Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9da56fb6-37da-3206-8d6f-e25cbcfe0ea8.roa
File: 9da56fb6-37da-3206-8d6f-e25cbcfe0ea8.roa (raw, json)
Hash identifier: kJGrdDLRpHYgfQzSQc/aBWKgFW8kiLklCTNQAYMLyxY=
Subject key identifier: 82:42:2A:53:D1:BD:77:FB:28:D0:2D:8D:F1:DA:40:17:BB:DE:FC:57
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB6A4126A698CC08DDE540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9da56fb6-37da-3206-8d6f-e25cbcfe0ea8.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397241
IP address blocks: 156.154.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:6a:41:26:a6:98:cc:08:dd:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=7b9187b7-edb5-4a34-8383-cc18aaa64700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:85:cd:a4:21:fe:18:9b:bd:45:6e:4e:f4:
e7:51:5f:2e:aa:36:74:3a:16:19:dc:c4:48:5d:49:
c6:96:f6:ba:1f:97:d5:6c:4d:08:8f:1c:62:59:f7:
dc:ec:33:db:d3:c3:96:0e:72:a3:ea:10:5b:d2:fe:
ef:e1:7e:b2:e0:8a:f6:e4:72:1b:01:81:9f:12:9d:
5a:37:28:9b:bc:c0:d4:f5:d3:3a:10:7a:c1:1f:3d:
16:a5:31:d0:c3:aa:98:e8:2d:eb:9e:89:d2:82:44:
38:d4:0a:e0:60:52:21:9b:61:7f:cb:8e:b9:5a:b2:
47:b7:71:02:52:7d:bc:33:b9:33:d1:23:07:de:b0:
1e:ef:dc:b0:31:81:b0:d5:21:61:85:20:53:af:bc:
b0:57:98:5b:b7:e3:bb:c1:0f:b5:8b:b3:36:14:9c:
89:b7:1a:43:8c:c4:bd:df:23:fe:d4:a7:16:7b:e1:
41:6f:dd:23:e6:46:62:d7:41:52:cd:e3:f3:58:33:
5e:ad:86:7f:76:b2:de:63:df:53:5c:c2:b0:ed:50:
85:4e:12:90:36:86:4b:c0:14:56:82:be:94:a9:29:
5d:25:f2:ec:09:8e:e8:9d:b3:99:3a:af:32:99:57:
72:f2:f7:4e:bb:57:d5:9c:99:f3:eb:74:d3:c4:62:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:42:2A:53:D1:BD:77:FB:28:D0:2D:8D:F1:DA:40:17:BB:DE:FC:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9da56fb6-37da-3206-8d6f-e25cbcfe0ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:84:8c:d3:79:61:c4:78:3c:80:5f:14:b7:58:c0:55:cc:a5:
7f:f0:da:34:09:8f:06:5b:2e:2a:80:a6:29:4d:99:92:77:bf:
18:36:10:72:b7:11:fc:38:70:cf:64:29:2b:88:a5:9c:ca:1b:
be:60:59:71:78:c8:98:a7:26:83:e2:bb:e9:d4:8d:c5:af:52:
ac:55:8d:8b:91:0b:a4:1c:3f:6e:40:5b:07:28:60:2d:21:4d:
35:62:35:bf:5b:af:76:a3:0f:bd:b2:39:4d:08:9b:d1:7b:b2:
aa:e1:05:c5:c1:00:9e:90:fe:cb:0a:f4:88:3c:72:22:d0:e9:
78:b5:d5:c5:ba:47:69:00:e4:47:ae:19:0a:4a:36:9b:ce:0f:
5c:82:34:c6:d5:28:b9:28:65:3f:c0:a2:d6:5a:79:f1:fc:a7:
79:58:dc:23:65:b7:af:e4:45:0b:ff:2a:cc:f1:10:6f:51:6f:
9a:6c:d4:e5:2e:f6:20:bc:6d:26:2b:31:c4:d9:03:cc:fc:43:
ad:fd:55:fe:bc:22:70:71:a8:f8:19:e1:25:c0:1c:4d:dc:df:
71:fd:bc:7c:55:e8:44:7b:c8:c1:aa:72:9d:04:4c:6e:67:7b:
4b:d7:db:57:94:3c:fd:44:cb:c5:64:96:e5:b6:99:38:dc:5f:
d0:ef:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:50 2025 by rpki-client