Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a6bdd95f-bd52-3f15-8267-48c03a7305f2.roa
File: a6bdd95f-bd52-3f15-8267-48c03a7305f2.roa (raw, json)
Hash identifier: 3FZ25Z+E7Z/SX0+VsbzDaSydQtfs2DuauehrMqVioTk=
Subject key identifier: 7D:69:BC:B1:AE:15:EE:1A:1B:D4:44:B5:9E:A0:0F:71:81:40:3A:FD
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2100914B21075428E98C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a6bdd95f-bd52-3f15-8267-48c03a7305f2.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397228
IP address blocks: 156.154.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:00:91:4b:21:07:54:28:e9:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=a4139346-a503-4945-a7ef-874cf3da07e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:ed:f1:5f:df:ca:7c:60:e6:a4:5f:69:43:
53:ef:38:65:1d:37:d3:ab:31:b9:99:fd:80:2b:69:
30:df:5e:fa:c3:74:82:52:ae:87:85:0b:c2:33:1e:
45:3f:d0:df:6d:fb:4b:e7:01:ec:fa:c3:a2:98:68:
fd:79:b3:33:38:a6:5a:31:e9:e5:a9:d0:69:6e:4b:
7c:53:e8:a2:f2:48:43:0c:0d:4f:02:c3:61:9d:b1:
37:24:eb:33:99:a3:96:ec:c6:99:0b:55:3e:0f:e2:
24:5c:41:84:15:37:91:38:d8:8b:da:9b:2b:6f:24:
e5:5a:74:bc:f8:9a:5d:62:d6:f6:d0:71:1e:87:02:
ee:6d:91:3f:14:1f:90:2e:f4:34:7c:90:93:2f:87:
59:3a:f3:79:4f:db:7b:a2:a9:a5:1b:8c:69:fd:54:
00:62:28:7e:f8:66:e5:c0:9c:62:c5:87:42:81:c4:
eb:7c:1d:1e:11:c0:ff:8e:c7:81:de:82:24:d6:88:
a4:22:d4:86:72:90:7b:cb:14:30:01:46:16:0f:03:
0c:d3:83:75:89:75:2e:f7:a2:1c:59:d6:88:bb:e0:
e8:67:40:c9:b9:d7:a0:59:dc:79:6c:c7:39:04:14:
87:90:a5:a8:cf:03:cd:0c:d0:ff:20:20:04:13:08:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:69:BC:B1:AE:15:EE:1A:1B:D4:44:B5:9E:A0:0F:71:81:40:3A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a6bdd95f-bd52-3f15-8267-48c03a7305f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:7a:a1:91:90:8d:ce:f3:57:0c:9d:b0:14:dd:66:a6:9d:88:
73:49:3f:67:ce:47:c4:c6:ad:aa:87:05:f4:a3:8a:ca:eb:97:
23:1a:3f:af:88:0c:ea:0d:c7:18:69:cc:8a:01:6b:c3:7a:0d:
76:85:a3:a8:8c:05:53:d0:de:f5:2f:ee:af:fe:e9:a5:b3:af:
34:00:ed:b0:f6:12:dd:0a:86:b1:12:16:98:f1:b3:fc:bf:c8:
d3:11:1c:88:a9:b8:b8:84:8b:12:eb:16:b5:31:00:5f:c5:36:
10:6c:32:4f:34:44:95:30:65:a3:4f:b9:03:5e:13:32:53:fd:
eb:25:81:12:e7:a7:9e:97:89:b3:71:f9:db:ca:14:3c:47:7a:
d3:64:21:37:aa:4b:27:16:4a:24:02:e7:e6:f1:a3:6a:20:f9:
b6:d7:9b:bd:84:8a:70:16:ed:76:29:07:b5:44:87:87:69:d7:
2d:cc:fd:38:bd:1c:d7:6f:ca:f5:ed:63:0c:6b:45:a5:60:f5:
31:9c:85:37:f6:19:6b:4b:91:3a:3a:5e:ad:0b:66:0c:e5:fe:
0b:53:28:06:d0:b0:ca:35:c5:36:89:a0:ad:54:92:19:24:1e:
85:41:af:05:b4:ab:b9:21:01:c3:88:27:c1:f0:8e:b0:23:37:
fc:f1:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:32 2025 by rpki-client