Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a34a98f8-54a2-385f-9791-a327e24184a7.roa
File: a34a98f8-54a2-385f-9791-a327e24184a7.roa (raw, json)
Hash identifier: JHKHIOwcHh/kZfImw9IAgXsMRKKpgbnxIktm0YDy4dc=
Subject key identifier: 84:A5:EA:34:76:8A:61:40:C8:1E:BA:71:6F:3E:C7:69:16:F9:D9:18
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB5BB22FBE7462693B5680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a34a98f8-54a2-385f-9791-a327e24184a7.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397214
IP address blocks: 156.154.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:5b:b2:2f:be:74:62:69:3b:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=89ec4d61-37ff-4e30-9688-85492dd0d471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:ab:40:70:7e:69:81:b8:36:be:23:68:78:
3a:d2:4c:e2:a1:b3:9d:28:33:09:e3:18:12:c6:be:
3d:95:76:4e:0e:e6:70:aa:db:6f:ce:ef:57:21:93:
42:6f:12:5e:8e:56:50:1f:56:81:7b:55:42:db:bb:
c0:9f:a7:21:62:6e:28:96:eb:70:6d:4e:72:14:34:
54:f0:f9:04:cb:8b:93:7e:95:32:f5:16:fc:8a:c7:
f1:9c:af:e4:aa:f7:aa:24:8d:29:3c:3a:e9:d3:ec:
72:2b:0b:db:69:bf:ac:2e:5b:89:b6:31:4f:dc:d3:
dc:bb:7f:14:10:6a:31:1c:39:ad:5f:20:27:40:5c:
e9:88:2a:78:7f:f7:39:eb:38:ce:e2:3f:ae:21:cd:
43:bd:b2:01:26:9f:f9:cb:ec:ee:e0:63:c7:e3:8d:
c6:0e:8a:0c:86:23:de:de:f1:3e:17:ff:8a:a4:d5:
6c:3b:e0:ae:26:0e:fb:85:a3:34:79:f8:64:37:4f:
85:0d:01:4e:86:69:24:5e:ad:94:90:79:4c:d5:c4:
4b:fa:1d:46:69:cf:1d:df:c3:2b:fe:4a:32:a9:ae:
bc:53:ec:09:c1:39:57:0a:76:23:7b:ea:ea:93:54:
00:1c:ff:e2:77:72:2d:12:8b:c5:82:f4:28:46:02:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:EA:34:76:8A:61:40:C8:1E:BA:71:6F:3E:C7:69:16:F9:D9:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a34a98f8-54a2-385f-9791-a327e24184a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:3a:9d:c0:26:63:68:8e:2c:e0:01:33:87:28:db:92:aa:30:
c3:7c:85:fc:72:a5:33:84:0f:99:ae:3f:cb:e9:ff:2d:52:93:
66:45:76:0a:a5:c1:9c:6f:85:d1:8e:19:0b:cd:29:c7:6f:ab:
32:e0:2b:37:c7:7f:a6:49:2a:9f:8b:6c:d2:10:10:b1:c5:73:
9d:0d:a8:e7:fc:79:3f:2d:6b:1f:67:80:d3:1b:66:15:58:67:
7c:ca:08:7e:84:7a:ad:6a:30:34:f8:fa:f4:88:0e:18:06:b9:
61:9f:b3:50:8f:59:22:a8:70:38:ab:8f:8f:76:b7:53:06:16:
b4:e4:1b:b8:96:ab:25:5e:f9:87:f2:8b:56:2a:9e:69:7e:ba:
3a:76:c3:90:b0:ad:5e:52:3c:3b:b5:56:00:6d:e0:fa:c2:bb:
5c:de:d5:4d:80:f0:5f:52:ae:77:f2:71:83:60:a8:99:c4:11:
43:31:1c:bc:df:33:2d:14:83:61:16:37:a2:be:e3:6e:eb:89:
94:fa:9e:45:2f:99:3c:6c:69:b9:91:0f:f8:4e:ce:e7:27:e0:
c6:a9:84:ae:2b:11:b7:c3:10:48:71:16:12:0d:7a:2f:09:3c:
c1:e0:67:6f:1d:b3:71:c4:59:4c:70:21:df:53:07:0d:6a:87:
65:b4:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:02 2025 by rpki-client