Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6397edb0-60aa-35d1-962c-9d6d2ce75fd0.roa
File: 6397edb0-60aa-35d1-962c-9d6d2ce75fd0.roa (raw, json)
Hash identifier: Aa0dLo+PkiZRd0Gl3FIP6XA11BZv8qOJWisjRDzx5VE=
Subject key identifier: E3:BF:92:B8:56:93:89:26:FF:CD:51:FB:A1:3F:7F:CA:F9:B3:93:F6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB68EA8D503A76695AB100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6397edb0-60aa-35d1-962c-9d6d2ce75fd0.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397218
IP address blocks: 156.154.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:68:ea:8d:50:3a:76:69:5a:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=40e5e051-47bd-4f3c-ba38-6db6c7b1ced2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:d1:a1:99:17:64:b1:21:5c:1a:1e:9c:26:
b3:62:64:55:8d:fa:d8:2c:d8:15:07:2a:05:ac:db:
06:28:80:7f:d4:28:a0:f4:7b:ba:72:de:02:d1:7e:
b3:65:8c:32:53:00:dd:27:38:6c:fa:1d:04:17:c0:
69:64:68:1c:b0:51:31:74:07:d8:2f:f8:8a:cd:26:
04:bd:7c:4b:d9:11:d4:c7:dd:29:b1:ad:56:32:6a:
30:a7:5f:32:6d:18:d5:4b:a6:11:0d:91:ba:18:7e:
f2:a2:aa:6b:51:42:40:ca:c5:11:9a:c2:ca:d8:41:
30:e9:69:c8:55:16:a1:73:b5:92:f5:07:c4:04:cd:
5f:5c:3f:ed:e0:50:ea:a2:05:68:cc:e1:57:9a:cd:
9b:5f:8d:c1:c0:61:39:1e:92:27:0f:88:ce:12:13:
bb:e3:df:de:76:ed:9f:7c:c1:09:ab:30:bd:f4:d1:
e0:f9:2a:56:77:9c:04:a6:6a:6c:1a:8b:ab:78:cb:
06:b5:10:7f:bf:d8:79:f5:e9:91:e8:91:d5:63:8f:
16:e9:2c:9a:17:aa:8b:be:69:7f:9e:aa:bf:8c:91:
6d:45:45:e2:53:c9:a5:fe:09:2f:d9:e7:50:8e:fd:
0c:5a:9f:57:02:2a:ed:9e:11:9b:af:8d:f4:2a:25:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BF:92:B8:56:93:89:26:FF:CD:51:FB:A1:3F:7F:CA:F9:B3:93:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6397edb0-60aa-35d1-962c-9d6d2ce75fd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:34:b1:5a:57:a4:f8:37:f4:a3:b5:7f:de:ae:80:94:fb:82:
2c:2b:19:97:c8:94:46:35:66:49:93:28:e3:ab:1c:77:59:bf:
c7:04:ca:2a:ea:b4:53:3f:8f:4f:d5:60:b4:a5:be:3b:7f:31:
91:85:9e:3b:f8:2b:5a:5d:97:2a:00:f3:50:e3:59:0e:bc:e9:
ca:c0:c7:b3:52:4f:d2:cb:f4:d6:17:34:84:80:ad:23:85:70:
fb:0e:c7:fd:90:05:00:ed:b1:10:94:41:74:3b:23:d8:1e:5f:
8c:a1:2b:d5:2d:96:83:80:3d:be:e9:ed:cd:92:d3:52:59:04:
69:21:23:f4:bd:13:a0:32:e3:dc:59:6a:da:df:d5:23:51:3a:
d1:1a:a1:0a:a4:6a:86:f9:26:ea:ef:14:0e:5f:d9:a6:d7:d0:
36:6f:fb:76:55:82:41:cf:e0:31:ed:9e:95:60:ab:d5:c0:7f:
c7:f2:38:a5:99:29:2d:72:4b:49:bc:7a:1e:5a:ac:c9:3a:da:
81:a2:d9:ab:a1:7f:ea:66:1a:8d:25:d8:c2:a5:2d:d0:f9:a5:
f8:7e:e0:3e:e7:6c:2d:c9:33:fe:ea:eb:a2:be:ba:d1:51:f4:
5c:8d:a8:5f:2b:50:7b:d5:4a:d2:47:f1:12:cf:68:d2:9e:b5:
12:11:24:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:42 2025 by rpki-client