Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f211ac1-0d7e-3d75-810e-fee9e8ffcac9.roa
File: 6f211ac1-0d7e-3d75-810e-fee9e8ffcac9.roa (raw, json)
Hash identifier: e5LxRxTFtkUqFv82Zz3YuJT9wp/dX58KLzC0Hu0ZZZg=
Subject key identifier: 90:74:8C:98:69:7F:E5:40:A8:9C:90:CA:58:C7:52:CB:26:9B:BD:71
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9963A6BC76563ACC8527000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f211ac1-0d7e-3d75-810e-fee9e8ffcac9.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397227
IP address blocks: 156.154.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:3a:6b:c7:65:63:ac:c8:52:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=84fdbb73-7d1c-4530-b90a-d6685fbeae2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b9:5a:64:10:3c:dc:22:ae:a6:f6:d2:a3:e4:
1b:2b:ff:4d:f9:2a:6b:e9:2e:21:c8:ba:4f:20:f6:
a0:73:63:23:12:59:1c:77:9a:19:b8:b9:35:0e:81:
c5:ce:26:6e:09:34:a6:f6:36:7a:9d:12:e8:d0:f4:
46:0b:98:31:f5:26:3f:5a:2b:65:59:dd:78:0b:36:
39:c7:00:8d:de:f0:1a:d1:b3:21:36:b7:c5:c5:fd:
c8:ad:fe:08:b9:b9:af:48:b8:a1:2e:9c:39:ad:96:
69:47:25:68:97:58:56:ca:83:80:25:32:83:3c:e1:
92:d9:3b:84:aa:0d:5f:b0:73:18:9d:b7:58:d8:b2:
5b:35:dc:0e:b9:9c:b4:af:7d:37:3c:1a:3e:28:fc:
73:c7:dd:27:5e:04:05:a4:91:7c:37:ee:ae:1d:00:
05:62:53:09:9b:e9:38:57:1d:db:53:c5:0d:f6:39:
3d:4c:c9:11:f4:8c:29:52:2b:e3:f0:f5:16:e7:65:
ef:26:69:cb:94:41:17:e1:e4:56:d3:cf:49:41:80:
f9:09:6b:6a:e3:4b:c7:64:d7:30:6e:39:09:f5:f9:
28:10:a0:d1:7b:2a:08:a4:0c:ca:05:f2:1c:e1:94:
6c:7d:03:5d:66:39:36:ad:26:de:72:b9:d0:d6:1a:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:74:8C:98:69:7F:E5:40:A8:9C:90:CA:58:C7:52:CB:26:9B:BD:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f211ac1-0d7e-3d75-810e-fee9e8ffcac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:22:96:09:c4:19:d1:8a:13:79:ce:2c:f6:38:2b:8f:af:40:
42:e2:fe:50:16:03:26:82:90:95:5b:f3:e5:d5:94:65:07:42:
ba:00:e9:52:3b:fa:02:26:bb:84:a4:0b:2b:1c:95:f8:3e:5d:
9c:08:d5:c3:09:1e:97:a0:d4:ce:d1:ea:5d:d7:d3:77:32:6f:
61:ef:be:64:df:e8:f1:25:a7:2a:44:b9:d2:2f:e7:d9:2c:c9:
9f:51:a7:6c:f1:33:5b:6c:87:45:3d:ff:77:14:2b:32:9d:be:
d0:58:77:56:94:24:f8:94:3b:49:c9:1b:0d:a9:d2:cf:89:66:
05:20:49:ef:b0:dd:7e:4b:cd:80:6a:56:e6:52:99:ce:1b:13:
68:9e:87:b8:6a:8b:87:7d:bd:12:9a:65:cf:8c:6a:cf:86:07:
08:41:ff:09:1d:f6:72:16:fe:fe:e9:c5:fc:f8:39:fd:f0:55:
f7:5a:0e:cd:b5:97:3a:b7:90:9c:a9:4b:51:d8:e0:13:18:18:
3e:65:30:d5:a2:7d:46:af:4a:7a:46:d0:5e:11:67:b1:ff:0f:
b0:f9:f9:d9:9c:c7:e7:41:76:59:c3:b3:f7:e1:18:d0:37:eb:
dd:53:c3:5b:8f:00:80:7f:d5:43:2f:2c:9e:54:65:57:58:99:
b3:52:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:55:30 2025 by rpki-client