Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e5f45cc-cb1f-34cc-97a8-36fc954e035f.roa
File: 5e5f45cc-cb1f-34cc-97a8-36fc954e035f.roa (raw, json)
Hash identifier: Lb7mRe4Q2PQ0Ng5TOUdFIe0yUGekARwagriInfwU0Qc=
Subject key identifier: F8:3F:F0:8C:D0:75:2F:F6:9E:B6:69:2D:19:FE:3A:C6:9F:AC:CA:97
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584890760C513DAA9D3D4A324A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e5f45cc-cb1f-34cc-97a8-36fc954e035f.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397239
IP address blocks: 156.154.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0c:51:3d:aa:9d:3d:4a:32:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=bec7c594-9327-4ea3-adb3-cdfd0bacb97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:3d:fb:00:89:e7:b3:c0:7e:c4:05:85:16:
d1:29:c1:19:0f:af:84:71:27:16:e6:e8:14:90:3b:
5e:78:4d:90:a6:4c:91:6f:8a:94:c8:9f:f1:c5:07:
09:2b:3e:c7:9d:a3:d7:f9:8b:7b:0c:08:f2:6d:1b:
fe:f7:d9:b2:a1:02:9c:0f:d2:fc:07:ca:16:e9:72:
1d:de:25:92:f2:fc:2e:aa:bb:4f:24:f1:90:b0:90:
0b:dd:38:ba:fe:3f:bd:d3:9b:17:0e:ad:b8:4c:fe:
85:9e:b6:df:8c:8d:fb:55:3a:f8:d2:bd:38:fb:1d:
ec:b9:96:de:07:1f:4d:72:05:4a:7e:e1:0d:58:97:
0b:a6:29:eb:bc:a0:a4:d1:be:25:c9:51:ed:9b:20:
13:29:22:39:91:e2:fa:0d:34:2d:76:fe:53:1d:1e:
2e:f8:04:a2:4b:27:16:32:c2:2b:01:1f:3f:57:b9:
9c:c1:c0:86:65:76:29:ee:a2:82:e4:41:91:22:7a:
a9:c1:6e:f4:d1:24:cf:5d:3a:0b:16:76:29:2f:ee:
53:a9:bb:68:40:60:0b:a2:d3:2b:5b:3a:08:c5:1e:
49:24:5c:48:52:17:a1:00:eb:9c:fc:ac:16:d0:f7:
d5:b8:b5:48:5b:85:11:f5:06:f4:98:83:78:a8:17:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3F:F0:8C:D0:75:2F:F6:9E:B6:69:2D:19:FE:3A:C6:9F:AC:CA:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e5f45cc-cb1f-34cc-97a8-36fc954e035f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:20:43:60:af:e9:10:2e:d2:af:81:ba:f8:92:0e:65:9e:08:
d5:02:99:d4:7e:fd:56:fc:57:d2:50:a9:16:a2:aa:51:73:dd:
fd:c1:58:2b:12:19:31:e5:d3:a3:1d:0e:8a:4e:fb:3f:5d:14:
be:b6:01:6d:f6:38:22:c5:76:d3:70:e0:92:e6:46:d3:0c:7d:
f9:20:97:af:db:29:9f:8d:6e:d0:f5:3d:ae:14:cd:fd:91:ea:
ea:6a:ec:dd:ec:4e:f4:6c:b9:6d:7a:a3:0c:33:ed:cb:9a:86:
45:14:0e:95:64:18:45:a1:ab:44:d7:3c:d7:e6:66:7d:1e:10:
50:c1:46:f4:34:9c:4e:0b:13:73:f8:b0:cc:39:9d:11:98:24:
cd:83:df:be:5b:ca:41:10:48:69:e6:8c:cc:ec:5d:62:cd:86:
ac:6f:68:7f:8d:d0:d0:78:22:55:d7:01:8f:8c:d1:6a:cd:64:
64:66:6e:16:e9:a5:08:f9:72:57:3b:50:8d:2a:74:60:96:d3:
b6:45:1d:b5:a6:90:15:28:21:b6:40:e7:d6:20:1c:33:ac:34:
fd:b0:9f:75:8c:cc:91:88:8e:94:57:88:7b:08:0e:0b:d0:ec:
91:ff:ed:7e:89:07:d8:f3:ad:55:0c:12:a1:f2:5c:8b:91:74:
ab:0f:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:31 2025 by rpki-client