Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8948f50f-b197-3841-a15b-d941a95c7233.roa
File: 8948f50f-b197-3841-a15b-d941a95c7233.roa (raw, json)
Hash identifier: YQbQrLMQYIzakJwlQWJCUUdjlFd6t3wkJmd9FlQvH+Y=
Subject key identifier: E8:FF:78:0D:C6:6F:B4:E4:A9:8F:40:3E:43:B3:BD:DE:F8:2F:E2:4A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210AECB0F663C7A618FBC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8948f50f-b197-3841-a15b-d941a95c7233.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397242
IP address blocks: 156.154.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0a:ec:b0:f6:63:c7:a6:18:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=f293bcfd-42c1-49c0-b035-c2382fbb3fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:f5:0a:43:b0:9a:07:de:22:49:96:c5:05:
d4:92:4c:37:c9:e7:3c:33:dc:06:e0:27:4a:e7:71:
e6:f7:d9:fc:14:de:25:ba:29:62:0e:30:a8:4f:fe:
ce:1b:06:aa:14:40:1a:fd:a0:db:1a:04:22:22:09:
a6:40:9d:65:0f:84:6d:38:e6:2e:bf:7a:b6:63:b8:
f8:13:15:0c:94:d6:d7:1f:f2:e8:8e:20:60:8f:38:
cf:9b:6e:01:a6:0f:c6:45:c2:fb:66:d9:2c:8f:c1:
3b:89:8a:75:ac:6e:30:e0:99:92:65:ad:2e:1a:61:
10:d7:e8:40:da:00:43:a5:66:ec:a6:0b:6d:85:c5:
55:dd:8d:a7:b5:96:a7:24:93:bd:6e:27:86:85:74:
bf:2c:3f:15:5c:29:24:d3:20:92:f9:48:db:6b:04:
3c:61:e3:a5:92:d1:bf:78:ac:67:bb:40:f0:5c:da:
f8:ce:7d:1c:e1:de:71:05:61:52:b1:0f:19:e6:6a:
6d:b6:ad:a6:6a:3e:bd:9e:3b:8e:fd:3b:ea:93:c2:
43:55:bc:fc:71:eb:2b:f6:c7:50:74:c3:a8:d2:fc:
d1:c9:83:77:65:02:5c:f8:43:7a:50:69:5c:f6:37:
e5:99:d7:c2:38:06:b5:b7:f9:90:5b:a9:af:ef:c6:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:78:0D:C6:6F:B4:E4:A9:8F:40:3E:43:B3:BD:DE:F8:2F:E2:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8948f50f-b197-3841-a15b-d941a95c7233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:3a:5b:e5:7e:8d:30:8a:c2:8c:28:ca:ce:5c:12:3c:88:a6:
c0:38:4c:b3:b3:79:2c:b3:b2:f4:cb:39:d9:79:87:2f:ed:4c:
0c:bd:5c:2d:a8:f3:5b:3c:02:bc:22:a2:e8:78:e5:b7:94:a9:
b5:93:14:9b:58:9c:cd:fd:6d:62:f9:89:c2:2b:01:33:0b:36:
94:16:af:f6:58:42:71:5b:d1:b1:6c:75:8a:a8:cf:ca:77:fb:
bc:f1:22:22:31:86:31:1d:50:66:29:46:72:ea:c1:51:15:f7:
c9:c5:a3:97:1d:6f:cd:2d:ba:13:27:88:0c:cb:c6:a5:90:4e:
c5:8b:ee:0b:c6:11:90:5e:d7:cb:f4:ea:e5:f5:dc:e3:fb:e7:
70:8f:e2:0b:cb:6d:86:be:f7:bc:b6:bd:b2:46:64:42:d3:fb:
d4:a7:40:f4:6b:be:c5:d9:63:2f:e9:91:ae:17:85:42:98:61:
4f:b2:6e:a8:9d:43:c5:a2:10:e9:40:7d:13:e8:15:75:4b:df:
1f:ac:b2:5d:fc:d2:4d:48:34:90:fb:26:b7:a8:b9:2e:3b:14:
18:2f:06:5f:cf:f3:83:11:8a:19:79:cc:86:ab:5f:20:f6:88:
1e:09:04:75:57:86:63:03:44:71:16:b1:61:2c:56:c1:2b:2f:
a6:57:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:00 2025 by rpki-client