Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98243c64-ddb7-3b76-8b95-d2b34357f71b.roa
File: 98243c64-ddb7-3b76-8b95-d2b34357f71b.roa (raw, json)
Hash identifier: wXrLIvPJoqaHlsaqXDDZM8DYPOrY6Z6on+R1juFnSKA=
Subject key identifier: 23:04:6B:B3:E9:72:53:47:30:52:08:F2:BA:03:0A:86:52:BC:15:60
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99659789DF03427DC6DB580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98243c64-ddb7-3b76-8b95-d2b34357f71b.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397227
IP address blocks: 156.154.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:59:78:9d:f0:34:27:dc:6d:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=44aecb06-f494-4192-aad9-212c9d9b9d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:30:f4:de:66:fe:10:7d:5e:1b:78:b1:1c:
0c:e3:c5:10:76:f7:da:9c:1a:4b:e4:7c:90:0e:4d:
f7:da:8e:fc:f6:05:c9:cb:bc:82:54:a1:4a:c2:6a:
0a:be:21:44:4b:ef:a0:d3:ed:04:76:4e:40:c2:81:
32:3b:6e:77:a3:d8:b3:43:10:7a:aa:47:09:80:74:
3e:1f:14:c8:e0:d2:43:f8:c1:a0:56:a5:5e:15:1c:
c9:50:4f:07:e7:04:b2:4d:87:06:0c:43:4f:a7:dd:
e2:bc:71:db:9d:32:2b:6d:0c:98:d7:14:19:e0:6f:
87:39:f1:f9:21:e5:9e:11:72:1a:0d:65:02:8c:13:
99:e4:aa:ec:df:79:45:44:8e:4b:27:67:24:1c:db:
2f:c0:ca:4d:a4:f3:1a:91:e3:0a:c4:11:29:f4:a0:
f2:cb:07:67:e1:dd:5f:24:b5:26:d8:cf:a8:95:1e:
35:f1:9d:a4:f8:d5:36:0c:d7:20:a1:e4:2d:c9:13:
cb:99:b1:ad:10:fd:db:09:3e:09:a9:8b:c7:cb:be:
1a:de:d4:35:2c:a2:ef:19:b8:be:df:5e:74:e8:8b:
3b:4d:6d:60:2e:40:5f:a6:ec:cc:98:2b:25:a8:b5:
49:ed:33:99:9b:c2:ca:95:ba:57:29:b6:42:5e:ea:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:6B:B3:E9:72:53:47:30:52:08:F2:BA:03:0A:86:52:BC:15:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98243c64-ddb7-3b76-8b95-d2b34357f71b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:9b:72:14:5e:1e:93:14:5d:f7:29:a3:6a:9c:54:e4:40:f7:
72:31:2e:50:c4:8a:2e:fe:81:fb:8f:8e:69:d9:31:3f:18:40:
e2:32:7b:89:1e:46:73:16:b8:cc:df:b7:f5:4f:a0:f9:51:c3:
da:a2:56:99:e1:fd:db:74:9d:2e:e5:f7:1b:79:06:ee:b9:28:
20:0a:f3:d8:8d:59:73:3f:5c:84:4b:54:6b:98:6f:19:b8:15:
14:88:ee:5f:21:2e:cc:8a:ca:fc:ae:dc:3d:50:c6:86:57:be:
04:86:98:b7:66:42:21:a9:09:bc:9e:6b:44:b4:0b:3a:0b:0a:
7c:4b:63:9c:84:7b:14:cd:34:47:96:41:2d:47:a7:60:1d:71:
c2:83:c7:e9:7b:f6:37:2c:96:ea:7c:9e:b8:62:fc:4e:57:0e:
7b:0c:5f:51:34:bf:b2:9b:1b:93:40:5c:80:75:bf:fe:59:a3:
87:e6:33:f3:e8:3e:56:3a:1d:ad:a9:36:9b:c4:e9:8a:88:51:
d1:c3:32:c1:84:d5:4a:35:9e:ec:01:8b:4e:3e:3d:51:14:ae:
5d:c5:85:61:2b:c2:1c:2a:eb:7f:b6:b7:66:f2:9d:4f:27:02:
c8:ba:4d:27:e5:34:ee:e4:0d:22:f1:a0:17:6c:e1:fe:6f:5f:
5f:2c:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:54:22 2025 by rpki-client