Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d7860a-5279-320c-9121-e1fa49a3a45e.roa
File: 76d7860a-5279-320c-9121-e1fa49a3a45e.roa (raw, json)
Hash identifier: o6p18sPGvMSX2bhE4VStNIsCos9qTM+86mrmCYGlpDo=
Subject key identifier: 68:2F:1D:E4:37:C5:72:ED:6D:BF:20:53:7F:9D:C8:FB:E9:22:E3:AF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99655F17736A8AAB4E60000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d7860a-5279-320c-9121-e1fa49a3a45e.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397217
IP address blocks: 156.154.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:55:f1:77:36:a8:aa:b4:e6:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=63e15747-33ec-4105-ae7f-0cdff6315218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:95:45:d2:f5:db:0a:22:95:ca:a5:82:56:03:
df:e7:92:4f:41:7c:55:c9:6f:29:7a:8b:0b:92:4d:
82:99:89:9d:cd:56:66:64:10:4c:ff:09:e1:3d:1d:
01:0e:d8:33:35:c7:9c:b4:52:f0:ac:42:2c:06:fb:
9d:e3:49:cd:c9:d5:73:5c:fa:ef:5e:8c:59:12:6c:
f7:fb:66:f0:ab:ec:b7:c5:70:e9:02:7d:b2:1c:da:
59:7e:a4:c2:98:b3:29:54:cd:5d:65:bd:de:e2:d2:
ee:d2:04:84:ae:62:e9:b9:a3:60:7c:7d:ec:b9:f4:
11:68:21:71:22:18:85:a9:99:73:8b:94:2e:99:df:
c7:f9:55:91:b3:e6:ba:57:18:42:68:e6:fd:0a:06:
d6:57:fa:85:6c:42:de:6d:fe:95:66:39:1b:44:01:
9a:3d:b7:48:e9:11:c4:71:08:46:0d:25:e7:04:0d:
08:3e:99:a1:d6:04:0e:a7:a5:a9:ac:3b:05:82:62:
34:22:83:80:73:67:4e:7f:ef:7e:31:8a:a5:7c:38:
59:4c:88:6e:93:6f:24:05:4b:ad:a9:3c:a0:ab:74:
8a:6a:25:a3:05:2e:7d:c0:7b:3e:4f:88:a6:c2:d8:
58:10:af:1a:45:8c:b9:60:4e:2d:31:73:a1:8c:ff:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2F:1D:E4:37:C5:72:ED:6D:BF:20:53:7F:9D:C8:FB:E9:22:E3:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d7860a-5279-320c-9121-e1fa49a3a45e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:0a:ea:43:34:70:4c:42:54:90:96:80:04:dd:c2:7c:59:93:
98:5b:04:45:7f:45:c7:ad:23:84:db:bc:1e:4a:2c:ae:17:8c:
83:70:8e:87:12:23:b6:bd:2b:59:37:3a:5a:8a:7d:ae:0c:d5:
7a:9c:05:c2:6f:45:a3:7c:b9:bc:6d:30:fe:af:24:52:54:f7:
6f:eb:b3:df:e6:59:22:54:05:5d:fc:8c:5d:c2:91:cd:64:11:
1d:a6:13:55:ce:c6:54:70:54:d0:55:72:27:76:ff:dc:59:22:
2d:3a:31:17:34:0a:cf:8c:92:cf:45:56:de:e8:c8:5d:42:5a:
b6:bf:17:7f:49:61:a1:8f:24:51:20:4f:10:14:b3:8f:64:3c:
95:32:b7:e5:1a:41:f0:af:e3:bf:ce:fa:f4:40:fd:ea:68:7c:
6e:40:dd:f2:8b:5e:05:e6:c9:14:97:d1:e0:f5:e4:61:15:64:
f8:21:10:ce:1f:fe:65:aa:f8:0c:dd:92:0c:07:2a:da:98:2f:
7c:5e:05:b9:c3:c3:8d:61:19:2a:43:a2:5b:7c:c9:39:44:c0:
6b:f3:59:f6:46:77:9e:4b:95:c7:a0:50:61:22:c0:5f:c3:df:
24:1e:ce:e8:9a:87:76:64:d4:ab:d8:e6:07:f7:ee:d6:63:63:
9c:8a:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:39 2025 by rpki-client