Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7834fd71-e591-33e9-a028-f67ba699f5fa.roa
File: 7834fd71-e591-33e9-a028-f67ba699f5fa.roa (raw, json)
Hash identifier: 7Vh9NXi3YWnWE7blfxMNfu1cR6sJOxu86odqyAGMkvc=
Subject key identifier: 5F:C4:B9:D7:40:3C:F8:47:EC:81:95:7B:AC:4A:9F:F3:48:AB:7E:54
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965DF0F82F85E116709D40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7834fd71-e591-33e9-a028-f67ba699f5fa.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397219
IP address blocks: 156.154.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5d:f0:f8:2f:85:e1:16:70:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=b665207f-d733-45ca-a04f-a02ab1724055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:67:fb:21:1a:e9:aa:cb:60:d4:a4:b9:5a:
da:dd:c3:93:49:36:36:fa:ee:dc:ea:9d:0b:57:79:
46:02:8f:7d:47:56:cb:7b:9a:41:de:a5:d8:89:48:
55:f8:7a:d1:07:9a:c8:6b:1c:85:f0:8e:7f:4b:5d:
dd:db:5e:78:7e:25:cb:3a:ed:55:7f:e5:12:ae:b2:
1e:1b:c9:9e:b4:d0:a3:54:62:c0:83:d1:d7:52:ea:
1b:2c:8a:ef:a1:8b:b4:eb:32:01:ee:9b:93:c1:4c:
f2:ab:e2:f7:2c:98:6b:6f:c2:b8:fc:5c:c9:9e:d5:
15:08:0b:ab:e1:c6:8f:a7:57:ce:d4:8e:b8:89:c5:
e1:98:8e:bb:1b:54:11:99:c0:34:2f:16:42:6f:0e:
26:91:09:f7:d9:24:7b:e0:87:ac:2a:1b:e5:e0:05:
33:d6:a6:13:7c:a4:ac:20:6d:5e:0c:82:e5:34:69:
7d:70:62:0f:42:56:c1:b6:5b:5f:c3:fd:2a:a9:fc:
bc:9c:76:8a:c2:b5:c8:a5:5b:68:3f:9a:eb:94:39:
95:02:66:8d:cc:6d:a9:8f:46:1a:1f:6b:21:1f:32:
3e:97:f3:d1:ae:38:8b:e5:98:a4:cf:76:59:2e:13:
68:8d:8e:19:35:ba:c9:ed:b3:e8:31:ab:bc:37:8f:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C4:B9:D7:40:3C:F8:47:EC:81:95:7B:AC:4A:9F:F3:48:AB:7E:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7834fd71-e591-33e9-a028-f67ba699f5fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:33:a2:60:9a:85:b1:17:ae:bd:b6:89:37:f1:6b:fb:79:6b:
2b:d3:10:88:b5:f1:da:30:e7:e7:1d:e8:f0:4c:65:3f:1d:64:
84:46:a1:5b:a4:a7:d7:a5:9a:b2:87:7c:38:6d:1d:bb:94:55:
6d:84:fa:90:62:8c:c3:bf:56:a8:29:dc:0f:5e:1f:b1:b0:ca:
b5:1d:d3:da:b6:53:05:b9:12:0f:16:f7:00:3f:7b:a4:f7:df:
91:f8:c4:85:63:91:75:0a:6f:1c:e6:54:a5:2f:42:37:06:c7:
ea:98:5e:85:cd:b3:6a:b1:d8:68:95:e1:f1:32:41:88:39:9a:
39:c0:71:13:3e:65:2c:82:dd:14:3c:62:2a:53:85:96:a5:31:
59:60:a3:51:1f:59:4c:10:22:09:71:99:35:89:bd:b6:8b:bb:
57:8d:81:77:06:19:a4:51:e5:a2:15:e7:84:92:a7:dd:bf:fc:
3d:57:46:71:2c:44:98:87:c5:83:65:46:f1:4c:8b:03:84:33:
3e:b0:9a:53:82:c2:2d:4b:c3:c5:86:40:bd:79:df:ec:fa:f2:
d6:1f:79:c9:9b:22:4e:b6:e8:08:fc:5c:e1:58:16:a5:ff:8b:
58:19:aa:e0:f3:a3:b4:14:47:dd:46:ee:61:79:d5:7e:9f:90:
1a:41:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:16:24 2025 by rpki-client