Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa
File: a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa (raw, json)
Hash identifier: eoGw3aFUFn9RKGRo0yqomGcrfvMUJZRQoCLfMdjpkPE=
Subject key identifier: 2C:90:4F:4C:A7:47:8B:C2:DD:55:E8:BF:92:A7:E3:97:36:0D:2A:9A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2111925CFCBB8D5FABDD00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397226
IP address blocks: 156.154.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:11:92:5c:fc:bb:8d:5f:ab:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=dfefd1a2-8a3e-4024-9e51-5378f9decde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:c8:c8:73:90:bc:82:89:04:14:1a:f4:0e:
34:d2:f4:83:46:60:c6:46:51:28:a1:21:d4:44:3d:
31:72:05:2f:02:75:dd:07:b0:ab:09:e1:31:42:62:
f8:27:35:19:dd:64:4e:c3:14:53:d2:99:fe:4f:38:
d4:e0:13:8b:78:b9:5b:3a:30:60:70:03:53:9e:89:
db:be:d9:be:d0:0f:27:1d:53:28:93:33:e5:3f:d4:
a6:0e:96:f0:5e:a4:55:56:3e:a9:3a:be:d7:78:43:
b2:00:8d:d9:a8:e5:84:98:83:7c:42:c1:44:28:84:
c0:6a:99:be:7f:09:ad:69:42:7e:16:db:6c:b8:c0:
d1:f3:db:19:75:c4:af:41:c8:f9:b4:ae:a2:b2:64:
76:7b:32:7a:0d:1a:ac:46:01:8a:52:56:33:00:98:
5c:f2:99:f9:6d:72:c5:d4:bb:f0:69:da:fd:5f:3b:
93:97:85:20:89:02:d4:45:25:e5:56:34:fd:29:9f:
6a:f6:c7:53:36:d9:4c:66:e6:9a:9d:62:a6:77:3b:
c7:c0:55:a6:13:e9:f4:11:fa:80:e3:2e:8a:07:75:
7a:d1:9f:d9:a2:b8:26:53:19:9d:14:31:89:48:28:
0c:58:a9:89:26:7b:f9:73:be:05:e7:3a:6e:e3:e8:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:4F:4C:A7:47:8B:C2:DD:55:E8:BF:92:A7:E3:97:36:0D:2A:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:cd:a5:fa:b1:fb:70:92:0d:82:b3:66:64:f5:8f:6f:a4:75:
30:a5:32:1d:df:03:77:b1:ee:ad:78:1f:cf:4f:4b:8e:52:45:
67:7e:7e:0a:8f:cc:bf:8a:4f:1d:94:fb:b9:8b:24:1b:eb:ff:
35:e2:16:b4:6f:f1:5f:44:29:77:07:fd:21:1f:92:0c:89:cb:
88:41:06:f4:73:75:54:89:13:1a:51:9b:66:7d:43:0e:18:8f:
af:f2:2a:56:4b:8f:c7:7f:27:56:85:b2:4b:41:ca:c4:e7:4d:
28:7f:75:b9:a3:3d:e1:48:54:9e:8c:b4:74:27:0c:f3:ca:82:
85:0c:bf:8e:a7:71:01:fd:74:83:52:60:1f:bc:5c:6b:27:06:
eb:cd:08:ff:b2:cb:cb:ff:71:8b:16:25:79:97:24:8a:20:91:
69:30:30:cc:7e:d0:95:36:15:a8:1c:3e:c5:9f:b4:1d:64:81:
44:5d:bb:7a:01:63:15:2c:8e:77:5f:0e:b2:e0:db:e0:27:c2:
78:06:72:da:49:98:1f:14:d4:50:5c:cd:49:7d:96:53:1c:d6:
d7:12:ae:b6:01:79:df:1f:12:58:b2:2c:6a:7f:90:0c:ab:07:
aa:1b:9a:b7:56:a5:0c:75:0d:47:db:d3:6d:5a:83:28:58:24:
d3:c5:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:46 2025 by rpki-client