Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c27e7baf-c7a4-3ba4-92a6-5771019c424c.roa
File: c27e7baf-c7a4-3ba4-92a6-5771019c424c.roa (raw, json)
Hash identifier: AtPD2vYMqFn0ez80fgkybjBwtddnLq6PP53+dTPVkZo=
Subject key identifier: 6C:52:AF:DE:41:8C:F2:85:D6:B5:E4:46:F6:6B:56:5F:F4:4E:9B:6C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848DF4F1FCFE032F1CAA857A600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c27e7baf-c7a4-3ba4-92a6-5771019c424c.roa
Signing time: Thu 13 Feb 2025 19:51:34 +0000
ROA not before: Thu 13 Feb 2025 19:51:34 +0000
ROA not after: Wed 14 May 2025 18:51:34 +0000
asID: 12008
IP address blocks: 156.154.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:df:4f:1f:cf:e0:32:f1:ca:a8:57:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 13 19:51:34 2025 GMT
Not After : May 14 18:51:34 2025 GMT
Subject: CN=4faf630e-6aab-40cd-98e9-845ce43a222b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:7c:7f:de:40:b6:a8:f4:44:ca:b8:da:b9:
d1:34:69:0c:d7:d3:a8:f6:51:8b:78:85:d8:c5:c1:
9b:eb:f4:1c:ed:f7:1c:fe:cf:bc:d0:de:36:b9:b1:
de:32:27:6c:66:01:56:04:d1:55:87:42:ce:ee:f2:
6d:1b:df:24:dc:be:48:57:e8:81:ab:0b:70:64:cd:
96:77:4f:c5:34:aa:c2:d5:a3:43:f1:1d:ae:8a:4c:
43:54:59:af:e8:59:62:e9:f5:02:99:f1:51:c9:a6:
d9:61:bb:e3:55:69:62:2c:bd:1f:fc:f9:8c:02:61:
da:d6:36:2f:5b:99:31:fa:cf:3b:19:e3:0b:b0:11:
89:15:83:0e:61:81:a4:b8:d2:b2:77:28:b4:9e:55:
13:17:b6:9b:71:9f:1d:1b:65:1c:61:4c:42:65:38:
23:cb:18:3e:f2:d1:59:52:bc:14:cd:26:4b:a6:3c:
42:f2:ee:93:56:2b:38:80:fb:ac:4e:ec:9f:c4:72:
32:38:99:d8:ae:c8:f7:a5:35:cc:2d:4d:7a:e3:c7:
06:12:2c:89:09:6a:00:12:2e:04:42:58:45:8d:ff:
cc:b3:bd:d8:60:b6:f7:33:0b:92:2b:0b:c4:64:9b:
06:c1:ac:75:6b:f6:a5:3d:0a:22:af:aa:59:66:a6:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:52:AF:DE:41:8C:F2:85:D6:B5:E4:46:F6:6B:56:5F:F4:4E:9B:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c27e7baf-c7a4-3ba4-92a6-5771019c424c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:8a:66:df:57:b8:f3:5a:89:73:93:18:76:e3:45:28:83:bd:
3a:90:50:bd:5c:67:ff:58:a1:7c:4f:f7:13:1e:28:81:50:51:
b0:6c:6d:c5:73:e7:26:38:91:69:05:88:d3:9e:8c:44:34:7d:
80:cb:1d:17:4f:dd:aa:e6:4e:6f:62:74:9a:07:23:f1:3d:27:
1f:7c:28:9b:88:ae:d0:89:f8:d9:58:1b:cf:d0:05:27:17:91:
2d:9f:1c:b6:6f:75:25:1e:e2:51:91:de:33:dc:5d:d0:31:80:
42:14:a3:c1:29:e2:b0:50:04:1d:05:25:3a:a6:e8:9e:35:f9:
3c:2a:d5:08:cb:7f:d9:84:af:f2:ce:b0:67:9a:ee:8e:1e:ec:
8c:af:ad:c7:50:ae:1f:d7:58:1a:5c:7f:ac:ea:fa:ee:f7:fb:
3d:94:11:cc:56:47:b7:c4:69:fd:cf:7f:ad:89:57:69:0c:08:
9c:9a:dc:be:a6:03:71:c3:41:a7:55:fa:c7:71:24:a3:5a:a1:
c4:81:42:b1:6c:c0:e4:a3:53:28:02:b8:f0:29:15:41:7d:f3:
7e:d2:08:34:89:cd:56:bc:cf:85:60:9d:3a:3d:26:3a:80:9d:
6f:3d:f8:79:47:9c:98:50:0d:e6:40:62:61:5e:f5:f2:f8:7c:
16:be:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:20 2025 by rpki-client