Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfb50bcb-3477-30b6-9e55-909b7df01267.roa
File: cfb50bcb-3477-30b6-9e55-909b7df01267.roa (raw, json)
Hash identifier: VneJvgzngAIYXWd6A1Lcvy0whOBGeCHUR/HxM4bV9tk=
Subject key identifier: E9:58:F9:AD:53:84:19:83:1D:00:87:4F:8D:9A:B0:9F:EE:BA:24:C9
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB6BE6E3F2AFA447DC01A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfb50bcb-3477-30b6-9e55-909b7df01267.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397236
IP address blocks: 156.154.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:6b:e6:e3:f2:af:a4:47:dc:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=f31c208b-5d42-4d0b-b3b7-50b2751cc874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:03:04:85:51:75:f0:d3:76:26:72:b1:0a:
7a:2c:04:34:07:98:f5:b5:d5:b5:82:dd:ef:b6:7e:
56:29:c6:5d:c4:73:8a:a4:d8:19:2f:7e:84:5f:34:
78:40:ed:68:cc:88:fd:48:39:20:82:42:57:24:20:
4f:c3:9d:e8:43:3c:81:76:2f:5f:ed:b4:16:33:33:
ca:5e:b1:33:9a:19:fd:cc:34:4c:fd:97:99:30:db:
97:c0:2c:14:7f:83:8f:cd:64:12:f2:f2:7e:6b:46:
25:c8:ce:c0:5d:5b:02:42:8e:1a:33:35:a5:ff:14:
c9:f5:1b:47:a6:bd:6e:83:e6:96:96:f8:32:43:d9:
1b:3d:c0:6a:af:f8:9f:80:58:6f:8c:0b:00:a5:4f:
36:4c:30:ab:22:cb:fa:59:0d:ae:da:bc:3f:af:59:
f9:bd:57:d5:80:28:66:9b:68:53:ee:6d:f1:58:4d:
d4:f0:d0:9e:7e:78:ed:4c:2d:39:b3:d0:78:0c:72:
a3:5a:46:44:f5:7e:41:cc:3f:d2:25:9d:6a:4a:8f:
6a:a7:69:0f:1a:07:e7:d8:67:04:9f:2b:61:39:ee:
89:de:49:62:c0:78:83:e2:0d:9c:47:c2:ba:c6:a3:
32:52:ad:19:d9:98:33:c4:95:7f:74:45:c1:32:29:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:58:F9:AD:53:84:19:83:1D:00:87:4F:8D:9A:B0:9F:EE:BA:24:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfb50bcb-3477-30b6-9e55-909b7df01267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f1:3e:88:f0:bf:71:eb:30:8e:9d:06:e6:a9:58:83:ef:66:
e8:d6:fa:95:7b:05:75:85:1f:f0:3d:82:44:78:ba:fd:6c:87:
11:a1:18:58:eb:74:f0:13:88:62:25:2e:b6:d8:b3:93:e6:ee:
98:fd:ef:59:23:5a:b1:44:ea:de:12:0b:ee:97:fe:57:36:aa:
73:ae:d8:43:f6:88:a1:c2:e5:a6:a9:0d:e6:21:9f:3b:bd:ff:
18:71:d7:6a:d7:17:9d:f7:32:4b:35:78:60:9b:66:9f:69:b3:
3d:4a:24:94:56:9a:dc:e5:16:b6:b7:a1:31:eb:77:d6:7c:ee:
bb:6d:fd:dd:72:04:21:25:9f:1b:b5:96:f9:f9:56:84:5f:1a:
9d:7c:84:cb:3a:50:d5:52:8b:25:89:89:7d:60:50:ea:1b:93:
37:3d:6b:ee:09:63:ad:e3:ea:b9:40:22:09:0e:45:e1:23:27:
1d:cb:eb:f2:92:97:b8:07:1e:72:8d:68:3a:d1:08:fb:1d:88:
2e:41:4e:4e:3f:1c:cc:66:e8:c1:3d:e8:41:e1:f0:5c:1e:36:
20:bb:9f:ae:02:78:e8:97:43:f9:f4:ca:21:d1:ea:88:f2:e0:
e4:11:8e:a1:20:c7:0e:01:8d:cc:c9:95:fd:f9:af:91:e3:49:
32:73:7e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:21:52 2025 by rpki-client