Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43a92f13-1adc-3b24-b6bd-9276923de4c5.roa
File: 43a92f13-1adc-3b24-b6bd-9276923de4c5.roa (raw, json)
Hash identifier: Irel42x117AsuB4XDsNmpb+I11D0PaozWJe8VOPFhew=
Subject key identifier: 2E:07:F7:61:32:6C:FC:32:DD:49:69:E6:A6:5C:2C:91:63:28:31:A6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996580AAF284768D8CF72C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43a92f13-1adc-3b24-b6bd-9276923de4c5.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397229
IP address blocks: 156.154.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:58:0a:af:28:47:68:d8:cf:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=db9b51cb-b600-4778-97e1-d39d302303ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:c2:8b:9c:07:72:e6:48:d6:7b:2a:f3:69:
d6:fd:c5:58:bc:fd:92:34:45:a6:21:2d:e3:f5:20:
5d:96:77:85:01:a3:29:56:a5:4f:f2:c8:9b:0a:32:
5b:6d:b9:77:17:75:3d:a6:b1:e5:fd:a2:a3:df:48:
73:06:8b:24:f8:56:92:89:51:e7:37:ce:a5:86:10:
51:df:e7:ff:f5:05:c0:ad:a4:7d:6f:41:49:63:2c:
b3:d7:37:6b:06:93:5c:9b:01:5a:8e:4e:81:48:fe:
71:00:2c:ac:e5:12:fa:8d:45:35:22:1d:b5:03:55:
34:aa:d7:96:db:db:ca:54:71:8e:75:7f:7d:b1:0f:
4c:44:40:1a:7f:3a:51:09:64:46:40:39:b4:ca:66:
4d:29:17:4d:48:7d:71:62:b6:77:c9:09:b7:5b:75:
db:fb:06:f3:1d:b8:07:3f:d6:62:a6:5d:e7:9f:40:
aa:9d:e1:ff:62:63:b3:10:1d:4a:08:dd:28:48:6f:
a2:82:72:18:e0:e3:3c:73:e7:6d:05:7d:d6:99:0e:
dc:7d:9a:b0:78:11:2f:ea:26:7f:83:88:e1:b1:85:
79:25:cb:b5:85:2e:c5:c2:b7:fe:a1:f7:85:50:04:
77:7e:52:7e:08:56:d9:e8:47:87:89:28:33:2d:e5:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:07:F7:61:32:6C:FC:32:DD:49:69:E6:A6:5C:2C:91:63:28:31:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43a92f13-1adc-3b24-b6bd-9276923de4c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:51:5f:26:ab:44:74:e0:8e:78:31:58:66:39:2a:f0:26:cd:
f7:1f:8e:34:16:00:0d:94:15:eb:d5:09:58:80:16:32:f8:8a:
36:3e:72:6a:89:3c:11:c3:24:71:46:8b:73:e3:78:ed:d3:7e:
d2:67:39:59:0b:09:64:ae:1c:55:84:80:f8:66:3b:b9:cf:97:
30:04:ef:6f:41:f6:39:e4:f2:34:73:69:f3:92:2e:13:10:4c:
e9:b2:3c:46:28:c6:ff:e0:ee:17:fd:34:e8:0e:90:6a:98:b7:
62:b0:72:31:6a:c8:e2:b3:6a:48:f3:6f:90:fc:0e:60:5e:71:
09:1d:b8:3a:a8:1b:b3:43:52:d1:ed:86:d5:d1:18:85:26:e5:
e4:c5:af:e7:f3:b2:31:05:6d:b9:34:69:5c:5f:fa:fd:9d:4d:
d9:1b:43:10:7b:eb:f4:a0:23:44:e7:58:b4:9a:5c:8f:11:d8:
d5:9f:fd:f8:6e:2d:5f:19:be:60:a0:52:ad:d5:d7:82:f0:99:
e1:1d:f3:0b:c7:b6:4e:92:dc:e6:b1:6d:98:3f:00:30:32:a8:
97:e2:58:01:57:bb:f3:44:c0:2f:14:06:9e:31:47:f1:56:16:
2c:af:0c:b1:99:85:cd:ec:45:da:4b:eb:62:6d:db:7f:e8:7a:
8e:2e:62:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:47 2025 by rpki-client