Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1e892fc-52ed-39c5-84fe-2e89bfccc0a5.roa
File: a1e892fc-52ed-39c5-84fe-2e89bfccc0a5.roa (raw, json)
Hash identifier: tp26Pm/rAM/YBrAt9ANHHzkDlwPNpUMO0RSy/ihCKnY=
Subject key identifier: 26:2C:CB:1D:9A:33:34:82:3A:D5:AD:7B:E6:A3:3B:D9:A3:4E:A9:93
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20FDB9C95E27CFAF088600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1e892fc-52ed-39c5-84fe-2e89bfccc0a5.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397217
IP address blocks: 156.154.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:fd:b9:c9:5e:27:cf:af:08:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=7ed64f9b-dba8-4111-b986-e0c0e0bd77b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:94:23:b6:73:28:28:e6:68:47:e1:22:6b:
06:5d:4c:a0:cc:bc:b5:7f:75:0b:4f:ba:c2:6a:3c:
c3:55:b7:1a:19:a0:cf:e7:9e:2f:7c:e2:cd:1d:51:
c6:3b:84:41:c1:17:e6:98:ed:68:0b:cd:2c:17:87:
ec:42:5d:6d:14:73:94:e6:b6:95:6e:05:fb:c1:d2:
11:ad:a3:4e:c2:d3:b1:a4:14:81:41:3d:ee:d8:cb:
e9:5e:39:cd:ef:1e:b7:c6:12:17:ef:a3:4c:bd:39:
e2:39:ac:c0:f9:5b:fb:1a:37:ce:f8:83:79:f3:2c:
54:e3:da:48:6d:09:83:d8:5f:89:b2:03:80:4a:f5:
2a:22:97:84:fb:6c:0e:4f:6f:0a:fa:e2:45:0d:6a:
3b:33:de:16:72:d7:0f:ec:24:2e:13:2c:48:a1:ad:
9f:a6:72:ae:0a:aa:d8:b4:9f:3e:87:9b:66:27:b2:
cd:68:68:ec:37:04:59:fb:20:13:ad:0c:e2:7c:33:
94:f2:1c:e5:38:43:df:54:ea:86:4c:a4:b1:88:91:
02:e7:7b:af:b4:51:63:f2:bb:74:1f:0f:b8:52:ed:
d5:42:53:10:da:3f:d7:65:33:e4:09:5c:a1:eb:87:
7b:14:09:6a:a5:32:f3:5d:74:b1:36:ca:84:02:7b:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2C:CB:1D:9A:33:34:82:3A:D5:AD:7B:E6:A3:3B:D9:A3:4E:A9:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1e892fc-52ed-39c5-84fe-2e89bfccc0a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:7e:9b:06:de:4b:7b:47:9a:8d:81:5f:6c:f5:20:08:49:34:
24:0b:2a:73:f7:f6:21:b5:16:e3:e1:04:9c:0a:91:d6:c7:17:
2c:16:60:22:eb:fc:60:cf:1c:42:e7:7e:c3:36:c7:0f:74:7b:
c1:db:a9:53:bc:85:14:e1:82:06:b5:d0:18:c6:62:ed:3e:e5:
e5:d4:60:b8:93:94:2b:25:f4:14:43:b1:d5:51:ea:c2:49:53:
f2:4e:89:a4:6c:75:0e:63:48:b8:95:95:ad:f5:aa:92:74:45:
b1:d0:a2:b6:6a:95:99:b4:63:56:45:d1:ca:53:19:66:58:be:
2c:92:1e:27:20:81:62:88:c4:a5:51:f3:0e:c2:12:92:df:d0:
a2:5f:7b:6a:b9:75:3c:73:d2:2b:4b:cd:5c:63:3b:3b:75:c6:
14:11:6e:99:10:c1:04:7f:c8:1f:fc:8a:26:5f:6a:b6:38:45:
db:03:22:e7:36:21:3e:49:5e:6d:02:2e:27:55:8b:47:48:d4:
77:27:5a:19:b3:ed:0e:a8:fe:7d:24:36:95:d8:f8:41:5a:d9:
5f:36:b5:09:2b:82:f0:5c:9b:3c:e6:68:60:33:05:89:77:3d:
95:f7:39:51:ba:40:67:07:7c:70:e7:32:08:2c:8d:08:75:5b:
1f:64:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:48 2025 by rpki-client