Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7469668-9ee4-3d82-a1b6-6e7803adc1df.roa
File: b7469668-9ee4-3d82-a1b6-6e7803adc1df.roa (raw, json)
Hash identifier: RzWOfTYvBdt9Mq7Qj7HJBGC6RrbkxlkF67K2gxyuK/4=
Subject key identifier: E5:A2:AA:13:95:88:68:02:50:4E:67:02:73:AA:CC:73:B9:0B:16:55
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246EB9428CB6EDFF032F1B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7469668-9ee4-3d82-a1b6-6e7803adc1df.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397216
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:eb:94:28:cb:6e:df:f0:32:f1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=d03375dd-923a-4319-82f3-86cec961eacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:b6:76:93:58:4e:d5:62:b9:1b:76:63:af:
8f:36:b1:ad:27:0f:75:64:22:e8:25:85:95:71:8f:
fe:99:42:23:62:bf:d4:2f:87:57:ab:bc:0c:4e:fb:
d6:03:d0:5b:30:02:d7:f2:3c:d0:4a:51:b5:eb:23:
a8:1c:fa:98:c2:3e:a5:ba:3e:af:d0:11:87:ad:a8:
5e:53:ec:f7:38:05:c5:4d:fe:de:5b:7c:b5:73:10:
b2:75:8a:d5:c1:ce:a2:4d:b0:f5:93:d5:82:2d:b3:
81:04:f7:4a:25:d0:f2:84:2e:18:e2:d6:c0:8d:55:
f3:bd:26:0d:08:1c:dc:b2:67:03:09:81:d8:c0:c8:
99:73:8e:72:82:80:7c:0c:f3:2c:c2:0c:38:53:ba:
fb:75:ce:0f:7e:50:7d:f5:3b:73:5e:b0:45:77:18:
f3:c4:38:b4:9a:9f:43:b8:09:15:72:f0:be:ef:c7:
ff:e0:07:07:fc:6a:61:78:27:25:bb:72:d6:f0:58:
0f:ee:90:68:a1:b6:25:d4:96:ea:da:40:28:fb:99:
ed:c9:e2:c7:24:5e:5b:68:51:24:1c:57:2b:e8:b0:
61:4f:0c:dd:65:ad:82:75:03:75:23:ad:4f:92:e1:
3d:48:23:e1:d7:18:ad:24:53:aa:a4:2f:8c:da:3e:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A2:AA:13:95:88:68:02:50:4E:67:02:73:AA:CC:73:B9:0B:16:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7469668-9ee4-3d82-a1b6-6e7803adc1df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b3:03:5a:0e:b7:43:a2:c1:ea:43:96:87:81:57:3a:e9:be:
6c:ec:8c:fd:75:25:41:46:09:96:5b:11:f3:90:99:a5:bd:56:
52:81:22:42:5e:99:32:6b:19:28:b9:b1:2e:f8:15:fc:0b:09:
80:28:1c:f4:ab:2f:80:50:8a:bc:24:d3:48:5b:46:bd:be:68:
60:bc:d3:9f:f1:4b:80:a8:5b:0a:5b:aa:b0:20:4c:d5:b7:8f:
e1:c7:26:ee:74:01:bd:a3:35:23:02:92:e3:c4:c8:8e:47:e1:
3e:2c:3b:3a:04:10:21:48:cf:eb:b9:21:3b:3e:83:18:17:65:
67:a8:85:07:82:a2:34:8a:cf:5d:db:d4:5f:a1:ce:1c:73:ce:
92:e6:5d:33:bc:82:11:e3:5c:5c:9a:de:e8:22:60:bb:b0:f2:
18:c6:d8:89:3c:36:e0:71:b2:44:c9:46:57:9c:c3:d9:c9:df:
59:95:5f:ef:e8:c0:de:0d:ce:7e:c8:3c:a3:c2:d3:c3:de:3d:
e2:87:f4:0a:b3:96:c7:0b:fb:70:a5:35:84:7d:a7:61:0c:4c:
1d:12:d0:41:ec:17:e0:87:dd:bc:fe:c9:75:41:3e:02:d1:ed:
95:91:49:1e:18:37:ab:62:ff:55:28:28:4f:81:31:63:f7:58:
4d:17:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:43 2025 by rpki-client