Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63e3221a-e190-36ec-b26e-acbb0798b0b3.roa
File: 63e3221a-e190-36ec-b26e-acbb0798b0b3.roa (raw, json)
Hash identifier: +63nqEFyK3hmgKcseIS9XM7jymLt1bGgxYY54vZSDeE=
Subject key identifier: AC:4A:ED:F3:5B:86:9F:E8:2B:2D:5B:D7:6C:C2:DD:66:A4:D4:C3:7C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965E894CD2E0EB77E5D440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63e3221a-e190-36ec-b26e-acbb0798b0b3.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397232
IP address blocks: 156.154.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5e:89:4c:d2:e0:eb:77:e5:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=19e7564c-a3d4-4ee7-8078-24db106c7b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:c9:07:ca:74:ee:5e:09:21:aa:5e:af:05:
3f:24:70:38:fd:c6:12:2f:2a:1e:43:27:9b:ae:6a:
fe:b5:02:5b:f0:0f:0f:dc:84:9b:0c:fc:31:7b:db:
f9:58:1f:d3:d0:15:9f:ce:bc:75:e5:dd:16:3f:b2:
a3:14:04:31:74:f0:18:15:60:2a:fe:01:f3:89:41:
c3:83:00:74:1a:f3:b0:2e:4f:6c:5f:4d:d3:fa:a4:
7c:8f:34:b3:db:b8:5b:3b:d7:34:01:2b:e8:15:a2:
92:78:ad:b7:8b:1d:6a:a1:ba:87:47:f9:84:f3:2c:
b3:16:c9:17:1f:8e:ff:bf:1c:3d:62:9e:19:61:95:
d9:ee:8f:fe:45:91:7a:b3:9c:9d:94:18:be:35:ee:
81:bb:22:fe:dc:44:6f:94:09:dd:17:84:da:cc:14:
69:8a:cd:75:90:1a:41:cb:9b:7e:56:b6:28:24:a6:
51:67:b3:a5:97:74:53:93:d0:b8:7b:ae:fa:a6:8e:
7d:0b:86:2b:67:6a:ab:a8:95:96:cb:1c:ba:8d:8a:
19:27:2f:e7:9e:2f:85:86:be:2b:a9:43:93:1c:c7:
9d:06:9a:57:f0:29:a2:f1:ca:34:61:0e:d6:5a:d9:
07:9d:4e:4e:2b:0c:dc:5b:74:0f:cc:a9:ec:15:37:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:ED:F3:5B:86:9F:E8:2B:2D:5B:D7:6C:C2:DD:66:A4:D4:C3:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63e3221a-e190-36ec-b26e-acbb0798b0b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c8:64:61:92:c5:d7:ad:57:7e:2f:cf:a0:14:05:be:5b:71:
0a:8a:85:22:34:55:a2:37:27:ed:d6:d9:ea:09:15:0b:e9:e1:
b2:3e:a7:3d:a0:e0:2a:31:e1:e0:a5:c4:71:b8:51:a9:4a:fd:
74:65:2a:83:26:8d:1e:f2:57:6c:b7:4f:21:0b:43:d8:a0:60:
31:07:10:9c:ec:ee:c6:03:76:8c:71:a4:90:f7:2b:d4:a7:dc:
a6:30:df:62:7d:64:a9:22:21:dc:54:c7:79:cb:9e:a9:e9:c4:
d6:eb:ea:07:93:ae:33:c4:22:51:95:4a:d2:c8:b7:42:8d:e2:
08:c4:e5:b7:96:97:de:7a:e1:13:53:3a:8d:13:fc:a2:0e:03:
da:90:fd:2d:a3:24:b6:db:b9:e3:e2:fc:dc:17:39:82:a9:70:
b3:c0:40:ea:a0:f3:c6:7e:c2:f7:80:21:5b:2b:e2:55:98:e9:
c4:b4:ac:cc:44:55:b4:64:88:3f:66:97:8b:6b:d3:72:54:08:
3c:78:2c:65:d5:8c:c9:74:fa:ee:ce:67:2c:bb:00:57:c0:04:
68:9b:ef:13:3f:bd:d8:9d:67:ec:3b:20:fc:fb:a7:ab:8e:e9:
28:06:58:30:d1:7e:0e:e2:4c:49:f9:b3:58:d4:48:3b:d5:c3:
e3:c1:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:11 2025 by rpki-client