Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8d2618e-85b4-337e-99bd-2b641830eab2.roa
File: a8d2618e-85b4-337e-99bd-2b641830eab2.roa (raw, json)
Hash identifier: HZc+ar3sDGKnC3jARoEtrltK1HrVjmie1Jj/mY3ajMI=
Subject key identifier: 56:D7:9F:13:E7:DA:C9:6F:B3:0B:B6:17:27:71:48:CB:37:52:5F:21
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210D8AB628A264D247D4C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8d2618e-85b4-337e-99bd-2b641830eab2.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397222
IP address blocks: 156.154.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0d:8a:b6:28:a2:64:d2:47:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=a407c0e4-ea97-4110-9764-7734a7463391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:69:c1:03:47:2b:b8:c7:fa:f4:79:02:9d:
08:3e:37:be:c1:48:cc:d8:13:a4:2d:1c:5d:ae:fa:
d5:d9:69:8b:d5:c5:c5:f2:18:fb:4c:4f:fa:2f:dc:
be:a3:b2:c6:97:c3:ae:1b:a3:46:ec:d5:2f:14:5d:
51:51:06:ef:23:7c:b2:0b:a4:b2:e3:4d:87:f1:ac:
e9:a4:95:e7:89:96:be:f9:a8:d2:74:7f:72:e9:37:
e1:b3:cc:3b:ea:4a:ff:6f:cb:d3:5b:35:06:69:dc:
6f:c5:4b:aa:63:e8:0f:35:c5:3d:6b:8d:52:ea:67:
1c:e3:41:0f:c7:29:fc:e7:60:87:61:3e:85:6c:91:
18:69:e5:56:f7:1e:df:d8:58:8f:15:5d:8a:ac:9b:
69:0d:a4:e4:41:65:c6:2a:ff:69:1d:a8:95:0d:52:
41:a4:59:48:b1:cf:4f:96:8f:c1:29:46:bd:39:b9:
cc:15:de:08:ec:1e:8a:78:31:01:4a:e6:4c:b0:90:
84:75:ab:f6:aa:2d:96:1b:d1:2b:1d:5d:bb:36:f6:
05:41:e8:3d:2f:26:19:90:d3:f2:e6:f2:0e:00:34:
10:d1:01:74:20:29:dd:4f:9e:09:bd:45:9b:09:41:
3b:2c:6e:f3:6c:9f:23:ff:78:f7:09:18:72:83:cf:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D7:9F:13:E7:DA:C9:6F:B3:0B:B6:17:27:71:48:CB:37:52:5F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8d2618e-85b4-337e-99bd-2b641830eab2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:69:37:34:49:4e:07:4b:07:2c:2a:be:3a:e9:3c:80:e2:c9:
13:3d:77:90:f2:72:47:8b:35:3b:ed:ee:93:bf:a0:9b:df:e8:
2f:31:39:2f:a1:01:4f:e4:7b:82:62:c1:f6:03:80:82:e4:50:
8c:34:ec:17:62:cc:33:9a:66:46:87:3e:0e:b8:86:ab:10:6d:
c2:ae:c1:f6:48:7b:59:18:ca:fd:11:f7:c8:55:cb:7c:b2:60:
82:b0:a0:4a:22:19:94:e4:5a:4c:cb:f4:1b:cd:e6:70:9f:80:
8a:8b:f1:63:c3:2f:79:b1:3d:e3:1c:73:cd:af:42:f0:ef:79:
26:39:d2:a5:14:84:83:3a:dc:6d:fb:40:2f:22:fb:19:fc:4c:
b5:df:63:3c:5d:07:5e:e4:a6:22:81:f7:a5:bd:c1:01:26:95:
16:6d:68:3d:12:56:0c:1d:9c:4a:04:33:14:6e:ec:30:c6:0e:
9f:a2:8a:3e:fd:fe:31:ea:33:43:76:03:65:8d:8a:fb:68:aa:
e8:8b:28:8a:69:30:75:78:e2:2b:d5:92:13:83:77:72:49:6e:
38:52:bb:8c:ea:70:a3:c3:00:82:3b:36:1d:8d:9f:82:ad:9c:
e9:b6:a4:a2:3e:a4:a0:6c:7a:78:8a:d3:d7:99:bd:e1:f4:7f:
cf:8e:b8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:48:55 2025 by rpki-client