Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72b7d748-fb2f-31d5-b361-b3ba9ff2be23.roa
File: 72b7d748-fb2f-31d5-b361-b3ba9ff2be23.roa (raw, json)
Hash identifier: 8dWHQ5NvH5BhVrxHdwsxndlPpi3tVA0JhF21Nx48csU=
Subject key identifier: 7E:FC:EF:D1:95:3C:5F:C4:87:3F:E3:00:2D:94:A4:3D:17:3F:9F:B4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210690830CF05BCFD92080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72b7d748-fb2f-31d5-b361-b3ba9ff2be23.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397231
IP address blocks: 156.154.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:06:90:83:0c:f0:5b:cf:d9:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=befbd17b-6ca5-40a3-834a-8ee96433a816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:8d:18:1f:82:42:b0:9c:81:5a:57:e9:78:
3a:2c:20:46:47:4f:22:2c:e7:9b:d6:b7:be:fb:0d:
81:7a:c8:69:36:5a:9b:ad:4b:3c:00:2e:5b:b8:ff:
8b:09:f2:d2:3e:10:9e:81:73:a1:96:8d:42:f0:c9:
f7:81:7d:a3:45:f1:14:f2:8f:65:4f:7f:a3:0c:88:
a6:0e:90:0c:f5:85:ee:1e:e8:ad:12:f8:3e:95:d4:
9c:e7:ec:46:af:2c:10:11:8c:1d:35:0f:9b:cd:07:
5e:55:e6:94:71:4d:30:6b:e0:3f:ad:9d:44:ac:dd:
9f:3a:6b:a9:8d:12:93:0d:9e:8e:67:f3:32:55:ff:
c3:74:b3:7d:24:6f:cd:e7:94:31:d2:ea:1c:65:50:
d2:ab:8c:df:2c:09:f6:da:82:9f:6e:1c:9f:8e:34:
80:e1:48:5e:65:15:3e:1a:74:a5:c1:0b:68:c7:26:
3f:76:04:44:ab:80:67:64:9b:ff:25:14:f6:f1:db:
0d:7b:ce:3a:fc:05:3a:b5:23:c5:ad:2b:d7:d6:f6:
4d:c8:9b:18:34:c4:72:81:53:74:e6:4a:5b:d3:49:
9c:59:0a:99:2b:1d:39:1e:3b:8d:73:2a:e5:55:5d:
45:a9:d0:e7:a6:df:fd:51:27:44:9e:a6:2c:38:db:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FC:EF:D1:95:3C:5F:C4:87:3F:E3:00:2D:94:A4:3D:17:3F:9F:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72b7d748-fb2f-31d5-b361-b3ba9ff2be23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:3a:6d:42:6b:97:72:c1:03:8d:d7:2b:eb:a9:69:32:d1:2e:
60:7b:97:5c:5b:fc:3d:22:b6:83:87:c9:1f:a3:b2:f4:87:85:
bb:ab:ef:dc:7a:4a:67:1c:65:57:58:9c:48:b7:e8:95:43:7c:
2e:15:e7:33:dd:60:3f:53:f1:ac:80:05:f6:ad:cb:1d:74:b8:
dd:24:f4:8f:f3:03:d1:3c:08:29:30:63:74:da:c9:c0:eb:9a:
b3:ed:fd:93:87:bf:8b:89:66:c1:c1:a6:55:8b:e3:76:ef:57:
e2:fa:cb:04:2e:cd:eb:42:7c:7f:4b:95:78:c4:66:96:6b:95:
13:9b:b9:77:a6:e5:e1:1c:d7:88:c8:c2:b8:42:3b:7e:9e:35:
d9:d5:3b:09:70:3e:89:a4:12:d5:52:84:e9:74:8b:61:dd:fb:
ac:8c:2c:e8:05:e8:d9:2d:11:5c:74:19:d9:38:fd:43:2f:94:
ef:d5:8f:40:d5:d2:10:29:4f:c5:96:e1:00:80:78:7e:85:46:
fa:7a:03:ee:2c:4a:24:eb:e6:6a:89:b2:af:bd:8f:ed:ae:7e:
ba:2e:42:f9:d2:cd:ee:f2:d4:b9:8f:80:29:a9:8e:af:17:d9:
1e:47:71:36:de:6d:44:f0:49:d3:4e:82:e1:8e:d3:ac:50:95:
81:bb:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:01 2025 by rpki-client