Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2353ee5-ac4a-3a32-9092-e0f094498d5d.roa
File: e2353ee5-ac4a-3a32-9092-e0f094498d5d.roa (raw, json)
Hash identifier: i/BuU+9NlSGKmQK20RGip+5UJjeu630LNyc7DjlNKSw=
Subject key identifier: A1:3A:DE:44:7A:32:4F:09:71:B4:E4:13:F0:68:59:18:78:5C:7B:01
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996590525753960E9126780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2353ee5-ac4a-3a32-9092-e0f094498d5d.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397217
IP address blocks: 156.154.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:59:05:25:75:39:60:e9:12:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=9e1ccaf7-4747-407b-ac02-9985392f9ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:a2:98:cb:08:02:30:86:b6:98:a2:fa:0d:
f6:dc:6e:53:47:64:42:28:bb:94:b7:cb:a0:1d:dd:
b3:e5:27:12:0d:9c:8b:3c:75:89:72:aa:5b:a9:78:
99:49:51:bd:8f:86:f1:4b:d8:0c:f8:56:35:ca:29:
17:b9:95:92:58:11:75:9a:46:0c:de:75:b0:e4:f7:
8f:36:0a:88:1d:13:60:a3:b0:5a:8f:3c:72:78:6f:
2e:6f:78:58:37:00:0c:64:47:de:6f:e3:bc:44:93:
46:e0:14:61:6a:8b:a2:90:fe:6e:08:78:a0:b8:7a:
23:97:0d:de:ad:18:20:6f:3f:b2:ab:42:f7:29:67:
db:04:83:57:ea:ff:c4:60:f1:a3:a6:7f:da:f2:69:
05:9b:55:b8:46:bf:d7:7b:e6:cd:29:44:84:ed:24:
3f:04:a7:80:93:bd:8f:e0:1b:1a:95:18:3a:eb:55:
52:d4:ac:35:6d:6d:d3:85:16:b6:04:c4:c1:ca:dd:
1a:a5:b7:23:53:6a:77:ba:65:43:f4:77:e1:85:94:
06:a6:ef:40:e0:89:05:2e:08:32:7b:5b:a9:f1:48:
de:0f:3f:60:a3:02:a5:59:86:da:c1:25:d8:f5:4b:
09:01:12:e9:b7:84:b2:b9:e7:7a:39:5b:0f:55:6e:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:DE:44:7A:32:4F:09:71:B4:E4:13:F0:68:59:18:78:5C:7B:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2353ee5-ac4a-3a32-9092-e0f094498d5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:75:ca:bb:39:4d:21:82:83:8b:71:7c:c5:3e:4a:9e:4c:6b:
0f:37:b6:65:e7:d2:e8:bd:8d:ac:16:4d:be:75:72:dd:58:30:
49:30:45:45:c4:17:fb:d7:71:17:ab:52:a2:29:de:36:24:ee:
cf:73:71:9e:8e:b0:66:c0:9c:23:bb:01:97:e7:ca:45:3a:7c:
ae:49:1c:26:34:01:d3:75:59:23:19:67:f1:08:71:06:c6:cc:
7d:41:42:e7:00:57:06:a1:19:e9:62:96:0b:66:a2:21:c7:54:
a5:b3:6a:65:95:4a:44:99:e9:2d:17:db:ea:b7:0a:93:84:c4:
e6:fd:4d:13:90:74:1f:79:a8:74:b6:fd:ec:7f:45:fa:ff:10:
d8:f4:30:6a:32:fb:cb:39:9f:08:1d:9d:ec:c1:57:62:24:0a:
70:f5:fe:ea:59:a4:d0:f0:e2:4b:d0:24:92:9f:0f:72:89:70:
b5:50:85:f9:c8:ba:84:15:c0:7f:2c:24:a1:8a:ae:20:64:69:
95:d5:dd:ba:d9:59:d0:aa:d7:ae:fa:b0:93:6e:67:ef:e2:80:
c0:b6:63:6e:f8:54:b2:51:99:08:4c:95:ff:7d:d6:ae:7f:e7:
06:96:36:30:fd:56:e4:bc:78:d3:a8:9a:51:43:c3:3a:a0:d1:
03:2a:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:46 2025 by rpki-client