Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/51ca9c78-4a7a-31eb-9efa-1461a3d375b7.roa
File: 51ca9c78-4a7a-31eb-9efa-1461a3d375b7.roa (raw, json)
Hash identifier: RDXgtJKrfDL7pVtGGcMVhjRXOtt5qVnEAIWKVTXBS5o=
Subject key identifier: A8:33:26:E9:06:45:71:8E:EE:FA:AB:5E:DE:F0:7B:46:F8:B8:29:EF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2111B0B355961139B964C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/51ca9c78-4a7a-31eb-9efa-1461a3d375b7.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397228
IP address blocks: 156.154.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:11:b0:b3:55:96:11:39:b9:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=f46dffba-b5f0-4616-9146-d99728d66482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:e3:78:48:6f:34:72:73:b9:22:81:75:24:
d7:17:0d:6a:5d:c4:01:bc:c9:0c:63:e8:b9:ef:ac:
e2:88:f2:c9:30:cc:2d:da:42:36:9c:79:b6:c3:e6:
82:51:cb:a0:a4:92:f8:89:e2:5e:dc:5b:56:4e:38:
65:42:f9:b2:fb:19:d1:e6:ea:b8:36:be:96:62:ee:
b5:9e:86:2d:e0:33:b2:0a:8b:11:5b:9a:ce:f8:22:
33:56:92:34:6f:78:c9:fa:3f:96:f3:c9:d0:65:cb:
7c:dd:c1:40:89:50:56:6c:91:1a:3a:91:71:ec:89:
d6:6d:be:f1:1d:01:e7:93:81:16:51:43:d2:d4:c0:
2f:1d:5b:bf:cc:ce:16:2c:82:5a:a3:71:ea:5e:85:
0d:d6:58:86:e7:f3:9e:3b:19:ee:39:ce:39:de:23:
46:e6:3f:a3:df:46:d2:34:c1:58:ef:77:b8:ff:0f:
ff:49:d6:91:96:a5:97:0c:64:58:55:57:b3:17:da:
d4:00:e3:0a:ff:10:df:16:79:45:06:73:91:17:60:
00:49:0e:e2:66:ad:91:d7:da:a7:e7:5b:42:25:a5:
3e:9c:23:bb:c6:65:8c:92:dd:4f:00:b9:24:68:d1:
6a:5c:f8:4b:73:05:09:30:fb:f4:50:77:e9:d3:21:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:26:E9:06:45:71:8E:EE:FA:AB:5E:DE:F0:7B:46:F8:B8:29:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/51ca9c78-4a7a-31eb-9efa-1461a3d375b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:44:9c:a5:28:12:d2:5e:f9:fc:d7:b4:b9:bf:de:f3:38:c0:
0b:8d:8c:fe:59:f4:df:f5:06:d1:64:58:18:ab:4f:c6:dc:4f:
5d:70:81:67:19:37:9f:f9:ae:29:1f:de:ef:a3:7f:70:ae:d1:
10:d5:d3:34:62:8e:3a:71:ef:9f:d8:ca:76:01:0b:38:4b:8e:
47:d9:39:1e:1f:d8:63:9a:ea:b7:67:78:cf:de:74:df:4c:3b:
a9:d7:96:04:ca:d3:52:26:81:f3:ed:54:4e:89:23:0d:7d:8d:
d2:5c:fd:9f:24:d5:e8:14:61:eb:2a:ed:01:5e:5a:c6:b1:0d:
8a:f4:f0:56:74:b3:90:da:a4:ea:76:d2:29:35:ee:c4:1f:54:
2e:d5:63:01:93:d7:ac:75:47:05:4a:fb:77:c8:d1:fa:89:a6:
fc:5f:54:8d:dc:ed:de:8e:6a:dc:87:ff:7a:5e:71:0c:fc:f7:
1d:47:31:a2:4d:34:84:c1:b0:bf:38:77:bb:9d:ca:68:46:6c:
6e:f4:7c:27:da:6d:58:65:47:c3:48:1b:a0:17:bb:6c:38:8f:
a2:02:eb:90:95:11:45:66:56:f3:da:ad:8f:13:5b:ac:58:16:
1a:ef:63:26:a7:6d:3d:f2:e2:8b:dc:69:f6:59:d4:12:55:61:
d2:1e:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:02 2025 by rpki-client