Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/414ee527-1d6f-30dd-be1f-288ed342b4b5.roa
File: 414ee527-1d6f-30dd-be1f-288ed342b4b5.roa (raw, json)
Hash identifier: eG821ZykMdgIEx5V7uHVCVD0ZdH3GY4JG5TXEM8tET4=
Subject key identifier: 5B:0C:BC:50:16:9A:88:98:64:71:14:B2:7F:6C:71:DE:5E:71:E4:9C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996583A63531FD9A03809C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/414ee527-1d6f-30dd-be1f-288ed342b4b5.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397233
IP address blocks: 156.154.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:58:3a:63:53:1f:d9:a0:38:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=c6801338-731e-4e42-9c88-eb5f716d4ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:9c:34:20:76:7d:12:3e:3d:a6:e9:dc:2c:
01:d6:1b:e4:5e:4a:16:1e:6c:e9:03:67:3f:c6:17:
6f:69:01:06:89:ad:58:f6:3d:a3:b5:fb:a9:02:44:
67:f5:91:ee:93:75:ac:9b:50:0b:87:3f:f6:23:e2:
94:0a:a5:66:e8:c6:ad:07:96:98:9f:cb:a6:53:6d:
0a:4c:a8:a5:92:dc:d3:9d:17:aa:0b:d1:dd:d3:7c:
26:57:ae:08:6e:7a:cc:2e:73:72:39:87:65:c7:cd:
d6:02:bf:82:b5:bc:b3:99:ba:ce:a1:38:08:64:ab:
04:d3:3d:a5:61:a2:94:de:f0:bc:eb:c9:b3:bd:a8:
21:1d:e6:41:c1:c2:55:b3:4b:67:44:b3:f2:c4:22:
34:76:99:8f:00:5c:dd:d1:e5:c5:07:0d:c4:d9:e4:
06:b8:f6:d6:fc:49:3c:73:50:35:09:ab:0d:0e:2e:
2f:e9:09:fa:39:07:8e:41:18:4e:dd:f8:0c:bf:3d:
b7:91:3b:83:f0:0f:76:d0:df:8b:36:ee:fd:22:65:
4c:44:fd:43:35:6c:21:6e:3e:0a:3c:6a:f0:a3:ff:
33:bc:2d:62:fd:c1:00:53:1e:8e:93:d4:c3:84:42:
34:d3:dd:1a:e0:17:ba:be:df:1f:ba:17:2b:b2:08:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:BC:50:16:9A:88:98:64:71:14:B2:7F:6C:71:DE:5E:71:E4:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/414ee527-1d6f-30dd-be1f-288ed342b4b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:72:a4:66:fd:ba:29:4d:08:0a:37:44:12:cf:48:10:8d:a9:
34:7b:df:b1:75:cc:04:2a:81:61:a3:22:f1:ff:8e:49:4e:29:
b8:3a:4b:86:d5:13:be:b2:65:0e:44:46:49:5e:a1:22:a8:06:
2f:2c:91:9a:66:10:b8:5d:0d:0f:31:4b:1d:72:b4:25:9c:d2:
fc:65:17:a6:31:c4:c0:ae:f2:6e:28:b5:b9:55:ee:4a:52:a9:
b1:f6:34:30:5c:b2:7d:98:87:53:d5:14:70:dd:f0:fc:ca:b9:
96:f2:9d:3a:a8:a8:9d:b6:95:73:d2:7d:44:f7:64:ac:61:54:
3b:9b:ca:ce:c9:95:58:68:6f:7a:29:a0:91:d1:db:59:c9:94:
56:c9:ad:cc:a1:6a:d1:a9:84:bd:b5:99:5c:7c:f9:43:31:d2:
2a:9f:6e:90:ed:dc:c2:e5:53:f9:ed:de:32:a7:7e:71:71:5b:
f6:7e:09:34:19:38:fe:17:f7:50:b6:75:6c:72:09:1e:22:10:
f9:c2:4b:90:55:91:66:0d:6c:b1:dd:61:c9:98:fa:6f:8d:06:
3d:6a:1b:21:35:f5:b1:0c:c6:8a:6c:ee:52:e4:65:ad:cd:f2:
bf:f9:b4:a2:86:1e:93:9c:93:da:7c:d7:91:99:3f:34:f0:14:
5b:40:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:55 2025 by rpki-client