Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7336a7c5-8bac-3b5b-8d10-d63e35cc772e.roa
File: 7336a7c5-8bac-3b5b-8d10-d63e35cc772e.roa (raw, json)
Hash identifier: zZ8OxnWQ2C5WuqcfblHUBrWYN8QtS19pB856esVe/JA=
Subject key identifier: EA:E7:EE:EA:1B:E1:0A:92:0B:31:F6:96:11:4C:89:88:A8:EE:CB:1E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210DF355DDFF2058E869C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7336a7c5-8bac-3b5b-8d10-d63e35cc772e.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397229
IP address blocks: 156.154.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0d:f3:55:dd:ff:20:58:e8:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=09bfa697-e1f5-4c56-af79-60cfc3bcc438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:d3:fb:b4:6b:a0:2c:54:5b:45:15:84:1e:
d7:b9:42:30:7e:05:7d:5e:9e:4a:c1:25:35:5b:5a:
30:ec:fe:08:04:24:99:c4:43:3b:fb:ef:55:55:ba:
85:95:1f:fc:d5:c1:ac:b3:b9:44:93:14:f3:46:b8:
55:43:03:59:12:73:96:eb:fa:62:a4:32:9e:33:f2:
4c:cd:bc:fd:eb:b8:22:ec:1a:33:ba:90:96:51:a3:
5a:7d:bf:34:dd:df:bb:2f:f1:08:7e:7f:f9:6d:22:
1c:7b:9d:8b:82:87:d9:12:0d:11:4f:c4:79:1f:a3:
95:a2:54:0f:27:e4:e1:23:da:22:84:36:74:2d:27:
a1:60:02:5d:d4:1d:a8:76:ba:4a:4b:bb:57:0b:83:
8f:3d:f3:07:54:a2:a9:32:a3:74:18:b1:10:a1:d4:
73:b6:b7:67:5a:ef:d3:e3:d9:41:99:1a:04:aa:40:
af:c4:ec:cb:c5:ec:6e:94:a8:1f:22:8b:71:05:ac:
fc:db:ff:5e:7d:75:26:59:d0:7b:cf:5f:e8:ee:47:
12:61:5f:e6:7c:4e:c9:63:9f:0a:43:fe:7c:19:d2:
8c:07:9f:0f:cc:dd:66:83:a7:c0:f4:9b:d1:da:c7:
43:97:08:7a:30:7c:58:3f:9d:13:68:54:2c:5f:2c:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E7:EE:EA:1B:E1:0A:92:0B:31:F6:96:11:4C:89:88:A8:EE:CB:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7336a7c5-8bac-3b5b-8d10-d63e35cc772e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:97:5e:a3:45:f6:25:0f:20:88:48:77:90:88:35:25:99:2c:
f4:14:fd:c7:8c:da:c0:7c:9f:ac:d7:d3:c2:fc:d1:fe:79:b1:
a1:fe:16:f3:f0:ee:f5:73:c6:43:be:3c:ec:59:7e:f8:d7:95:
37:1f:a6:e4:b3:12:4a:84:80:15:ff:28:7e:08:b0:99:b4:bc:
06:24:e5:fb:12:50:9c:ae:2f:01:b4:91:fc:69:3a:7d:62:60:
d3:e6:41:53:91:35:71:84:d4:3f:88:13:30:ee:36:5b:8c:80:
be:62:35:42:f6:34:ca:b2:b2:38:66:d9:b4:52:d2:b6:05:2c:
61:2e:b4:40:19:3c:17:c2:da:03:5d:da:82:30:c8:8f:88:02:
85:49:fd:55:f4:d5:07:a9:d3:8a:35:0b:8e:92:c2:f3:b3:05:
de:b2:60:e7:ca:dd:fc:44:80:4b:96:20:a3:6d:35:dd:f2:b5:
a8:1f:6e:14:2b:59:8f:d9:2e:24:c0:4f:74:f7:bc:ad:52:19:
e7:ab:af:4f:42:8f:ee:6e:11:3e:68:f2:e2:f2:da:e5:3a:e3:
44:8a:c2:78:ae:05:b7:60:7b:bd:bc:21:83:6f:34:7f:df:6e:
16:93:2b:68:71:d0:41:f5:48:02:51:c2:be:0c:a7:d5:3c:d5:
86:ae:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:49 2025 by rpki-client