Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa
File: 842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa (raw, json)
Hash identifier: Az/GYTwZdraEf9Idy3G45SRr7kLTiIbjzAcWZxzVi6o=
Subject key identifier: 14:77:1A:53:69:F0:B4:05:82:13:FF:47:2B:BE:17:2B:A8:CA:23:F8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99640180D560C7CB3784F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397227
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:40:18:0d:56:0c:7c:b3:78:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=98e1b2c3-acce-46b3-9141-609209990ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c9:29:1b:11:24:0e:37:a2:42:93:0f:c8:2e:
d5:1d:28:27:aa:12:f3:87:2a:86:6c:4c:b2:5e:c4:
63:0b:5d:6e:b7:7d:75:a7:8f:e1:b2:59:1c:44:43:
9e:11:10:a0:96:c8:af:b3:66:89:22:aa:37:ff:21:
c3:03:6b:5c:6f:65:2c:2f:95:b6:bf:f4:56:a1:46:
26:56:52:a1:de:7f:ee:0f:f0:b9:b5:e9:31:c6:50:
ca:60:af:80:87:9c:ff:4d:5e:59:3d:90:37:90:8c:
85:c5:97:2c:68:96:6f:68:5d:1f:5d:ca:38:9f:94:
a7:88:0c:8d:b8:fe:03:27:31:4e:1b:93:43:dc:94:
a9:01:53:83:4c:00:40:8c:5c:2a:56:ec:e1:d1:4f:
16:4a:db:da:c9:55:5d:e1:e8:df:f4:88:80:9f:43:
30:d1:66:c6:22:ba:f4:7e:ee:1d:e8:29:af:51:49:
37:61:ca:4c:0a:39:01:b4:f7:93:77:06:4d:e5:98:
26:24:98:e1:93:24:91:21:7c:54:00:6e:08:90:1d:
7a:a6:5b:de:5c:10:12:6a:10:fd:d9:c6:71:2d:5e:
1a:ed:3b:03:9a:b3:bd:0c:35:1e:8f:d9:1f:10:16:
bf:7e:b1:8b:bc:cf:a0:ed:0b:a6:2b:ff:39:28:24:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:1A:53:69:F0:B4:05:82:13:FF:47:2B:BE:17:2B:A8:CA:23:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:06:2d:60:03:1b:8f:56:d3:06:b4:cd:52:72:99:db:cf:73:
97:b7:ba:f5:a8:fe:a0:7b:94:b4:75:81:55:db:ad:57:3f:a3:
3a:79:93:d1:44:3d:90:eb:d9:aa:92:6e:7f:09:06:e4:32:d8:
77:c2:dc:82:96:3a:8d:85:18:00:0c:a4:84:d5:7a:b2:fb:d5:
b2:51:7d:b1:d9:50:b7:40:3b:67:e8:0d:da:d5:17:d5:5a:db:
40:0d:6f:ac:8f:be:02:c1:84:30:a9:0c:fa:c6:2a:55:71:7c:
1f:ce:3c:57:2c:ee:6a:11:14:be:bc:75:f6:3e:41:79:9f:b1:
8a:ca:45:80:00:57:fd:61:c4:bf:36:48:65:5b:6c:28:44:0d:
37:32:49:bb:81:fd:99:13:c1:d5:bb:cc:a4:a0:67:de:ab:7c:
8d:40:d4:ed:08:63:cc:cb:9a:bb:af:13:b1:15:b4:57:9f:fa:
d9:e6:fd:37:2d:5a:38:fc:35:bd:65:10:d5:d6:f5:3b:59:8f:
96:44:da:aa:4e:e8:cb:1b:fc:bc:dd:1f:fd:c4:cf:52:9b:90:
ed:a4:11:75:66:fe:d7:1f:34:59:f1:0f:fc:62:c1:86:82:2f:
10:e1:d3:c1:0e:78:23:8d:e7:8b:97:05:52:96:e9:09:b4:69:
cc:2c:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:44 2025 by rpki-client