Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a613c4-43c3-38dd-87ed-f71ba13d6951.roa
File: d2a613c4-43c3-38dd-87ed-f71ba13d6951.roa (raw, json)
Hash identifier: Jle64/C0ma5RMjbcuBmiDKr6G002mw68KsLs770cSVw=
Subject key identifier: E6:97:26:21:43:7E:9D:85:93:BE:51:35:6F:BA:99:73:52:2C:B1:93
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD21113490743655156F5240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a613c4-43c3-38dd-87ed-f71ba13d6951.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397220
IP address blocks: 156.154.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:11:34:90:74:36:55:15:6f:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=150f6929-4782-4eb8-8118-6ac2758a0eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:9d:12:0f:b4:46:a5:a0:1a:15:3b:47:4d:
a9:b7:6e:06:90:e8:53:50:ee:f5:b0:ad:fe:b7:2f:
e1:72:30:63:0a:f4:4f:ec:0c:fe:88:60:3b:52:19:
c5:00:97:37:f6:8a:1b:4a:2a:b2:12:21:df:67:f4:
d9:54:65:6b:ca:d6:33:a5:e3:ae:9b:43:7d:78:32:
cb:57:ed:fb:2d:69:2f:21:71:03:76:d3:21:d6:0c:
1c:54:4e:08:39:6a:41:a3:de:91:a3:91:ff:86:96:
e5:ef:14:b7:bb:47:de:3b:61:dc:7c:c8:6b:29:fb:
fc:aa:35:75:8a:6b:81:9c:b5:c7:7c:9f:83:89:92:
5c:27:ed:b7:7f:a9:da:20:1b:59:dc:2b:d9:81:cc:
0a:4d:e3:cb:06:51:57:f4:17:fa:71:98:21:d6:94:
86:c4:5a:01:87:c9:c1:3f:fe:61:6f:4e:2a:4e:f2:
37:a1:28:71:27:24:d9:07:00:d0:d3:1c:8f:bf:3e:
04:27:85:fe:cf:38:ad:6b:4d:ac:07:0a:43:51:1a:
3c:06:0d:1b:a2:2f:bf:ed:3f:f9:f2:2b:b3:9a:34:
33:c8:5d:63:66:a7:c5:42:42:e1:e4:ab:ec:ef:1d:
1e:71:a0:97:29:00:64:98:19:b2:8e:c7:3a:15:dc:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:97:26:21:43:7E:9D:85:93:BE:51:35:6F:BA:99:73:52:2C:B1:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a613c4-43c3-38dd-87ed-f71ba13d6951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:87:c5:39:55:98:c0:3f:3b:5c:e4:c7:60:61:ee:50:e7:44:
95:3d:56:80:5b:55:11:40:b9:d6:66:7b:ee:a1:d2:83:b9:8b:
b6:7f:08:33:f6:2f:e9:89:c0:c2:61:5a:44:3e:6d:b8:c6:8a:
fe:61:4d:4e:86:17:4d:13:27:e4:a9:c0:a7:3f:b6:04:f5:80:
3b:14:e9:e2:30:9b:85:93:e1:fe:3d:db:19:9b:a9:a8:53:e3:
c8:0e:00:25:35:f0:7d:e2:da:56:2f:0e:98:c1:2d:8e:61:90:
ba:67:0b:47:57:6d:17:b8:73:67:24:52:a6:4b:1a:48:d9:69:
da:d7:14:a2:3a:99:2a:6b:08:47:3f:b8:ee:70:9e:d1:14:80:
02:e2:68:df:20:c4:d2:f5:7a:4b:88:95:b8:9b:2d:a9:b0:2d:
e3:3c:c7:12:60:47:60:9c:eb:3c:05:6f:14:c8:cb:ad:99:3d:
39:02:35:38:ea:f8:ea:74:fc:02:f0:16:57:20:be:2c:e7:24:
62:03:40:a2:ae:7b:8c:7d:5b:b0:29:be:90:d3:84:7e:bb:80:
09:c8:28:40:57:d9:d6:7c:f2:55:0d:b1:72:03:78:e8:6b:8b:
25:38:a0:05:34:06:ea:21:29:ac:c9:5e:fc:4c:8f:b2:dd:e7:
18:95:e7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:31:29 2025 by rpki-client