Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70e6bc0a-209a-3e4f-bc78-fd55a6827dd2.roa
File: 70e6bc0a-209a-3e4f-bc78-fd55a6827dd2.roa (raw, json)
Hash identifier: X0Hl+R5oaQs0AL+9cUDroQtQfGGJGGTFuDt4XGD8E/8=
Subject key identifier: 0D:24:5A:9B:C8:01:7B:DA:68:6D:0B:D0:CE:3B:32:EA:C6:10:DD:09
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965A0AF6FC073C2A265200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70e6bc0a-209a-3e4f-bc78-fd55a6827dd2.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397237
IP address blocks: 156.154.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5a:0a:f6:fc:07:3c:2a:26:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=b1a9e7bd-f4d4-43c8-b480-460835ae1661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:e4:1c:2c:da:bf:ff:bd:62:dd:42:4b:5f:
ec:49:8b:d5:02:04:ca:11:ca:0b:e8:fc:8c:f3:35:
ad:60:49:94:52:97:f9:3a:38:0a:fd:8e:de:1d:d6:
8c:c6:cc:f2:57:81:d5:b2:92:59:50:a8:93:87:0c:
f9:82:46:95:bc:7e:4b:e4:9e:30:88:0a:23:70:27:
a8:52:5f:df:5a:7c:0d:82:1d:65:7b:58:41:a6:c3:
fe:2e:d6:31:93:aa:8c:92:ad:86:7a:d1:e5:50:8c:
9b:b8:7e:ed:d5:60:48:c8:36:39:5f:39:3a:cb:fb:
1d:55:38:41:9b:5a:b0:2d:b7:01:9b:c2:42:55:fa:
20:fc:8a:9d:0a:b1:1e:04:bd:65:59:88:d7:97:c5:
c1:99:d5:54:16:01:ec:98:f9:29:5c:dc:3c:88:fd:
62:3f:f8:15:7f:0a:7e:c3:64:8d:d1:a1:e7:5f:34:
05:fa:e3:4a:0d:c2:d9:47:66:8f:f4:9f:09:b1:fb:
05:be:6a:52:36:70:dc:ea:dd:02:b9:b9:42:bb:97:
21:c1:12:48:f8:3d:d5:69:db:68:12:79:74:62:c5:
db:17:c1:30:31:29:ff:63:88:cb:11:97:0a:c7:76:
2b:f9:23:9c:b1:6d:4b:b6:87:2d:ce:ac:a9:6f:cb:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:5A:9B:C8:01:7B:DA:68:6D:0B:D0:CE:3B:32:EA:C6:10:DD:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70e6bc0a-209a-3e4f-bc78-fd55a6827dd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:9a:35:8e:ec:90:c9:ad:fd:cc:c6:80:20:67:08:eb:a7:de:
91:35:47:b4:d2:aa:11:73:d1:0a:32:f9:66:5f:cd:82:c7:e2:
13:93:fa:94:12:cd:4f:1f:50:55:7d:fe:34:88:ca:f3:ab:97:
88:cd:18:aa:f0:e9:31:83:37:38:77:c7:ba:c8:22:fa:82:e6:
63:32:9e:7a:34:e2:4d:41:c4:11:9c:43:18:e9:7a:59:a5:5c:
5a:6e:58:ef:37:94:7d:b4:20:b7:db:56:75:e1:36:b2:dd:a4:
38:3c:d4:4f:d0:4d:11:62:06:f3:4e:5c:5e:aa:68:20:3e:59:
5d:32:44:6d:e3:f9:37:54:bd:92:4b:ef:20:68:89:e4:4e:2e:
b2:ae:94:d7:f5:f4:5c:56:05:9d:09:3f:e0:5c:a1:60:ad:78:
7c:67:53:bd:57:06:dc:d3:08:97:c5:a0:08:55:f9:54:f1:73:
bd:d7:60:2b:a2:ba:f9:06:f6:17:a5:8c:02:8c:ef:15:38:94:
49:63:2d:00:d3:19:8b:8c:96:ba:95:10:18:a2:ad:b3:b8:3a:
59:82:7f:9c:b2:f7:25:44:43:08:7b:24:f1:fa:a1:a3:24:f8:
e3:18:cb:64:d6:a6:77:97:14:fc:9f:8a:66:e1:3e:f2:29:f2:
5a:1c:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:34 2025 by rpki-client