Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1a4485a-228c-3c4c-9413-768214e45cf7.roa
File: a1a4485a-228c-3c4c-9413-768214e45cf7.roa (raw, json)
Hash identifier: fRagVr6pdAfNY5rgnECN8s6o5lFkxtIZt/GOGjzi2Qs=
Subject key identifier: F2:0C:D6:8F:E3:2F:EE:E3:12:B4:3F:B6:BC:5D:FF:8D:CB:5A:44:C9
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584890760A06AC4B617640C17D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1a4485a-228c-3c4c-9413-768214e45cf7.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397234
IP address blocks: 156.154.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0a:06:ac:4b:61:76:40:c1:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=6c6639c7-cae5-4db9-b819-39a31d776986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:72:1d:95:19:bb:21:ac:73:f6:c2:e7:ca:
e6:76:e9:d9:c4:4a:6a:9b:ab:cc:f0:75:67:c0:c7:
d7:7e:25:a2:77:2e:4e:c2:71:2b:4d:cd:62:5d:ae:
16:03:23:4d:c2:d3:79:1b:5b:0d:ea:ea:1e:73:2f:
5b:72:a5:1a:8a:a3:7f:97:47:ee:13:ca:98:5f:05:
ab:cd:f0:b8:fa:4d:61:8a:10:00:6b:43:21:5b:5f:
1e:e9:4d:d3:cf:7d:2c:e2:8e:93:6d:bb:5a:19:e0:
0d:35:2e:4b:14:2d:eb:62:68:b1:f0:2c:98:f6:6d:
7c:f8:20:4a:f3:e6:93:f6:2c:dc:1b:f0:75:c4:b6:
1e:73:bf:8e:64:67:f9:8b:bb:1a:a4:53:d7:0b:cd:
22:a3:2f:db:0c:fb:75:0b:44:9a:03:51:74:a5:e6:
19:f6:a4:66:03:a9:67:ae:92:f6:2c:5f:3a:ce:c4:
6d:82:d7:e0:f1:f7:1e:a8:3e:3e:bc:bd:e2:44:13:
73:4f:ed:ec:6b:31:6e:d2:e9:19:42:40:b8:b8:3e:
63:a5:5e:3c:86:4c:26:56:30:2b:85:9e:72:fe:43:
da:9e:84:aa:33:ad:3e:1c:37:3e:56:bc:fc:1d:bc:
6b:c7:20:3d:41:d3:03:bd:a1:f4:6f:17:5b:09:79:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:D6:8F:E3:2F:EE:E3:12:B4:3F:B6:BC:5D:FF:8D:CB:5A:44:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1a4485a-228c-3c4c-9413-768214e45cf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:8c:29:bf:1d:b6:bd:b7:37:db:fa:2f:77:95:39:3d:cc:db:
39:5c:2e:c2:e9:ca:d2:1b:c9:c7:c6:91:a0:82:4a:b1:54:3d:
19:ba:02:90:54:c0:55:86:3b:19:1b:72:8b:83:9a:52:d5:46:
8d:b8:af:55:b5:51:34:d3:82:90:07:c6:6f:c0:57:5b:32:f0:
b9:e0:29:96:4e:d6:6e:5c:bd:3d:67:a1:5b:02:0e:79:29:34:
c1:fa:17:ca:b4:2a:10:c4:9f:54:7b:79:a1:43:62:86:6e:0d:
4c:f5:9f:35:e1:bc:b9:9d:19:56:b1:ad:02:6e:d7:df:36:85:
ea:5a:48:3c:61:88:52:0b:0a:6f:d6:fd:ce:87:57:4c:68:d8:
d4:a5:72:db:8c:7e:ba:b2:ef:1c:51:97:31:e4:cb:35:f4:24:
77:f2:08:2b:a4:0b:87:5b:4a:ed:92:e0:21:59:16:15:11:db:
93:11:1d:2c:1a:6b:ff:53:9d:4c:85:e5:be:e9:13:83:cc:ad:
0f:11:73:ee:a7:76:00:9f:36:e8:2a:64:59:bd:7b:49:88:76:
c0:d6:cd:2f:a3:33:19:26:bf:63:3e:73:74:b3:41:62:0a:64:
92:ec:f4:50:53:92:77:26:c2:0d:8a:51:dc:12:ab:8d:53:23:
c0:6f:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:20 2025 by rpki-client