Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98a5a768-c7a9-30e2-bd60-f233b4706efd.roa
File: 98a5a768-c7a9-30e2-bd60-f233b4706efd.roa (raw, json)
Hash identifier: d5Msa5/4DdGPIaadjMtnUP0z6NvhtN2djzBd6u/sdg8=
Subject key identifier: 12:0F:A5:6D:6D:FE:8E:F6:01:7B:2F:6B:27:1E:56:77:CA:1F:3B:F6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965927D1C13EDE20F9C980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98a5a768-c7a9-30e2-bd60-f233b4706efd.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397220
IP address blocks: 156.154.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:59:27:d1:c1:3e:de:20:f9:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=a449c58f-f35e-41d4-a98f-7dc4486ed32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:3f:8a:15:f9:0a:b8:06:52:59:3c:63:78:
16:94:fe:72:c1:ad:8d:7c:db:ff:68:bb:27:8f:1b:
bf:a4:67:b1:3c:e5:cf:37:b1:8d:c7:b8:e4:60:71:
e1:8f:ad:9b:3a:25:4a:ef:10:ac:26:31:ba:f8:14:
6f:77:cc:d4:bd:66:52:c2:ff:9f:df:0b:e9:dc:7c:
2a:5c:11:8d:5e:23:38:db:e7:39:8d:c0:96:bc:50:
b4:4e:73:fe:af:d0:39:2e:34:4d:19:84:0d:c9:60:
ce:a7:a7:1f:70:8c:63:83:8e:5b:43:22:67:5b:5d:
71:b5:ca:9d:a6:2a:01:77:be:1f:8b:96:3d:2e:ca:
2f:86:b2:f6:5d:68:4b:05:20:7a:ee:b9:d3:c5:a2:
25:b8:9f:4e:8e:df:ca:ce:7c:21:c8:aa:6c:81:f6:
4c:63:42:65:db:46:85:da:69:70:ee:7a:a2:c7:ee:
88:c5:2f:62:02:b6:56:e1:15:7d:06:ba:27:b5:46:
1e:f9:57:82:97:1f:d8:e6:ce:6c:88:04:15:81:19:
f4:85:03:2e:d1:c7:b6:17:2e:7c:6c:3f:5d:75:c8:
6a:ce:5d:a3:32:b9:92:8f:ed:c7:53:92:15:6b:18:
b3:2d:dd:ac:84:65:03:a1:f3:e1:31:3f:ce:9d:20:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0F:A5:6D:6D:FE:8E:F6:01:7B:2F:6B:27:1E:56:77:CA:1F:3B:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98a5a768-c7a9-30e2-bd60-f233b4706efd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:50:83:d7:84:43:bd:ea:7c:b9:31:d1:69:3e:b1:c1:33:9d:
e6:be:bf:c8:b1:69:81:f6:93:40:04:07:27:4a:4d:13:4b:31:
50:c5:40:4e:d8:34:39:0a:73:f5:7b:3a:f5:d7:12:0d:5d:eb:
69:a0:15:80:db:93:3f:79:8c:6d:c6:f9:0f:68:12:2a:51:1c:
33:09:c6:ce:7e:d1:2a:4b:51:30:0c:f3:e4:06:a0:6a:82:3f:
3e:da:f6:5f:4a:d0:a6:6d:65:90:b9:9e:10:55:26:13:6b:80:
6e:29:b1:cb:40:56:01:c9:09:f6:a5:66:e5:1e:eb:7e:aa:4c:
06:16:03:ea:2f:ba:9d:11:da:f0:73:74:fd:63:40:8a:c2:8f:
d6:bf:84:2b:ee:40:77:30:07:9d:d0:ef:d8:c2:92:1a:eb:07:
c1:43:5b:37:65:2a:a7:d2:43:f6:23:b9:0e:6b:7b:ad:a1:56:
2b:54:ab:56:5b:f2:d9:6b:3f:8c:87:7a:33:4b:9e:6b:4b:0b:
d3:70:56:fd:89:e5:f1:9a:53:f9:69:9f:e5:64:40:07:83:90:
90:29:d0:45:63:a1:fe:c9:2a:57:d7:1e:18:62:2e:3a:e8:9b:
c1:b8:ee:ab:a4:25:36:b5:f7:27:f7:63:62:ef:55:e5:d0:4b:
19:01:c9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:54:15 2025 by rpki-client