Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95ed5390-40ce-3526-99b4-3ae4568b22e9.roa
File: 95ed5390-40ce-3526-99b4-3ae4568b22e9.roa (raw, json)
Hash identifier: J2WDJmdGpz1RrcyEXKhlnWSoARRwEBdb64c/iyMkdTc=
Subject key identifier: B9:97:7E:23:96:E7:CC:25:C6:43:D9:BB:EB:B1:D1:14:35:55:F2:73
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246EFC95D32F8750D99C680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95ed5390-40ce-3526-99b4-3ae4568b22e9.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397225
IP address blocks: 156.154.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ef:c9:5d:32:f8:75:0d:99:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=ad4cdf53-d6d9-41be-9eaa-053bb0c66420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:88:f3:5e:3c:bb:1d:d7:a7:67:0d:65:2a:
9a:87:64:b9:19:1f:4d:0d:8d:07:eb:ab:78:23:0b:
85:78:5b:a4:85:f7:d8:25:08:f6:96:7a:e7:fe:11:
a1:19:a7:c9:c5:b9:37:65:4c:d1:0f:d9:2b:c5:d7:
47:9a:b3:4c:71:a3:8d:06:39:23:04:fd:85:a9:67:
b5:3e:d0:51:4c:d4:ce:63:64:db:a2:38:eb:f8:c8:
94:7e:ad:e9:21:db:7c:c7:e7:12:9b:d5:b1:32:70:
73:4a:3a:e3:d9:5d:f9:22:32:c2:99:78:9a:e2:7e:
d0:d2:98:44:60:c1:2d:1a:d7:08:ec:b7:d1:5c:72:
31:c8:ca:cf:94:d0:0d:12:7b:75:22:6d:b3:e6:c1:
8d:08:57:8e:05:62:82:83:3d:92:b9:f2:7f:38:07:
bb:9a:ba:ef:aa:3e:ff:fa:99:a8:d4:64:9b:51:41:
8e:9b:c2:ab:29:8d:66:4c:ed:0d:db:49:4b:14:3d:
a7:fb:84:11:05:1a:04:1f:b1:ec:59:6c:8b:0d:29:
33:2f:f3:68:42:00:68:03:71:a9:d8:0f:d1:07:60:
49:79:40:18:33:4c:4f:b6:a7:07:88:e3:a4:64:65:
50:0f:7e:59:6d:3e:f3:eb:05:09:de:7f:3c:f7:a3:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:97:7E:23:96:E7:CC:25:C6:43:D9:BB:EB:B1:D1:14:35:55:F2:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95ed5390-40ce-3526-99b4-3ae4568b22e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:75:ba:df:29:50:00:6e:04:d6:af:5a:31:16:12:b6:30:b4:
14:8f:06:6a:cc:23:3c:5e:e1:81:82:88:21:cc:13:2c:87:d4:
b1:85:c1:ab:11:3e:53:fd:de:d8:1c:57:f9:31:48:67:b5:f6:
66:5b:61:4e:8e:dd:7c:dc:de:a8:c6:06:59:6a:15:d2:79:8b:
89:e9:e5:1f:76:92:d1:33:c8:d9:55:2c:fa:ab:ca:c8:be:cc:
42:d5:25:1c:c7:f2:02:64:35:9c:87:d1:65:1b:90:c9:f3:02:
c9:63:0a:a2:df:ff:dc:16:43:07:ff:6f:95:04:b5:c8:20:af:
b0:d5:b4:c1:f3:c6:63:02:35:64:be:c8:ed:37:a5:1e:8b:56:
19:5c:90:4a:b8:9f:55:a6:51:c2:f5:75:c9:dc:32:67:3d:3e:
99:d5:e6:60:29:8e:51:35:af:7e:90:67:83:b2:5d:e9:dc:02:
a4:f1:ef:01:e7:9b:16:6a:19:9d:8c:6b:5f:54:00:d9:81:3b:
d0:45:00:80:fb:6b:c7:b9:00:24:36:67:c3:a7:d8:c1:00:85:
30:35:ac:96:52:10:44:8a:d1:f0:97:c0:84:25:d3:ba:95:ca:
87:1e:55:e1:11:75:76:37:74:72:14:eb:d3:05:54:cf:d9:a6:
8d:22:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:29 2025 by rpki-client