d:7b:c9:79:0f:5b:2b:39:9a:5d:
9c:ac:1f:1e:6b:63:0b:92:a9:26:d8:4f:77:1e:ac:
72:f2:33:d4:ee:34:c4:fd:07:20:15:fb:25:fa:5f:
48:f2:6e:8f:76:34:ef:3f:01:ba:5d:4e:88:1d:42:
d6:b4:14:59:7e:36:5d:cc:ff:b1:a3:5c:85:5c:d5:
6b:8c:89:ad:aa:37:bf:39:9f:da:b2:4c:f1:95:80:
38:da:e9:e1:f4:34:ec:60:70:8e:12:72:c7:7d:63:
7d:5d:d0:ad:dd:8c:7c:be:10:f8:29:0c:1e:de:53:
96:99:b8:aa:e9:4d:db:25:d5:e5:00:12:ec:0f:36:
1b:4f:35:e0:7f:bf:c2:bc:91:23:b3:d9:92:18:9f:
ce:9c:aa:c4:d7:c1:a9:70:87:6d:4e:42:24:aa:39:
62:a0:d8:96:1c:b3:1a:5f:15:2d:5c:d0:14:76:cf:
17:4e:28:c6:c1:93:b9:e0:8f:1c:33:24:e4:9a:7f:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:27:04:E5:3E:D9:CB:CD:96:20:19:C5:16:0C:D8:A7:9C:96:7F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3da5e597-bcdc-3224-a1aa-9d2888a70f0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:05:fc:83:e7:2d:9b:35:ef:09:5b:f5:6d:48:77:48:34:e2:
ad:f0:8c:97:69:c5:3c:41:ab:55:fa:5a:6a:ba:98:58:7e:d9:
8e:5f:48:da:b3:36:03:25:63:06:63:48:12:89:53:1c:f8:c6:
e3:0d:90:5c:de:37:62:56:9e:77:06:3b:fc:5a:7f:8c:31:a6:
4b:c4:e4:3e:50:c0:12:0a:ba:27:d9:5e:15:5d:b7:86:5e:ac:
d0:29:db:20:d6:e7:99:94:25:dc:fd:41:8a:6e:a7:50:98:cd:
8d:4d:a7:0b:e2:aa:e3:f8:0b:0f:ea:a3:78:a1:87:02:80:b4:
02:07:c9:ea:96:5a:c2:f9:5f:95:02:24:6e:27:76:bc:64:e7:
9f:99:53:c8:ae:33:95:d1:0f:81:1f:a1:ba:95:3e:0b:35:54:
36:7f:1f:26:8c:08:19:55:17:50:c0:16:65:0a:d4:eb:a5:be:
b6:ec:0e:72:d9:f6:2d:86:b7:b2:39:c0:7b:d0:cd:a2:d9:99:
ac:75:7a:cd:49:9f:8b:7c:0c:6d:b4:cd:7c:7d:53:c6:e2:5d:
c9:f7:c0:4d:63:6d:3a:fd:e7:4f:2d:f7:4e:6b:08:f6:01:e6:
78:83:19:25:f9:be:c5:41:53:ab:3f:2b:89:e0:9d:7c:d6:59:
e9:97:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:15:13 2025 by rpki-client