Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa
File: 42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa (raw, json)
Hash identifier: 1oTC0G/kHpfbttxk2zKFUpmZZd8/HaQaNLREr7+iGu4=
Subject key identifier: B6:6D:BA:1F:91:7C:44:43:8E:F0:F8:CC:FB:D8:21:62:F0:47:54:2F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9963E38D57262FE92D12680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397229
IP address blocks: 156.154.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:3e:38:d5:72:62:fe:92:d1:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=660da2f7-07c5-4e21-b6f3-44ddfa2cde3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:2a:c4:54:a2:82:56:38:a9:f8:b1:5d:fe:
8e:ed:05:26:0b:3f:46:72:cf:4e:70:d1:39:26:e8:
6c:d5:2a:62:43:c0:33:e1:2c:14:df:4f:cb:a0:7e:
ce:1a:0c:a3:d3:44:57:21:37:6d:c3:8f:37:f3:24:
f1:73:04:d7:47:67:06:79:c1:9b:83:38:22:e0:a9:
8a:1f:01:c4:a6:73:7e:e9:3b:1e:ae:2e:2a:11:42:
d1:00:8d:6a:13:ab:19:e4:50:90:a7:2f:5c:2d:3d:
29:ab:9e:91:d4:9b:05:85:c6:14:85:44:7d:09:5f:
c3:8b:9e:92:7c:8e:8a:30:c4:eb:0c:1f:ac:2e:81:
60:b6:7b:95:7b:8c:89:ae:95:2c:b0:33:83:2f:e8:
d1:2c:82:12:5b:31:d6:d1:24:69:e8:0d:b8:fa:92:
c0:87:f2:8e:71:20:64:e1:e9:9c:d8:6f:9b:65:40:
b2:58:9d:b4:f3:ad:66:70:d4:09:1c:4b:09:d4:24:
29:ba:d3:76:a2:a8:f9:c6:8b:bb:d4:76:2a:00:5a:
6f:db:1c:0c:cc:9e:c2:c3:16:cb:7b:46:16:3a:7b:
e4:f2:4c:7b:fc:c1:65:39:6b:b0:27:83:e5:a9:ff:
66:50:b0:46:7e:60:d2:8d:3f:db:08:67:e3:1f:6a:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6D:BA:1F:91:7C:44:43:8E:F0:F8:CC:FB:D8:21:62:F0:47:54:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:46:92:60:92:8a:c9:f5:f0:ac:6a:30:3b:3f:17:fb:0d:16:
57:ec:48:b0:cd:0a:2a:a8:12:c4:be:50:c9:3c:26:6a:8a:9b:
12:eb:f7:a9:71:5f:58:a1:28:de:bf:df:03:af:0c:fc:c9:29:
05:b4:f5:8b:98:2e:fc:43:68:46:76:dd:96:a2:ef:19:e5:5c:
ea:c0:6f:96:c6:b3:40:27:9d:d1:24:0f:81:08:4a:03:38:02:
d3:88:40:2f:2c:2f:cd:08:bd:bc:35:76:30:73:2b:0d:ab:62:
1b:7a:3e:c5:8e:ca:49:ac:91:f2:d2:a7:30:0a:c2:21:04:bd:
5b:02:6d:c5:ec:91:c5:e0:aa:dd:26:2a:7f:ad:fb:14:90:0f:
26:2b:cb:ba:25:37:f3:bb:ff:b1:e4:5a:f8:29:1d:74:42:69:
e0:89:e9:42:d5:29:8e:ce:60:7d:8d:b3:88:3d:4d:8e:f5:c3:
02:93:be:a4:10:8a:c9:c4:69:57:e1:8c:03:11:d5:ec:cf:72:
95:ff:9b:5d:18:4b:0f:f6:1f:54:55:f8:87:51:76:e0:6d:1f:
13:9c:5e:ab:73:7c:84:20:93:64:e5:cf:b3:9a:ed:bc:3b:63:
54:b8:e2:dc:75:88:3a:a5:06:98:41:96:9c:40:fd:71:fb:44:
b1:59:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:26:36 2025 by rpki-client