Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2224658-da6f-3a55-af5c-be1f13aff2b9.roa
File: e2224658-da6f-3a55-af5c-be1f13aff2b9.roa (raw, json)
Hash identifier: kZPuA/dqDlYHfYNdrsvOMDcL67BsI6cGXPHchpRrH8I=
Subject key identifier: 64:5D:AB:BB:41:F5:20:28:C8:62:41:E1:C9:A0:90:7E:7D:3F:56:55
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965CCCC9908B9F3090A340
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2224658-da6f-3a55-af5c-be1f13aff2b9.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397228
IP address blocks: 156.154.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5c:cc:c9:90:8b:9f:30:90:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=2998bf66-4b8c-4a48-a785-0fad5f328fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:b4:03:c5:c0:8d:a8:14:a1:85:b7:96:be:
32:03:18:3f:c0:a4:bc:76:7f:73:70:58:64:4c:5a:
fe:7a:9a:da:0a:cb:56:96:60:29:44:2c:ba:02:0f:
0d:4f:cb:1e:01:7c:e6:1b:9a:7c:6c:85:34:44:f3:
1c:97:d7:17:d1:c4:ff:b0:54:a0:a9:95:e2:8d:19:
0d:d3:bf:87:ff:2d:14:9b:d7:1f:c4:52:65:bc:2d:
01:42:f2:e6:c0:17:f2:2e:ee:25:61:57:f5:1a:87:
09:b6:5c:c9:13:9b:17:00:aa:0a:1e:ee:d2:8e:8e:
69:65:b7:70:a3:1d:15:47:18:27:1a:e1:ee:44:95:
76:79:aa:9d:b8:a5:41:6d:61:0c:87:a0:08:90:ca:
7b:20:a3:dc:67:82:03:e5:8c:26:3c:cd:19:20:8e:
6b:47:51:28:59:13:79:84:fa:e5:a8:a1:7f:f6:23:
10:9a:4e:d6:86:11:5f:73:a0:51:a7:c8:45:69:ed:
d4:f1:4b:fe:27:55:5b:4a:9b:cd:d0:9b:ad:e1:16:
fd:de:63:8e:ab:3e:2c:4d:1b:04:05:7f:77:4b:62:
9b:d8:f3:e7:f3:15:3c:df:21:8b:50:de:90:79:20:
a0:94:96:ba:14:83:77:54:84:18:91:a3:e9:05:c8:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5D:AB:BB:41:F5:20:28:C8:62:41:E1:C9:A0:90:7E:7D:3F:56:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2224658-da6f-3a55-af5c-be1f13aff2b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:c4:ad:ef:44:fa:8a:a4:01:ac:a6:17:89:62:ac:da:7d:cc:
8e:8a:9d:42:ac:17:5c:d2:20:00:39:3e:55:8f:1b:47:a9:52:
41:0a:64:16:65:37:94:7a:e8:ee:cc:bc:40:ae:f2:87:c6:8f:
a5:28:9a:ae:89:20:38:3a:1b:30:c2:ec:0c:c2:5e:d0:15:95:
0c:0d:6b:39:8d:bb:da:f8:65:89:ff:0b:5a:96:df:a0:7b:7a:
dc:69:0c:1c:0f:0a:ed:51:77:d4:cc:3a:d4:6d:ca:82:87:2e:
01:64:9f:78:0f:a3:1e:4d:ba:c0:2e:0a:24:e2:3b:c5:df:d7:
5e:79:d4:67:7c:ce:2f:74:bf:25:d0:05:59:f6:04:a0:00:a6:
f8:02:f4:c8:52:9e:d2:09:d9:0d:9f:26:4b:9d:07:db:33:d5:
09:01:46:75:d4:26:68:03:36:0f:84:98:f5:86:df:a1:25:d9:
71:d3:dd:fd:87:2e:c4:30:d2:e0:73:41:9a:91:dd:ae:12:31:
c5:47:73:36:6a:ec:e8:35:29:de:18:be:d5:1e:cf:b3:50:ae:
df:26:3f:30:c2:04:c9:d6:d8:28:09:ec:6b:74:87:0d:c2:90:
f5:4b:45:e9:e3:cc:13:a8:82:f3:8e:e9:a1:42:80:b8:88:f9:
31:61:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:03 2025 by rpki-client