Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43be01e0-085b-3771-bf34-d375c183f7ae.roa
File: 43be01e0-085b-3771-bf34-d375c183f7ae.roa (raw, json)
Hash identifier: eNvpYo4FBF3bjQkbFWqcXOq5yXxJIlB5swTlYTYtmio=
Subject key identifier: 2A:40:93:2E:19:4E:EE:9A:98:DB:B6:62:63:0F:F5:B6:6E:2B:97:C8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964FD359ED4E0D930BAE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43be01e0-085b-3771-bf34-d375c183f7ae.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397222
IP address blocks: 156.154.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:4f:d3:59:ed:4e:0d:93:0b:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=5a96332e-9f57-49d0-b3b0-abf43a0abf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:a8:a9:77:82:6d:ba:16:a7:95:ae:d8:43:
40:dd:d5:d6:82:ff:6a:8f:58:65:80:3b:76:07:6d:
5c:bc:fc:5c:12:a9:ad:37:ce:64:fb:a1:fc:1d:1d:
b2:bf:c9:59:77:16:e1:8d:d3:ba:e2:e6:92:84:b7:
33:39:26:ea:22:70:12:50:f9:cc:fa:37:9f:89:4b:
27:ec:2d:0d:f2:5b:57:7e:0a:50:6f:ad:c3:52:54:
43:54:ce:79:d7:72:f1:31:dc:df:95:91:f5:cd:7d:
10:6c:21:10:e3:1e:58:03:55:32:85:94:a3:18:f4:
28:a5:24:6e:dc:9c:66:90:c2:17:36:dc:59:2e:f6:
81:4d:d8:c5:e2:ff:92:79:ca:28:17:7f:16:d5:12:
43:ec:60:02:99:78:7e:3a:c4:b0:b6:39:24:25:26:
d2:d2:0c:35:aa:10:d0:a6:6f:9a:0e:cf:7d:3f:0f:
40:b7:c9:4d:5a:cc:52:1b:13:ab:35:ee:91:b4:fa:
21:8b:79:d4:ce:57:27:7d:fb:86:16:4d:85:e7:40:
97:82:25:97:ef:95:8a:ec:e4:3e:4d:4e:80:d1:d6:
e0:d1:06:1f:1a:11:c0:0c:b4:91:b5:33:7f:7d:0e:
ca:a8:87:35:97:a9:a0:98:67:8b:29:8e:62:c5:3d:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:40:93:2E:19:4E:EE:9A:98:DB:B6:62:63:0F:F5:B6:6E:2B:97:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43be01e0-085b-3771-bf34-d375c183f7ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:33:d8:33:0c:c5:64:4e:bc:95:c6:d8:8d:65:61:1f:c7:00:
b8:29:53:b4:aa:53:55:d4:03:06:53:81:70:c5:35:b6:3d:6f:
f1:a5:66:c9:15:6f:05:8c:b5:2e:62:9e:f6:45:a8:fc:c1:b0:
26:86:85:86:f2:f0:fa:cc:b4:95:c0:ea:08:2e:ef:13:9e:56:
f2:56:6c:3b:5a:fb:36:1e:8d:e6:61:f0:ed:79:61:fc:4b:30:
70:52:45:ee:1a:12:df:23:95:e5:41:5e:8a:39:61:03:23:81:
da:97:e7:03:0d:27:94:21:9a:cf:af:fd:d7:53:86:64:d2:bb:
42:3f:2d:9c:13:f8:b6:96:1c:f9:b8:33:38:33:7c:2e:4a:99:
0d:ca:b4:47:40:6c:40:58:ee:35:85:cb:b8:3a:0f:c1:87:65:
8a:e5:92:2a:78:93:26:4c:81:cf:a4:dc:08:31:4b:8a:15:32:
33:4d:70:2c:91:b8:fe:26:39:9f:bc:14:4f:b3:da:b9:b4:61:
86:75:68:c3:e7:bb:8d:72:91:9d:c9:67:1a:41:bf:20:3f:45:
b2:af:c5:ba:3b:d2:be:01:8b:41:19:18:ed:15:07:e4:34:fd:
c0:39:1f:5b:99:ed:e2:a5:83:41:04:15:be:17:c1:29:a9:7f:
d0:6d:0c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:49 2025 by rpki-client