Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57b3de93-2bcb-3299-a762-d8358ce9326b.roa
File: 57b3de93-2bcb-3299-a762-d8358ce9326b.roa (raw, json)
Hash identifier: lLybbfYv1TrkfvHk44JKVGDM7GSZ2dU0gHQ0BJMyK4c=
Subject key identifier: 1E:21:85:47:DE:BA:12:25:41:8B:7D:89:5C:C6:88:43:8E:7E:69:03
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965933BB44C46DFFC735D0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57b3de93-2bcb-3299-a762-d8358ce9326b.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397221
IP address blocks: 156.154.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:59:33:bb:44:c4:6d:ff:c7:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=649dd015-27c1-4ad7-b3e9-2f43bf3cf796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:5c:cb:11:85:7b:6b:ee:6a:bb:66:a4:0f:
75:07:8d:3f:3c:f2:ab:65:39:fc:6c:af:e3:0d:b7:
e9:9a:b5:48:7b:b4:d3:45:ec:b5:a9:61:e4:62:aa:
5b:13:a6:f0:8e:f7:09:f5:a2:5a:6e:24:23:e9:b9:
2f:de:6c:1d:aa:57:ff:96:7c:71:2b:53:a9:25:6b:
2b:f7:2c:f8:84:39:46:77:02:17:fc:00:44:86:a5:
11:b4:99:53:44:77:b1:d4:cc:d6:1b:10:e7:7d:d8:
30:35:f3:1d:f0:01:df:86:37:25:90:5c:17:18:ee:
1e:21:db:28:b3:a0:b6:bf:c8:2b:66:a9:c2:12:ca:
3e:6b:98:fb:f9:0a:07:20:90:d9:34:ea:2f:08:14:
40:09:f7:94:90:c7:dc:c9:5f:12:c1:63:13:71:b1:
5e:1e:bd:ac:5f:35:26:49:f9:09:b7:5c:46:c1:28:
2d:c3:ab:c6:d0:00:cf:86:97:81:05:66:49:48:59:
2a:1e:0f:8d:a6:09:6b:21:85:2f:0d:9d:29:d5:c3:
bb:42:0f:ae:ff:cf:2c:49:2e:d0:61:4a:f1:20:8a:
5b:b8:15:ff:53:dc:e5:55:71:58:7d:80:70:d6:73:
7d:94:b2:8b:c7:02:88:e4:94:ff:d7:5c:66:2a:02:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:21:85:47:DE:BA:12:25:41:8B:7D:89:5C:C6:88:43:8E:7E:69:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57b3de93-2bcb-3299-a762-d8358ce9326b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:37:3e:e5:05:70:72:bf:a5:80:84:4c:59:9f:18:be:97:bb:
e8:65:94:21:af:02:b2:79:14:36:10:8d:35:28:3d:7d:d4:6d:
fd:bb:88:a1:30:74:6e:38:c2:66:a7:04:cf:3d:fc:ba:0f:8d:
de:f0:85:41:20:6b:92:05:99:b2:2a:38:c8:92:bb:ec:5f:5e:
92:a6:5c:fd:14:db:84:1f:2b:2a:6d:d3:22:a0:10:ef:98:01:
db:a1:08:55:04:73:6b:ff:5f:1e:57:3c:ad:c1:cf:aa:09:f8:
15:cc:17:57:c2:ec:b2:91:a8:04:fd:3f:69:d6:c9:7b:3e:c0:
52:e8:a1:1d:b8:2e:df:b9:92:3d:4d:a3:5f:56:69:b2:f0:b2:
0b:b4:63:d6:ae:2e:bf:c9:e2:2d:ee:3d:91:14:5d:00:60:f8:
52:63:52:b2:37:77:54:f6:53:50:f2:36:6e:88:36:f2:2b:42:
f1:0d:c7:8c:74:a2:87:29:2c:f0:aa:2b:c1:65:c8:18:33:3f:
f8:49:bb:0b:3e:bb:0c:ba:47:21:2c:8d:64:92:cd:f8:ce:e5:
f0:06:db:0b:d9:53:75:2f:7b:ce:1d:ea:02:dd:b5:fd:61:74:
28:78:d7:2b:ff:a9:c4:31:74:91:e6:79:04:1e:f2:ed:6b:89:
dc:1f:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:39:06 2025 by rpki-client