Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b53e2e19-2cc1-36ad-9ca6-c8145df75b1d.roa
File: b53e2e19-2cc1-36ad-9ca6-c8145df75b1d.roa (raw, json)
Hash identifier: pAlKDaXU9Skqp1QfKONxn/z1Mjc0xbMiIDjSHYgQNys=
Subject key identifier: 87:AD:96:A2:F4:97:55:A4:0F:74:DF:64:22:44:4F:76:2E:32:24:28
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20EE1B3E963D28F15CE380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b53e2e19-2cc1-36ad-9ca6-c8145df75b1d.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397225
IP address blocks: 156.154.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ee:1b:3e:96:3d:28:f1:5c:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=a1c362c4-146c-4811-b534-afb28a184934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:37:48:1f:21:58:c9:5a:09:c7:ff:18:93:
e5:53:e0:9b:13:ee:5a:7e:ae:80:f5:41:e9:e4:7f:
13:07:d5:8f:2c:d6:67:90:60:da:ea:95:e5:a1:cc:
23:8b:96:f0:9b:7d:29:d7:e2:5a:af:8f:f6:4b:e3:
0b:f5:af:d4:75:91:8e:51:1d:56:e5:f2:a0:c3:2b:
6e:da:2e:5c:ae:73:88:15:09:a8:5c:ec:5f:1a:25:
de:df:cf:75:74:4f:2f:ef:fa:40:fd:35:eb:4d:22:
7f:41:94:a5:86:4e:2b:2b:d4:86:4d:24:e0:d9:82:
95:21:f3:a5:ff:63:14:31:41:fa:48:40:f8:f3:0b:
03:56:89:db:c8:18:3c:38:99:df:51:bf:af:13:6a:
6c:a4:ea:c3:38:d5:fe:4e:cd:03:0e:b3:3d:fb:b3:
17:49:1a:0b:e0:5a:7d:30:ce:77:b5:35:0b:d8:f4:
e0:77:c0:42:91:50:c2:d8:2f:9e:80:2a:7b:4c:3d:
31:40:98:4a:a2:87:d9:8b:d1:4e:d5:92:46:9d:e2:
09:ff:5d:6c:df:ec:ba:e2:88:de:c0:49:9f:98:47:
f0:a5:55:fe:2b:87:07:84:54:fb:93:74:0c:70:e0:
ad:a3:61:b1:f1:3c:b5:91:98:0e:92:5c:d4:65:12:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AD:96:A2:F4:97:55:A4:0F:74:DF:64:22:44:4F:76:2E:32:24:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b53e2e19-2cc1-36ad-9ca6-c8145df75b1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:1b:32:e9:21:67:0f:10:9e:2a:85:b8:09:a1:4b:18:cc:34:
0a:c3:bf:7d:ed:8e:ae:81:3b:4c:89:84:72:cd:90:6d:c9:d5:
e3:a2:17:57:b0:56:e5:26:53:58:d8:c6:b1:72:66:bb:86:5f:
7c:5a:a7:cf:67:b1:60:63:ff:5e:dc:ef:62:0c:4a:b8:58:0c:
5f:06:48:73:8c:dd:31:d6:28:d5:77:e1:7d:eb:2c:16:e1:a5:
64:b7:f5:be:b6:9c:07:f6:88:ce:ba:0e:d4:fa:4c:a0:88:af:
b1:5a:5f:5b:3a:95:aa:f2:a5:9b:6c:df:19:c8:2f:e3:f4:53:
70:03:ec:78:f8:62:3f:80:cd:f2:c8:ca:79:5c:d5:44:a9:ab:
3e:23:06:0f:1e:70:1d:cb:bc:89:0e:ca:cb:e6:30:98:e6:b6:
2b:0c:5b:9f:71:84:60:f7:88:88:03:cf:2a:6e:1a:e7:b7:07:
c8:a7:73:ad:3b:2f:51:d5:2d:62:c4:33:c9:be:43:28:6d:0d:
2c:7c:35:de:cc:52:84:7b:37:f1:77:d1:1f:35:e6:8e:51:4f:
31:a5:b3:51:98:c3:57:bf:b1:07:f1:5f:69:84:58:79:22:e1:
b2:ca:72:d5:f2:0a:bd:02:c7:03:1d:71:0a:69:13:a3:fc:23:
26:b8:84:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:02:07 2025 by rpki-client