Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/94fb13a1-bd45-3d7f-ae87-b4f2b6cd87e0.roa
File: 94fb13a1-bd45-3d7f-ae87-b4f2b6cd87e0.roa (raw, json)
Hash identifier: b0Sx+pejAttpq5rr+UQaPZS/PIYsyPi4o6IfZZZhxo0=
Subject key identifier: 06:BA:05:6C:F6:64:1D:86:37:3A:3F:F2:A8:0D:02:DE:A2:3D:1C:64
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99652786F10FD6241196B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/94fb13a1-bd45-3d7f-ae87-b4f2b6cd87e0.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 12008
IP address blocks: 156.154.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:52:78:6f:10:fd:62:41:19:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=1a1c4dec-cf1b-47b0-a1ef-d06285e1d893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:35:4f:a1:66:7d:9e:11:43:8f:1b:fe:e5:
72:f3:44:6a:e6:07:46:a2:b6:26:10:bb:97:c1:77:
ee:e0:c2:e8:69:79:b1:25:21:6a:6e:62:41:6e:3d:
56:cb:67:46:2e:9e:79:a5:9c:75:39:73:cd:f8:95:
f1:dd:95:6c:76:46:1a:ab:ad:91:6e:43:4b:18:88:
82:c6:ae:ed:36:2d:1d:0a:fd:89:3c:9b:fa:2d:5d:
59:8e:11:67:98:b7:2e:fd:5b:b1:fe:fa:4c:6a:35:
1b:79:05:9c:36:95:18:67:52:b0:47:f5:7e:bf:2e:
7f:d1:82:1f:65:c3:be:19:11:0d:40:66:01:7c:d7:
f9:cb:82:06:37:d8:71:81:2a:d6:7b:c3:ed:97:6d:
7b:5d:8b:91:76:9e:8a:ad:5d:be:35:d4:2a:e8:ba:
a1:ea:fe:78:2b:b1:56:ad:43:ba:00:62:62:a8:81:
cf:23:e1:67:d5:2b:95:97:44:b0:74:e5:94:7c:be:
d2:5d:7e:27:8c:47:fe:57:66:39:46:d8:eb:b2:b4:
40:0e:fb:ea:64:3a:e8:cb:25:ba:83:c5:3e:84:15:
aa:34:5f:5b:9b:0f:7a:f1:9c:bd:3c:dc:83:40:c6:
e3:60:e8:74:b3:26:bf:9d:93:f5:3c:25:bb:3c:44:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BA:05:6C:F6:64:1D:86:37:3A:3F:F2:A8:0D:02:DE:A2:3D:1C:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/94fb13a1-bd45-3d7f-ae87-b4f2b6cd87e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:20:9b:1b:52:07:cb:57:3d:81:e9:23:41:3b:23:e2:75:b8:
8c:c5:31:5b:4f:0f:52:77:eb:05:3a:38:2d:b4:dd:4b:f3:3f:
54:bd:c5:aa:88:d1:52:92:3f:7f:b9:d0:26:71:e5:fd:2c:43:
42:82:2b:5d:5d:a1:45:ad:ba:fc:53:08:bc:e5:81:7f:5c:c6:
f7:c8:28:11:bf:59:59:72:1e:7d:54:d3:06:8a:35:ae:a4:05:
43:93:03:f8:2e:f1:25:30:15:8b:10:da:fa:de:2d:83:03:07:
8b:0a:29:16:b1:11:cd:1c:4c:1e:d0:94:50:e2:9d:09:79:c3:
de:8d:54:d7:3f:96:76:21:b5:7a:b4:32:a2:82:85:69:f4:c8:
d4:7c:8d:01:3b:09:1b:45:3e:2c:3f:68:88:31:51:13:1c:f4:
be:ed:33:d3:9c:12:25:b4:8c:ae:99:07:20:9e:47:c4:03:69:
ea:97:33:1c:be:ed:32:e8:9a:a2:a3:83:2a:44:ec:60:cb:8c:
46:b1:e9:bc:49:6e:36:0d:ec:ee:90:ab:da:f0:bb:e2:c7:06:
27:bd:2a:59:02:ee:60:c1:af:9e:49:e7:0c:aa:12:11:5c:54:
cf:dd:de:bf:ad:df:ba:e1:88:ba:8d:8d:ee:4f:55:1e:dd:1d:
e3:27:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:18:27 2025 by rpki-client