Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/425b37dd-b303-3dd9-bc0b-0059d24b63d1.roa
File: 425b37dd-b303-3dd9-bc0b-0059d24b63d1.roa (raw, json)
Hash identifier: gstc+fPFIzij9K0qI/oIsJgaWlX3g134nRDx6+XyzNM=
Subject key identifier: E7:76:19:6C:90:72:1E:08:BE:C6:54:A4:C4:AA:F7:FD:54:92:2D:16
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E9AF87DC20CFB9DD4300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/425b37dd-b303-3dd9-bc0b-0059d24b63d1.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397215
IP address blocks: 156.154.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e9:af:87:dc:20:cf:b9:dd:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=fe2c4f40-6431-4fb0-9d00-f3ec0eb1181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:1d:77:f3:58:c7:9e:a0:6b:c7:98:1d:d9:
2f:28:11:7e:7e:17:ec:77:cc:45:c5:04:d6:51:a8:
02:4e:b6:f1:e2:79:c0:06:a2:72:0f:d6:7f:65:b8:
55:72:11:9b:36:e1:d7:20:38:a1:cd:79:f1:b0:be:
12:40:bd:5d:d8:6f:09:16:3b:4a:cc:fc:36:bd:e6:
5a:b3:3e:f3:2c:00:f1:e1:22:40:1d:cc:fe:86:1b:
f9:49:b1:8d:2f:5f:50:b1:00:a4:37:9a:68:b0:a2:
c4:22:8e:dd:b4:7b:45:10:35:7d:94:60:81:23:ea:
ff:47:c5:55:07:c6:24:91:2e:16:99:ef:f0:27:42:
14:f3:57:f0:41:11:87:78:f5:ff:c6:31:60:d1:53:
b8:8a:31:76:36:c7:47:a0:80:b2:3d:90:1c:af:7c:
0e:30:d6:07:11:3f:cf:43:86:39:2f:02:fd:d5:2a:
38:53:6e:75:0f:ba:53:7d:2c:b7:29:68:3c:4b:c4:
67:97:e1:a7:a6:3c:9a:b9:db:3b:23:ff:f6:06:8c:
8d:f7:c4:ba:7a:f1:28:f6:37:33:45:c2:5d:5a:2e:
90:78:d3:ab:d9:8f:9e:d7:b6:1e:b9:45:df:91:a6:
09:91:5e:4b:64:54:c3:a7:38:8b:d1:a7:1c:58:1a:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:76:19:6C:90:72:1E:08:BE:C6:54:A4:C4:AA:F7:FD:54:92:2D:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/425b37dd-b303-3dd9-bc0b-0059d24b63d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:b8:04:49:93:53:74:9f:c4:43:0e:54:9c:1c:ba:b7:7a:f2:
a6:fc:97:ce:25:f6:d8:7a:fe:8e:09:2d:4e:d2:3d:d5:70:27:
ab:76:cc:6b:2c:c3:da:e8:15:e8:34:14:a1:5d:64:3e:a8:53:
13:8a:91:1c:f0:18:a8:2a:9d:a1:74:1f:a2:eb:22:e6:a1:82:
63:db:0e:aa:61:61:4f:e8:79:44:18:1f:5c:60:b1:f1:17:8c:
0f:42:e3:23:14:b1:7c:51:8f:6c:71:13:a3:21:77:c1:b3:b7:
95:90:9d:11:12:8c:6f:95:69:8f:9a:07:49:b2:e2:4e:0b:3e:
4f:21:bd:60:02:58:a8:0a:32:8c:ac:b6:2a:c6:5a:41:ec:01:
c1:8b:c2:3f:dc:2e:8e:f6:12:d8:ee:57:d5:24:bc:d3:06:50:
63:3a:40:ae:2e:0f:20:64:ca:2b:dc:2a:2b:9f:62:7c:7c:c1:
db:a0:ec:eb:2c:0c:27:e3:46:af:0b:73:f0:8f:5d:0b:54:e9:
6d:aa:60:64:d9:d7:61:47:23:cb:b5:de:09:2d:d9:75:82:64:
e8:ef:72:f1:c9:b3:17:dc:b9:98:76:fc:b2:58:98:44:55:99:
7f:cc:ed:ca:5b:cd:cf:6f:df:13:a8:13:2e:45:6d:7e:9d:06:
61:0c:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:09 2025 by rpki-client