Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdc266d1-adc7-3c7d-a932-26e410a5fc05.roa
File: bdc266d1-adc7-3c7d-a932-26e410a5fc05.roa (raw, json)
Hash identifier: NjcqIVK9YC/kNsB/Q1G+rbtgh0b+jXMjy5jKx+8oG1k=
Subject key identifier: E2:C1:1F:C3:15:36:F7:21:57:91:27:F6:D1:F8:47:8B:B2:89:5F:91
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB5DC9C63D9E22BA04F020
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdc266d1-adc7-3c7d-a932-26e410a5fc05.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397217
IP address blocks: 156.154.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:5d:c9:c6:3d:9e:22:ba:04:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=05a5bd49-d10f-4bc5-8a49-805697b35209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:dd:db:27:be:8c:b9:1a:b1:4e:ec:8a:57:
dc:b6:59:96:e0:7a:2e:7e:7a:af:3a:a2:1b:40:8b:
17:f7:69:e6:40:a7:61:d0:15:bd:a7:c5:ae:aa:16:
65:05:41:d2:a0:d6:c9:4b:61:f8:54:f2:a5:56:75:
07:a3:9e:61:04:60:9d:25:f2:d6:bf:35:c3:40:67:
0c:ab:fa:98:15:b3:08:f8:d1:4e:b2:1a:20:43:f4:
7c:fc:fa:0a:d4:9e:c7:ba:99:24:39:93:78:09:f2:
5d:ed:95:ab:6b:64:38:33:70:76:22:53:d1:ff:e2:
2b:09:1d:96:db:39:8f:17:98:a7:86:65:d6:b6:c6:
08:fb:8f:9b:db:89:6c:c2:59:d6:d7:b6:6d:ed:46:
ce:26:c2:32:16:be:c2:ed:87:08:8e:16:4e:c7:4c:
d2:5f:9f:ad:6f:a4:e8:09:c5:05:93:19:9e:4c:37:
d3:9f:90:cf:ee:d6:d3:a7:e5:82:ff:1a:a2:1b:b1:
86:61:e6:37:9a:51:b5:29:85:6b:cf:fc:77:05:66:
b8:eb:27:92:ac:23:cc:00:88:01:9a:da:3d:63:b1:
25:0e:0e:9e:49:05:dc:f1:8c:33:b6:8b:de:b3:86:
e1:73:78:b3:05:49:b6:87:d8:d9:66:9f:ff:b8:ab:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C1:1F:C3:15:36:F7:21:57:91:27:F6:D1:F8:47:8B:B2:89:5F:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdc266d1-adc7-3c7d-a932-26e410a5fc05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:29:df:b9:d9:cb:f0:aa:ec:fb:f5:27:5e:2d:bd:b5:f3:e8:
cc:47:88:77:9b:49:e1:df:69:f0:5a:8d:3e:c4:e3:0c:2d:84:
76:fb:a9:5e:7a:95:3c:23:a0:61:ff:b6:a9:f4:b8:27:06:86:
4f:2a:65:de:dc:cb:00:d9:b9:f4:54:72:68:42:ff:ab:46:b4:
70:f8:42:35:84:66:c5:62:5b:68:e0:96:f6:c0:24:ba:5e:fb:
91:37:a6:8f:6b:e1:f9:87:3b:0b:21:13:dc:cd:cc:57:5d:11:
10:a3:4c:8a:17:10:f2:dc:3a:8f:ea:8e:c2:c1:55:86:fd:48:
bd:c8:97:0d:23:b4:1e:ef:4e:a1:bb:91:21:e8:dc:fe:13:ea:
8d:be:33:43:7b:d4:2c:f3:b4:6d:e9:d9:44:72:f4:2e:b2:3e:
d7:e2:ae:7c:74:d3:bd:81:da:34:8c:7d:5f:3f:ed:ac:a0:60:
23:ac:51:51:80:bd:17:08:f4:2b:83:97:c2:81:7d:8f:5d:61:
66:61:f1:6b:e2:e6:6d:56:c0:cc:25:29:de:fa:b0:05:9e:30:
98:29:a3:ef:d1:72:ec:f8:c7:d7:4b:04:54:0b:fd:5e:db:46:
41:a8:78:7b:b9:e0:92:c3:5e:58:da:e3:78:10:5a:00:81:63:
1d:d5:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:48 2025 by rpki-client