Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c136fbb0-dbe2-3086-9200-4638873b7ba5.roa
File: c136fbb0-dbe2-3086-9200-4638873b7ba5.roa (raw, json)
Hash identifier: 0FHZ7ogpqYPAgQ8JU9ovky3DZoc2Y75wi8jDxf756s0=
Subject key identifier: 42:2A:82:86:D6:89:54:F4:B8:4B:FC:40:F4:D7:92:1E:75:A5:38:BF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD21021E9B3925425C2659CC
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c136fbb0-dbe2-3086-9200-4638873b7ba5.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397220
IP address blocks: 156.154.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:02:1e:9b:39:25:42:5c:26:59:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=f7ea424d-fdb9-4a1e-86d6-9d4e8eb18601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:42:dd:72:76:99:7b:0d:f5:f7:69:89:db:c3:
67:78:1e:0b:74:90:ff:e3:76:20:7f:69:10:23:10:
1b:e2:67:51:b9:db:f8:a4:01:38:47:08:b1:45:d8:
e1:75:2f:61:cd:36:f2:d3:a2:d3:72:2e:0c:7d:3d:
07:a1:d9:9a:07:53:33:27:c8:cf:a5:82:23:33:66:
ad:83:34:78:4b:3c:02:f6:2c:cd:19:06:c5:dc:7b:
f1:1b:8b:dd:e8:02:be:45:b9:5b:28:1f:47:72:ca:
2d:7b:84:2f:dc:f7:67:91:1d:34:55:79:01:7a:c3:
7b:b2:6a:70:2e:04:08:60:63:11:37:6d:ea:54:88:
97:24:37:9f:79:e4:64:73:ec:e4:65:66:e3:f4:00:
e1:f5:a1:08:b5:ca:16:d4:0b:a3:9b:e7:48:f5:85:
29:0e:49:85:e2:1b:1d:ee:3e:c0:e4:3d:f9:9a:95:
9e:88:c2:95:23:5c:9b:7f:29:80:b7:01:2c:6a:7e:
a7:3c:0c:21:cc:c1:1e:d3:59:06:44:11:0b:bc:29:
d5:9a:2c:d7:12:1c:a2:09:2a:65:7f:cf:c4:c9:d3:
4d:f3:7d:1c:1a:f0:27:f6:bd:f8:ac:19:80:d1:74:
a8:ed:46:d9:3e:dd:37:b6:73:74:74:53:ec:3b:35:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:82:86:D6:89:54:F4:B8:4B:FC:40:F4:D7:92:1E:75:A5:38:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c136fbb0-dbe2-3086-9200-4638873b7ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:ff:48:c6:66:a9:3c:ab:03:61:5f:2b:d9:5c:de:28:6f:ff:
f4:bd:57:d6:35:0a:6c:c3:46:10:22:a7:6c:f0:95:ce:1a:64:
65:f4:5a:eb:f2:ce:71:d8:ca:ed:d3:59:0c:c3:6e:f5:aa:7c:
2f:b4:e4:3e:af:3b:25:67:e4:3e:f4:e5:91:e3:9e:4a:3a:90:
1e:7f:a1:fb:53:b8:5c:8b:c5:84:8f:ce:21:03:a2:57:17:9b:
a8:42:17:a6:19:4d:b7:5b:19:a4:73:90:32:b5:12:8a:fd:63:
e7:d7:38:45:a0:da:79:78:db:1e:47:2b:6c:f0:fa:e7:30:94:
07:fe:15:b2:3c:ae:f5:10:cc:d8:c9:b7:5d:e2:04:40:d2:ac:
81:99:b4:82:ca:d3:a0:15:97:61:53:e1:a6:08:20:ee:ce:a2:
b7:05:0b:05:71:00:91:a6:4c:e2:f7:47:01:d3:e6:a3:36:c8:
6c:31:a3:88:1f:68:70:aa:62:0c:56:61:c9:cc:f1:1a:de:f9:
c1:cc:f0:9b:f7:91:b9:83:ea:32:d2:da:fb:dc:39:6d:ae:fb:
46:47:25:14:49:43:54:dc:eb:33:8d:5f:7f:b0:42:56:ac:a5:
7b:2b:48:df:71:7a:33:47:2d:9c:cb:7a:90:51:db:c0:0a:39:
7b:4f:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:11 2025 by rpki-client