Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8500a181-d916-3b12-b988-8e0861bf1cad.roa
File: 8500a181-d916-3b12-b988-8e0861bf1cad.roa (raw, json)
Hash identifier: 6mZdIVrE23KMooJbkpMAUJN+BTLENl+XuSH6+bGdbdc=
Subject key identifier: 17:FD:05:EE:97:5F:E1:96:06:EF:7A:1E:22:44:25:92:5F:9B:D8:A4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20ED76F7805140AE65B4C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8500a181-d916-3b12-b988-8e0861bf1cad.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397215
IP address blocks: 156.154.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ed:76:f7:80:51:40:ae:65:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=09520392-7f2c-4835-9446-38b7a8e382b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:29:f2:14:9f:64:c7:02:b1:4d:5d:cb:51:c0:
d4:13:f0:7a:59:fb:be:a2:b2:39:d0:dc:99:ee:f3:
2c:91:44:04:ce:2a:d1:2f:10:f0:d2:b9:31:e6:d7:
eb:cb:c8:be:dd:8b:e5:98:af:c4:ff:3a:9c:51:2e:
91:ce:72:d0:c5:f7:db:a5:3e:72:6e:f9:69:49:eb:
a2:ad:eb:2a:6e:4b:90:56:46:13:a5:e2:37:bc:39:
82:5e:cd:c3:0c:6e:84:9e:3a:d4:1e:8e:28:c0:d9:
6a:8b:65:5b:d1:0c:4a:7e:56:59:c7:90:44:96:4c:
41:7a:19:17:8d:dd:4e:2d:63:de:b1:02:4e:72:bc:
41:5d:02:be:c6:5e:63:72:fc:c8:be:cd:b8:71:04:
35:18:d7:e6:45:ae:92:c9:c9:49:d6:b1:72:33:9c:
04:62:3d:87:4e:ca:cb:71:e1:37:ea:f9:b8:e7:81:
35:9c:41:fd:62:17:e4:a3:ef:bf:36:f8:80:79:9c:
3b:bd:16:d2:7c:9a:5e:b3:dd:a2:95:fa:11:3b:47:
70:78:a8:cb:be:c2:9c:dc:21:9a:9e:c7:91:97:d6:
34:86:b5:04:08:5a:50:62:75:3d:08:ea:95:bc:32:
a4:3e:93:f5:17:7a:15:75:0e:be:94:48:7e:91:8b:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:05:EE:97:5F:E1:96:06:EF:7A:1E:22:44:25:92:5F:9B:D8:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8500a181-d916-3b12-b988-8e0861bf1cad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:02:60:dd:a9:b8:25:a2:5a:8f:f2:e2:e6:55:59:5a:92:be:
d5:ad:8b:98:f9:c6:66:08:46:c7:62:f2:c6:a0:a7:7f:b6:74:
c3:16:e2:09:45:df:ef:ac:f8:3c:aa:78:a8:f7:70:89:06:54:
28:c9:a5:f6:5b:ca:29:c2:70:e1:b7:64:0d:d9:1b:4c:57:4d:
69:52:92:a8:a8:e7:78:62:d2:3d:30:16:d7:9f:dc:4e:a1:bc:
84:10:54:64:5d:93:54:f3:e7:f3:fd:c8:c2:18:64:42:39:ea:
d8:ed:b5:37:73:6a:b0:21:7b:99:36:26:ab:c4:22:cf:bc:a7:
28:30:49:b4:00:ce:59:96:55:d7:01:a3:74:10:a9:50:75:4e:
f5:d2:b0:01:a1:6b:27:1d:d4:87:f1:03:71:d1:11:a0:b4:07:
b5:53:f5:c0:62:70:bf:14:a8:7c:c9:53:7c:63:05:5d:b8:e4:
7d:f9:40:bf:f9:3e:a9:b3:16:8d:69:70:89:28:0a:ba:98:b2:
72:96:ca:e3:60:27:8f:51:1c:2a:a0:4e:e2:93:30:b9:c1:18:
08:72:b9:78:bc:6f:ac:df:a2:e8:38:86:39:ba:cb:4c:54:16:
ed:7a:ae:9e:ba:72:a4:e3:a6:13:6f:c2:b0:7a:32:e1:75:7a:
c1:84:db:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:06:14 2025 by rpki-client