Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa
File: 4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa (raw, json)
Hash identifier: ZWc9SDvIzQAZJa8F1+NNq1D1YbItJfA+aYP9VIbHa9c=
Subject key identifier: 5A:E3:33:42:52:82:DC:F8:21:28:DB:61:42:5F:11:7D:0B:FD:C2:0D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848D6C68E11CA8AF5932EECF400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa
Signing time: Mon 10 Feb 2025 18:29:56 +0000
ROA not before: Mon 10 Feb 2025 18:29:56 +0000
ROA not after: Sun 11 May 2025 17:29:56 +0000
asID: 12008
IP address blocks: 156.154.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:c6:8e:11:ca:8a:f5:93:2e:ec:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 10 18:29:56 2025 GMT
Not After : May 11 17:29:56 2025 GMT
Subject: CN=4ae0f7ef-c614-40d1-97f5-d0729147d00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:2e:33:78:9c:d1:a1:a7:87:31:b8:5d:a8:
aa:07:77:8c:b0:1f:5c:3c:b5:8b:f2:61:e3:83:a4:
d5:f9:34:2b:b8:08:dd:ca:32:32:52:4a:a1:eb:9d:
15:b1:45:2d:b2:d7:92:f7:4d:28:52:18:9c:da:f4:
ef:ed:2f:62:88:42:ba:d1:c4:0e:47:2b:2c:9b:92:
43:0f:40:1d:23:5a:e8:da:f8:41:7d:5a:03:21:7d:
96:64:50:56:2a:f7:32:c0:6f:88:c9:c8:bb:79:5b:
71:a1:17:15:66:67:bf:b7:85:63:ce:b4:30:d8:7d:
b5:7d:2e:f1:8f:8b:db:c0:e1:05:01:e3:e3:76:61:
dc:f9:2e:48:7b:77:bd:09:60:66:6b:83:3b:1d:4b:
e8:3f:f9:84:33:ad:7b:e0:49:59:6e:7e:f0:39:14:
84:1e:dd:54:c6:0e:32:de:bf:22:79:c7:cd:82:e7:
3f:ce:e7:64:22:7f:e1:43:92:ba:5c:3e:0b:60:90:
f5:22:9e:4b:84:75:ca:91:ba:76:59:e3:69:0c:30:
2f:e5:94:4c:36:c4:69:db:44:69:0b:b2:20:f2:43:
29:54:65:f4:91:14:89:b3:c4:12:9a:1c:62:7e:9e:
50:25:1b:08:38:19:93:f5:ac:8f:37:29:33:78:a9:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:33:42:52:82:DC:F8:21:28:DB:61:42:5F:11:7D:0B:FD:C2:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ca:1c:a3:15:31:9c:24:4d:f1:a8:61:61:81:2d:f8:1e:87:
53:7a:3c:cc:dd:5a:20:54:f9:41:94:f3:02:3c:b2:11:08:ff:
f1:15:ab:f9:da:af:4b:12:0d:40:10:c1:d0:38:8a:42:c3:cf:
1e:1d:76:67:69:04:2b:4d:60:a0:d8:d9:c7:bc:d4:4e:ea:84:
83:70:5f:b2:17:e5:fe:92:c6:bc:a6:e8:bb:d2:b1:56:61:ff:
6d:cc:0a:36:f7:86:ab:ab:a4:b1:66:81:c1:ba:ca:69:d8:59:
42:a6:8c:11:01:b7:a4:20:da:e8:76:1c:7a:5d:48:9a:4b:76:
72:ac:61:56:9e:3c:f3:62:82:3a:a2:97:29:36:f9:56:29:d7:
68:ba:72:a9:33:8a:81:ec:0c:0d:33:fc:11:d1:4d:3c:99:19:
6b:a5:36:62:97:dc:8c:e9:82:22:ef:eb:f7:03:00:94:6c:e8:
6d:46:84:74:1e:61:69:ad:e6:f0:3a:40:86:1d:4b:7f:c4:df:
89:5e:a5:f5:fd:87:c5:92:31:c0:5e:55:c0:1e:0c:60:ff:96:
34:f3:9f:74:cc:af:d4:b7:06:3a:ad:00:d6:7d:f5:97:5e:68:
e5:23:dc:eb:5a:2a:1c:6f:76:18:ad:e9:4d:57:c6:e6:58:73:
bd:0e:6c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:11 2025 by rpki-client