Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bef58c78-d897-3f6a-8db6-44270cc5956c.roa
File: bef58c78-d897-3f6a-8db6-44270cc5956c.roa (raw, json)
Hash identifier: k3n6t9bMgYsKhPfjWxrlIOoV4KedYajts8dwNq4b9dc=
Subject key identifier: 59:F7:A8:82:28:A5:FF:2B:29:65:88:9E:7C:FD:D8:CF:BB:59:03:B9
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD21005A8313BA15C5300F40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bef58c78-d897-3f6a-8db6-44270cc5956c.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397224
IP address blocks: 156.154.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:00:5a:83:13:ba:15:c5:30:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=9920fd73-4da5-4c23-82fb-ba3dbb8e25a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:ed:94:fc:a5:36:cc:8f:c9:63:06:a6:fe:
d1:3e:34:f4:43:c3:87:7d:b8:36:27:a8:e1:3c:5b:
60:98:ab:6a:67:f0:10:15:e0:d8:cb:2c:bd:05:e6:
32:fc:4c:7d:b9:32:38:22:61:07:c0:d3:d7:c9:b8:
82:8a:31:4e:f9:19:2e:be:2a:fd:9d:76:5f:85:ea:
3d:1d:a7:ce:9a:35:d0:e3:51:97:13:fc:59:fe:d9:
7e:d1:5d:73:b9:34:56:0f:69:dc:33:ab:a3:bc:fc:
c9:80:a9:23:b7:8a:8e:8e:1e:7e:16:3d:65:11:38:
de:95:97:45:9d:d6:7b:45:73:69:e5:fd:94:36:10:
dd:57:c2:02:e5:c1:24:8e:5c:22:5a:c4:9e:ec:0b:
a1:3a:8e:ad:5d:5a:3c:68:38:6d:c4:3f:d8:c7:35:
ef:e4:d7:8a:85:c8:3b:44:a0:88:69:fb:df:38:8e:
b9:fd:e0:2b:dc:1e:94:d6:14:48:d4:7d:e7:6a:a3:
f1:b5:5d:56:d3:58:fa:b8:7a:0f:fc:a4:ae:f8:66:
be:90:79:5f:d9:18:13:63:4a:68:24:a9:88:c2:c9:
79:a5:5c:51:1a:b7:89:4b:ea:5e:07:eb:54:a0:65:
fe:a4:ab:e9:ba:5a:c7:bc:51:ae:fe:b8:ef:ae:3e:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:A8:82:28:A5:FF:2B:29:65:88:9E:7C:FD:D8:CF:BB:59:03:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bef58c78-d897-3f6a-8db6-44270cc5956c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:2b:28:31:a7:4f:dc:89:a2:99:e1:57:ae:cd:7c:eb:a6:1e:
93:ec:7b:70:50:1e:eb:cf:f4:01:30:f4:75:20:4d:88:4d:42:
fd:92:cf:90:64:ce:e3:74:c7:85:91:ec:05:15:6b:23:5d:b9:
9b:3f:10:1a:bc:65:76:05:da:c3:1d:1f:cc:63:9a:b1:df:3b:
c7:f0:7b:73:55:28:d4:dc:33:54:f7:64:56:e8:38:e4:cb:cf:
da:fb:42:7f:4b:3c:b1:4e:63:4c:72:dc:9b:fe:d4:24:4d:c9:
cf:ec:ea:97:4b:69:0c:76:e4:0d:f5:f7:65:19:2e:7a:ce:92:
16:e5:b7:85:9b:75:4a:26:9f:b3:ce:2c:22:fd:a5:65:c0:b7:
3c:58:58:78:dd:11:c8:9d:6a:41:64:34:3f:80:47:72:5e:96:
a7:ab:ae:95:3e:cb:d6:f6:6c:b2:31:0f:d5:2f:38:f5:27:00:
7d:d0:ac:93:61:d2:ee:e6:8f:24:93:79:e0:68:92:21:5f:2d:
5d:86:bf:d8:9f:d7:20:09:14:aa:2b:24:bc:64:62:dc:b2:1f:
d1:e7:6b:67:94:1d:b7:18:80:8f:1a:b8:0b:37:ad:98:d4:be:
a6:2c:62:b8:53:b1:5f:3b:29:22:f6:13:33:e0:79:b5:7e:41:
a0:ff:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:06:06 2025 by rpki-client