Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2e3fa63-a12c-3865-8f65-ea5f1d881285.roa
File: e2e3fa63-a12c-3865-8f65-ea5f1d881285.roa (raw, json)
Hash identifier: 3PI4WQgsnNIZ0v+oQcK1hEnzHcgq/ZzbFJSFbfPUgaE=
Subject key identifier: 56:4C:55:03:32:6B:59:86:6A:A7:8B:D3:EA:85:BE:AF:9C:AC:C0:9F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246F0B2FCC4459895027E00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2e3fa63-a12c-3865-8f65-ea5f1d881285.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397241
IP address blocks: 156.154.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f0:b2:fc:c4:45:98:95:02:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=8dbb1ed4-4ba8-4ba9-a241-f5abcf45b164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:20:35:77:fa:d1:0c:e5:fc:c2:b8:e1:48:
3d:64:21:27:a6:ca:1e:16:e3:7e:91:b2:6e:a4:e3:
8e:ae:ed:36:bb:7a:a8:92:e5:fe:ad:d9:21:f0:85:
92:51:8b:13:00:c5:db:8a:77:b9:28:7e:8f:52:c4:
af:c0:d6:68:f8:ed:82:c7:46:b5:55:34:76:94:bf:
86:1a:a0:c7:4d:85:1a:80:dc:80:28:06:4b:c2:33:
0e:3c:6c:ca:ac:f3:9d:e7:4c:80:58:4b:e3:41:9f:
d6:78:57:48:09:1d:31:ab:2a:47:c2:37:6c:b4:50:
cb:9b:da:e0:ce:14:86:3d:ab:ba:7c:02:0f:13:ea:
83:67:c7:48:96:34:a3:d6:c3:0d:09:bb:14:74:03:
0a:e5:72:91:54:73:66:aa:83:2c:fb:97:da:ec:d2:
79:df:cb:f0:d8:cc:90:1e:00:f9:0f:ec:d3:9e:8e:
0c:7c:7e:f8:e6:40:44:b2:0d:55:8e:92:bf:10:35:
39:23:9a:e4:e0:4d:73:b5:e8:14:35:19:73:67:af:
3f:72:db:f7:4a:bf:9f:32:b2:cb:27:62:58:c9:e5:
6e:ca:93:54:1d:0b:9a:41:55:e7:1f:be:c3:7b:f3:
79:87:35:27:91:0c:c3:34:e2:1a:3c:4b:6c:1b:e2:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4C:55:03:32:6B:59:86:6A:A7:8B:D3:EA:85:BE:AF:9C:AC:C0:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2e3fa63-a12c-3865-8f65-ea5f1d881285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:4e:43:4d:01:d3:e2:57:7d:9b:16:50:7e:2d:d1:a5:03:0f:
fb:6e:3f:0f:a8:b1:01:8d:ff:13:76:11:43:f0:39:32:22:88:
bd:ae:9c:54:0d:99:e4:b9:e6:87:32:7f:59:fe:3a:fa:c6:0e:
d4:60:ac:b6:36:e6:ae:78:6b:e0:32:6f:27:51:d5:06:97:08:
aa:bb:b4:80:97:d0:07:c3:cb:69:0a:9c:33:8d:cd:d7:0f:93:
57:a9:02:d0:6a:12:5e:95:f2:57:80:8c:f7:df:39:c0:0c:15:
b9:97:d7:f8:60:1c:c6:ed:73:52:01:d4:4d:85:de:64:af:64:
1f:cc:f4:14:31:b8:3e:8d:5c:58:cf:a6:e2:92:48:ee:f2:56:
8b:17:44:da:67:69:fe:dd:47:0d:1b:4b:ce:7f:2a:af:59:c5:
c2:dd:38:d3:51:c1:75:8d:f1:78:3f:be:6c:47:7c:df:a7:ce:
73:c5:04:58:d4:b0:db:f1:9a:c9:5e:e1:e5:fc:5d:35:1b:de:
2c:22:6a:e9:f6:19:00:51:db:55:81:ff:87:04:e3:40:17:2f:
a6:a6:28:06:e2:a5:a9:ce:ab:91:cb:e8:08:f1:47:c2:73:e7:
af:05:c1:55:39:ca:66:73:43:82:60:74:7a:3d:cf:a2:86:1d:
5f:ef:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:36:47 2025 by rpki-client