Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5bd20d00-6b58-3f71-bc89-51ea52d1e7a4.roa
File: 5bd20d00-6b58-3f71-bc89-51ea52d1e7a4.roa (raw, json)
Hash identifier: 1o/qkCoOHufnvVgpeh4opVjU9jDJ045Wh6h1TqZX6O4=
Subject key identifier: 26:9A:AE:F1:83:96:B5:03:1B:80:4E:75:C0:60:28:8A:6A:2D:61:8B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848F926B3C7E5B7D4ECD5D64A30
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5bd20d00-6b58-3f71-bc89-51ea52d1e7a4.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 397216
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b3:c7:e5:b7:d4:ec:d5:d6:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=7ee9a1b0-2839-4615-9c18-32548ff351af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:d2:5d:ab:77:3c:23:c7:da:d3:f6:7a:b6:
8f:e1:11:b0:ce:b6:40:76:93:7a:24:51:c2:d7:86:
1d:86:56:81:13:ef:ed:7d:38:e0:47:a1:06:be:55:
bb:a9:ba:df:10:12:33:47:ba:f0:6d:65:cf:87:9d:
15:68:04:11:68:d1:8e:97:24:29:e9:67:26:01:d9:
99:a7:f5:b2:8e:dc:b0:46:43:df:2f:8a:b5:05:89:
3e:a3:db:d5:cb:15:d1:69:65:cf:47:4f:9b:4e:93:
7f:bc:ef:e4:0b:5f:c6:e6:77:ba:42:51:fc:ea:a2:
81:a9:d8:5f:73:65:4b:f8:ca:56:4f:1e:66:d9:ee:
ba:76:bd:7d:27:4c:ec:f8:e4:82:31:09:67:fa:37:
c0:9a:d4:0a:9a:b2:49:3f:62:3c:9f:3c:b1:9d:30:
f7:b2:ce:8a:66:a3:e2:a5:95:5a:09:aa:9b:c5:7d:
db:a6:1a:7f:f7:76:f0:77:b9:11:dd:cc:aa:a7:73:
6f:3b:3f:d8:1b:dc:fd:d3:f2:77:44:40:cc:fe:8e:
f6:eb:c9:56:02:e7:9c:ab:fe:0d:26:0e:e8:b0:08:
9d:4a:8c:47:93:8d:8b:b4:24:6a:b7:a5:c4:cd:b0:
83:08:55:fd:50:c4:7a:4f:a1:be:85:34:8b:35:ec:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9A:AE:F1:83:96:B5:03:1B:80:4E:75:C0:60:28:8A:6A:2D:61:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5bd20d00-6b58-3f71-bc89-51ea52d1e7a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:2c:2b:1d:bc:a0:a1:29:9e:5f:55:b1:ac:4a:ab:45:7e:ab:
8b:b7:5a:f4:04:fd:07:21:1f:ca:ff:e8:80:99:31:3a:25:12:
e0:fb:ba:59:05:9d:1c:be:fc:ee:ff:24:f6:9d:6c:cf:1d:79:
28:e2:89:20:34:8e:16:77:59:de:87:0b:60:1c:50:05:bc:ce:
ba:a9:d1:f6:21:56:d4:f5:a6:dc:5b:f0:5d:d6:fa:df:28:48:
a4:0f:8a:53:6a:58:02:55:08:81:1d:b7:d1:df:9c:27:e1:e5:
6b:14:e5:2a:75:31:13:8e:3e:65:d9:3c:94:f4:65:d9:62:5c:
f3:6e:9a:33:17:53:6a:92:fd:43:79:b6:23:eb:db:35:4c:5e:
59:50:a3:77:0f:82:dc:0f:60:bd:f1:87:39:74:d3:4c:e1:19:
4f:04:17:89:33:65:de:86:ee:d1:dd:f2:d0:62:ec:08:4e:c9:
e4:d3:05:c6:9f:ed:64:84:aa:88:3c:0e:6c:36:75:4f:bd:24:
e9:d9:36:3f:10:0d:09:9f:e4:49:ec:ab:a6:c2:4f:29:d1:fe:
19:ea:97:51:7b:da:5f:99:d0:6b:98:ef:27:36:39:41:62:58:
82:b8:bc:f9:f5:0b:fb:c5:c6:b1:2a:40:38:97:90:ef:61:56:
77:4a:55:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:36:44 2025 by rpki-client