Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5426757-365f-3e13-9bc6-b991745d40e2.roa
File: b5426757-365f-3e13-9bc6-b991745d40e2.roa (raw, json)
Hash identifier: 9w5b1XxeUK4m2XxnjGT6ShZ04+c1gc9ubWkoheuQQOE=
Subject key identifier: 3D:67:4D:5A:DF:7B:64:7F:C6:31:A1:46:C4:AF:C7:87:6A:94:D3:54
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99640FA253E96AC71F95100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5426757-365f-3e13-9bc6-b991745d40e2.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397242
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:40:fa:25:3e:96:ac:71:f9:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=9f9ea494-e34b-4bbe-a1b9-44b98a6de73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:82:61:bf:80:1f:62:51:1a:49:25:96:06:
e9:ba:d4:34:0c:1a:6e:a0:bb:dc:1e:b6:13:21:d7:
dd:fd:8b:34:3d:a1:f5:da:b0:a5:ac:1f:90:6c:fc:
63:c4:59:65:c4:e3:01:67:f0:4f:f1:6f:b9:e9:71:
40:e6:22:4c:9c:9d:6d:3c:9c:94:f6:0d:84:f1:6d:
2c:a0:18:40:41:56:11:63:20:57:25:67:d3:40:f9:
84:d6:2c:eb:93:6e:80:15:fd:a6:5e:9f:3a:e2:8d:
49:26:56:5e:f8:e3:94:53:19:e2:93:db:be:92:cd:
65:84:bb:d8:4f:58:62:5f:26:2b:43:73:cf:f3:96:
03:8b:f5:03:16:2f:80:f3:b6:9c:4a:ec:05:0f:98:
b3:c6:c8:fa:60:9a:1f:f6:88:cd:be:ed:0f:3d:11:
f6:1d:eb:26:16:26:8f:bc:34:5d:84:c7:b5:5a:4d:
e9:c3:16:0e:2b:92:e3:ca:06:a7:61:53:1c:b7:25:
67:3f:53:30:15:d4:bf:b3:9b:16:2d:6d:55:37:61:
15:5e:f5:ce:de:e9:fe:aa:d8:4c:b3:0d:c4:72:ab:
87:26:12:37:09:37:ff:d8:74:69:83:57:5a:ed:8f:
7e:88:1e:c2:bd:5f:c5:a5:b9:a2:81:e7:4e:a1:f5:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:67:4D:5A:DF:7B:64:7F:C6:31:A1:46:C4:AF:C7:87:6A:94:D3:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5426757-365f-3e13-9bc6-b991745d40e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:26:a2:71:a8:45:bc:c6:49:97:96:7e:95:23:f3:f4:c3:cc:
cf:c8:ba:a7:63:1c:27:9c:5a:22:40:56:a9:73:bd:c7:47:31:
c5:00:21:fd:2b:01:7a:f5:17:5e:e5:a3:cd:91:9b:2e:36:82:
ad:87:fb:7b:26:2c:74:53:12:38:66:fd:70:94:2d:da:3d:88:
d3:98:55:a6:8c:54:23:56:36:83:af:97:97:30:42:f6:68:43:
5f:63:3b:15:fa:47:97:d9:c3:f2:4e:55:38:80:db:3e:c6:fa:
3c:93:6b:d5:82:74:cb:49:7a:2f:46:f3:49:23:94:30:69:97:
0f:bc:59:ad:9e:41:93:52:19:f1:97:9b:9c:ef:0b:28:0c:2a:
87:f0:ce:7b:72:8d:66:35:89:b2:45:4f:c4:47:d8:ff:c3:30:
48:78:77:95:4d:dd:91:2c:04:ce:83:cc:36:b4:35:0c:db:0e:
c4:14:8c:31:28:df:3a:2c:c0:00:0a:0d:16:52:e5:0b:e0:b1:
e5:29:2a:81:8c:9b:ec:a9:37:22:e1:59:e9:0f:6d:c9:ce:57:
30:32:53:ed:ad:3e:9e:75:8a:54:fa:a6:4a:50:48:a7:de:80:
d5:89:9b:0c:47:0b:75:07:e1:c3:fc:79:33:5a:a0:d5:ee:a5:
86:c7:dc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:29 2025 by rpki-client