Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce7bfcc0-805e-39c2-b586-fb9ab78e1add.roa
File: ce7bfcc0-805e-39c2-b586-fb9ab78e1add.roa (raw, json)
Hash identifier: 94EIK4GmpiR5Ys7n133lkIccWjpKftNY2ictj13zVbw=
Subject key identifier: 37:07:9B:05:41:DE:16:DA:5D:86:97:F2:86:FE:47:03:3B:72:CD:49
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DAF7F5821575F9938A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce7bfcc0-805e-39c2-b586-fb9ab78e1add.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 12008
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:da:f7:f5:82:15:75:f9:93:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=7fb85486-1237-405a-b197-fd4e3acc1a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:57:d7:d6:70:bd:be:73:de:95:d7:b6:98:
d4:be:0c:96:dd:2d:21:29:6a:06:9d:eb:1e:22:99:
6e:06:dd:f8:85:d2:13:3d:18:16:0a:a2:ab:79:38:
53:11:fa:8b:e7:3c:10:20:e8:42:9b:56:44:62:8f:
2d:7b:01:1b:ab:90:47:71:8d:19:64:1f:73:e3:fe:
e0:57:ae:30:a0:33:ee:8c:b0:03:bc:56:99:4d:d0:
6d:e3:d1:b3:50:dd:fe:76:8a:42:0f:0b:77:00:1c:
18:0e:b6:45:b1:a2:a7:6f:9c:f1:67:bc:ec:47:55:
c4:d3:5e:21:82:a8:66:6c:48:ee:5e:4f:c1:0a:bd:
79:e5:29:7c:16:4a:68:b4:5a:0b:b9:6d:8a:c3:96:
71:6b:ed:05:88:51:c7:8e:5c:d7:98:1f:43:a9:d5:
95:e2:e5:fb:57:ff:6b:dd:68:d6:51:c5:25:3a:ce:
8b:44:f5:59:10:44:91:a5:ce:68:c2:33:3b:ea:a3:
ed:9b:a6:17:3e:a8:db:3c:09:e0:7f:ff:d1:df:7d:
ce:c6:36:87:d0:6b:1c:4d:23:99:ff:b3:88:1a:92:
ac:10:b1:fb:28:dc:3f:03:31:38:03:77:a0:9f:b7:
ff:44:16:52:1a:b0:fc:67:ff:46:3e:aa:05:4f:b2:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:9B:05:41:DE:16:DA:5D:86:97:F2:86:FE:47:03:3B:72:CD:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce7bfcc0-805e-39c2-b586-fb9ab78e1add.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:90:59:37:3b:99:9d:a4:e6:f8:d6:9b:46:c5:9d:59:ff:ce:
ad:c8:82:e8:5f:ec:9b:77:36:13:0f:69:39:15:34:4a:2e:df:
7c:61:5c:35:ac:51:56:8e:f3:01:81:d7:af:2c:65:c1:05:27:
ae:0f:ed:e7:b6:32:c3:0f:5f:fe:03:b4:74:f4:a3:3b:2c:10:
00:f3:c5:1a:1c:1a:21:e9:be:ee:d8:27:92:ac:9d:90:b8:93:
49:d2:4a:f0:a3:8e:20:00:51:6d:b3:6e:d8:83:9a:87:79:88:
18:3c:b2:5e:4e:17:98:9a:5d:7e:c0:f2:89:34:fa:0c:83:14:
50:cd:5e:9d:f9:e4:09:25:77:cb:1b:1a:c8:6c:51:2b:df:22:
1c:c2:53:77:08:34:03:02:94:b7:4e:f4:96:d6:5e:d6:34:a6:
b9:9e:48:17:11:dc:50:41:7b:c9:bc:a4:e4:e3:db:eb:ee:2a:
4b:df:83:7f:20:f2:ab:6f:32:20:f0:45:02:ef:70:b4:21:90:
fa:8e:f0:79:ab:85:57:67:92:9c:00:2e:0e:70:1c:94:99:ae:
f5:ce:7b:96:b5:52:c7:a6:7e:51:1d:ba:f6:ae:a5:60:aa:20:
29:81:dd:d9:d9:92:b4:d5:9c:e3:1d:1a:a5:74:d3:25:2e:b2:
da:4c:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:57 2025 by rpki-client