Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b55a30ae-c633-3be8-908c-3ec69e6e9cba.roa
File: b55a30ae-c633-3be8-908c-3ec69e6e9cba.roa (raw, json)
Hash identifier: FhomuLgQUHzZX8lqT7GHjyZtcaaZ1/Lp5KNObRMmhEU=
Subject key identifier: CA:4A:16:A6:0D:6B:76:26:FB:E1:FC:A6:A6:26:02:35:DF:57:3E:E0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB5ED854959F8E4C5CC500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b55a30ae-c633-3be8-908c-3ec69e6e9cba.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397236
IP address blocks: 156.154.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:5e:d8:54:95:9f:8e:4c:5c:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=6bd398de-f01a-4daa-ac82-60ba90b5bb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:c8:b4:76:c3:de:d3:93:46:82:76:e9:c2:
16:a9:26:ae:70:9e:45:e0:26:ed:57:fd:9e:5b:84:
9c:1d:f1:1e:8b:88:3c:05:63:b2:8e:51:39:d4:ea:
be:56:71:43:f3:b3:73:07:9d:73:7b:c2:48:15:bd:
48:72:b3:91:75:e0:7a:a1:af:56:54:58:1e:48:77:
34:67:3e:1c:49:05:7e:fb:e0:91:38:c8:81:2c:b2:
6b:af:88:87:ee:82:7d:7c:65:54:10:44:80:87:6e:
09:71:51:c3:98:16:24:f3:e3:fc:26:a6:c3:91:55:
65:a3:f8:d6:ee:aa:d5:a5:ee:53:d3:b4:3f:18:ee:
fb:94:61:e7:0a:21:8a:dc:8c:49:e4:da:6f:41:70:
6c:f9:05:e9:2c:68:64:dc:95:54:04:58:b2:7f:60:
e5:e3:db:87:26:40:8e:50:4f:e3:67:9c:b3:cc:21:
7d:e8:1f:25:cb:2a:ee:67:b6:ae:ca:ca:06:15:ed:
d4:a8:98:5b:92:52:ba:c6:ae:ef:67:3b:de:fb:6d:
fc:06:3a:43:e5:2a:3a:b9:99:8f:0a:c3:bf:68:70:
8f:5f:78:1e:17:c3:6b:93:82:13:0f:9e:24:53:2e:
a5:83:a0:8f:8b:30:73:aa:a3:68:ea:7f:1a:1f:c9:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:16:A6:0D:6B:76:26:FB:E1:FC:A6:A6:26:02:35:DF:57:3E:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b55a30ae-c633-3be8-908c-3ec69e6e9cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ab:97:f1:11:60:89:fb:92:8f:6a:69:82:56:df:96:35:c4:
6c:d9:27:10:ba:07:03:a2:86:15:99:9d:8d:3b:7a:4d:44:9d:
78:65:ff:7f:dc:0c:8f:5e:48:5c:16:91:8e:92:8a:43:16:8b:
d0:c6:c2:99:67:88:20:cf:c4:a1:d3:fb:c7:e7:33:46:42:70:
22:c4:92:2e:a8:ae:f5:7a:2c:97:51:1e:41:99:82:08:cc:91:
90:d6:be:74:9d:e4:58:22:b6:12:b8:fa:fb:2b:0e:a8:b3:c6:
56:d8:5d:a0:2a:ec:cb:87:8f:00:cb:0a:0b:9f:2e:d2:ea:2e:
b0:45:8b:c7:5a:5e:41:1f:a6:5b:9c:86:01:78:3a:7c:75:fd:
e4:92:16:8b:d4:00:ec:47:ac:d2:30:05:38:2b:39:9d:db:09:
56:01:97:bd:ef:cd:4a:58:0d:e8:fd:70:67:a5:9c:fc:79:68:
05:f1:6b:00:be:c9:01:95:5b:76:70:b8:a6:9a:b0:e1:a3:d7:
ad:8d:28:52:fa:34:f0:8e:21:75:51:db:02:d7:de:d7:80:9f:
f7:d4:7a:ff:64:a8:34:38:9b:49:9f:dd:0a:5c:b4:17:54:71:
78:d4:75:a0:bc:c2:d4:e8:09:27:c4:99:dc:a3:84:b3:76:2c:
0f:99:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:41 2025 by rpki-client