Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd2aa74f-f5f0-3130-988f-243eb0b63db5.roa
File: cd2aa74f-f5f0-3130-988f-243eb0b63db5.roa (raw, json)
Hash identifier: JyOvDkittSepQVwTTqLBTReu6LsDPQ/ksoRC1E/j9WI=
Subject key identifier: 57:9C:04:B0:64:37:C3:09:24:3A:3E:B7:4E:87:D5:08:35:27:7B:B0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B6428AD7ED0A1E2F06E4640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd2aa74f-f5f0-3130-988f-243eb0b63db5.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397241
IP address blocks: 156.154.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:28:ad:7e:d0:a1:e2:f0:6e:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=07a151f3-7a32-4d45-9926-799dbd4100f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:76:09:fb:e0:62:fc:05:ba:64:31:44:4c:
d6:2f:9b:dd:88:0f:6d:94:6b:a5:1a:d1:a0:cf:f5:
bf:63:19:e1:a5:0e:41:33:3c:2b:f1:80:84:bf:0d:
bf:70:b8:f2:b3:b6:c6:e0:83:3b:51:f4:a7:1e:c5:
db:e9:48:f9:7a:59:53:c1:93:16:9d:fa:b1:36:2c:
93:3e:e9:2d:1e:46:89:c3:a1:d1:d8:aa:a1:d3:e3:
07:a4:02:ac:b4:68:b4:bc:f5:78:fe:4f:59:75:c0:
06:03:b1:cd:c1:23:c8:b0:2e:a5:12:20:8c:e5:23:
1a:17:78:e2:01:e3:7c:1c:5a:dc:01:8f:17:4d:31:
16:23:3e:b4:b4:5f:14:52:0d:a7:85:b4:92:55:91:
95:86:de:2d:bf:fa:24:19:f2:a2:47:69:22:35:0a:
f4:40:63:ea:7f:de:41:13:84:7e:eb:6b:0d:cf:d9:
82:65:7f:5b:3b:87:7d:14:ba:47:80:1c:7d:08:8e:
a5:b7:38:5d:f4:c5:35:20:49:e4:8c:c5:f1:8b:1f:
0f:3a:18:31:fa:fb:da:48:1e:4f:b7:d8:99:e2:e4:
2a:6f:b2:67:68:a1:89:99:78:ad:04:46:c9:9b:ec:
f1:a7:25:44:8e:94:56:58:eb:b4:c8:25:e5:b7:de:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9C:04:B0:64:37:C3:09:24:3A:3E:B7:4E:87:D5:08:35:27:7B:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd2aa74f-f5f0-3130-988f-243eb0b63db5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:67:09:26:d1:f4:67:e8:49:17:3c:7c:82:82:de:b5:96:48:
15:6f:53:73:b8:8c:af:18:5b:44:3e:e8:ba:b1:1d:12:8e:97:
34:35:1a:65:93:04:a3:bf:ef:1a:36:0f:aa:9b:3c:03:36:96:
33:e7:44:a6:96:4c:cb:86:8a:72:b2:00:db:5f:1c:86:36:58:
84:c0:37:41:32:0d:6d:a0:8d:3e:c7:7c:fd:6e:b5:69:8d:23:
53:93:e6:35:16:b1:89:72:fe:5f:78:7c:4e:46:a2:62:c6:48:
2b:d2:c1:97:cb:99:15:47:af:fa:a7:07:82:32:e0:31:65:02:
86:35:85:14:a1:9d:68:04:03:e3:47:e1:b4:7f:37:47:0b:11:
64:0b:22:28:5b:5a:ef:54:8b:fd:b5:d6:73:99:70:63:2e:91:
aa:63:35:3b:6f:a6:10:b3:36:e9:6d:ac:bc:b3:a3:ef:d0:dd:
47:c8:0f:5a:3c:da:7e:bd:a9:bc:fd:4a:49:d3:ea:6c:a1:76:
a4:ed:67:60:5d:df:07:8a:e2:d1:36:66:f8:6d:25:2d:7d:05:
ec:c4:88:fc:eb:59:ee:1c:99:0c:43:b3:eb:a0:fe:e7:1d:32:
c6:52:8c:7e:61:1c:13:1f:53:9a:20:bf:7a:1a:b1:bd:51:af:
9d:6f:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:07:10 2025 by rpki-client