Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6a3d1bd2-c74e-3986-a9c4-f947f6c52ea9.roa
File: 6a3d1bd2-c74e-3986-a9c4-f947f6c52ea9.roa (raw, json)
Hash identifier: NRGPwHSdeSmoMPifMHSK8j+pcjgwoyS6X5igsZF94Ug=
Subject key identifier: B1:64:20:64:D2:97:50:3A:6A:A9:79:EA:2C:CF:B4:9B:6A:91:C7:AA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD21129AE11E1517F86F8A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6a3d1bd2-c74e-3986-a9c4-f947f6c52ea9.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 12008
IP address blocks: 156.154.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:12:9a:e1:1e:15:17:f8:6f:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=d053692f-aa65-420b-bbc5-6ea5e9d19e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:cf:64:cc:4a:7b:a2:f7:41:65:c4:4d:b4:
7e:d0:76:32:f1:b3:7c:48:7a:a2:8d:dc:13:ef:0b:
5c:0c:e6:8d:05:4f:c0:04:18:15:fc:da:1d:5c:a9:
b3:d3:4f:55:2e:dc:d6:8c:39:ec:bd:86:28:72:7c:
5e:8c:e4:bf:4a:fd:b5:a6:a6:75:c2:97:32:16:b9:
43:6b:f5:dd:c1:c2:c6:58:7a:a1:c3:a3:49:37:aa:
04:f4:e1:f7:c7:fd:26:14:39:83:01:f5:c3:fd:35:
36:e2:31:b7:93:04:9e:84:a5:04:36:26:3a:69:4d:
10:5a:34:82:36:03:f5:fb:c7:d9:f7:19:f7:ac:d4:
60:a7:9b:e0:22:ea:40:a3:c6:b8:0e:ef:e5:41:55:
dd:40:e9:45:28:4a:42:86:2f:04:a1:c5:f6:97:32:
15:cb:69:62:7a:4b:e5:e8:dc:ec:87:69:88:25:53:
8d:50:c4:4d:a3:5f:3a:eb:bf:25:e7:9b:aa:2e:e9:
ed:8f:2a:11:31:17:6d:8b:3f:d1:c2:76:58:5b:08:
57:ce:af:b7:ce:8d:ab:b3:ae:d2:a9:04:da:6b:e6:
16:ea:d5:fb:67:d0:a5:95:fe:c5:1b:a7:dc:78:69:
3d:ec:9c:d6:09:76:90:87:82:d6:e7:07:04:5f:68:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:64:20:64:D2:97:50:3A:6A:A9:79:EA:2C:CF:B4:9B:6A:91:C7:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6a3d1bd2-c74e-3986-a9c4-f947f6c52ea9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ad:83:66:28:b4:83:5f:c6:2a:0b:b4:fd:7e:2e:5c:ee:d8:
0f:90:c9:f8:bf:ee:cf:3b:32:4f:da:57:09:08:8d:f0:71:5e:
49:a1:27:59:e5:e9:79:42:6a:23:16:1d:f0:0d:df:7e:f8:cd:
7b:50:04:9e:eb:70:33:10:5d:7b:5b:2c:30:7d:46:8d:e6:4b:
b7:9e:ef:a8:ad:6f:11:42:af:24:cc:10:89:05:04:7c:d3:43:
83:6a:2b:cb:2f:77:71:59:f0:0b:4f:b1:a9:da:c9:2a:4c:15:
4e:df:a0:bd:29:34:f6:f3:5f:ca:fd:09:62:4b:7d:15:52:e5:
76:72:09:15:57:5c:14:d0:53:90:f4:fd:91:46:53:50:62:89:
b6:b6:d6:f8:05:40:e8:13:8d:cb:99:cc:9a:09:05:bf:b9:50:
64:53:2a:30:a0:cb:8b:8e:de:4a:2a:ac:cf:83:f6:09:20:a0:
f6:6b:8a:79:78:8d:e8:35:a4:29:c8:7d:33:31:0f:37:62:6b:
69:72:e5:a5:42:7d:f3:67:83:74:0a:44:8b:d3:d9:c6:73:e2:
96:8f:7f:31:8d:48:02:dc:5b:fd:cb:b0:68:c6:0f:dd:94:24:
1b:42:54:a1:4a:5a:6a:f3:ba:96:ea:79:7f:5d:e9:c3:c0:22:
81:bf:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:56:15 2025 by rpki-client