Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed8885e1-7e89-30ff-ab51-73614d398a1c.roa
File: ed8885e1-7e89-30ff-ab51-73614d398a1c.roa (raw, json)
Hash identifier: W5UFMBIXMcasEyrzSahFerkCU6w5+WvV2axIX65zMGE=
Subject key identifier: F2:EC:8E:09:F8:57:5A:6C:E7:B9:A1:F7:AB:ED:8B:D7:8C:3C:58:2F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E19AE6C1F2F634A97880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed8885e1-7e89-30ff-ab51-73614d398a1c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397236
IP address blocks: 156.154.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e1:9a:e6:c1:f2:f6:34:a9:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=66014282-c490-4797-928e-e41dd241a3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:84:5c:2e:ff:ce:dc:ad:c7:aa:9d:6e:5a:
e7:9b:30:40:89:a4:4c:19:f0:94:ff:19:9f:87:c3:
24:0b:9e:3a:e9:02:a9:22:5e:8e:58:11:17:32:76:
cd:8f:fc:bc:77:7b:e2:8e:32:46:b1:b7:4e:b2:40:
25:71:44:9d:a9:0a:46:3e:3c:e2:72:df:d6:1b:4c:
57:e4:23:2e:25:d0:47:fd:d5:cb:a0:29:2f:89:45:
50:6b:b5:04:8b:49:8d:7f:d0:a2:4a:70:bb:89:78:
8b:31:a8:a2:1e:1b:d2:47:29:7c:7a:ad:7e:fb:c4:
3a:34:c9:29:8e:69:4a:13:78:08:ad:04:72:02:44:
b7:b6:18:23:aa:68:51:c4:1a:14:8f:2a:85:34:fc:
14:57:f5:1c:5b:99:9e:2d:a5:31:56:53:d6:8e:f0:
06:d5:74:9a:4d:70:9b:bd:db:e2:ba:35:d8:4e:57:
60:b6:be:78:5b:ea:bb:22:9f:d7:9b:24:81:6f:be:
e8:cb:ee:34:14:cf:c0:bc:b6:df:af:9c:5c:82:99:
16:ab:bd:d6:1d:ef:63:d7:5d:a7:7d:4d:df:dc:b9:
79:c3:9d:5f:1f:d3:d0:a9:c1:ac:49:ff:7e:b3:74:
fd:2e:fb:be:2d:89:6b:f7:89:24:0b:5e:c8:07:f6:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EC:8E:09:F8:57:5A:6C:E7:B9:A1:F7:AB:ED:8B:D7:8C:3C:58:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed8885e1-7e89-30ff-ab51-73614d398a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:c2:35:08:3f:09:7c:e0:f0:36:81:ba:fc:18:51:aa:1b:7a:
70:4d:9d:07:1e:63:b1:d6:d0:e3:d3:25:91:46:e5:1c:30:3b:
93:34:c4:70:82:6c:ae:06:54:d9:72:99:0e:fb:05:8e:4c:fc:
ad:31:8b:69:f9:c4:1d:ee:8d:58:2e:3e:9d:22:21:47:70:b7:
04:99:b9:89:c0:1c:27:65:5f:39:e0:53:3e:5a:c0:48:5f:b6:
b7:b6:49:b3:a8:34:f1:aa:af:4f:4e:d6:88:1c:c3:1c:53:a3:
7c:80:95:ad:12:4b:8b:6f:4d:02:ea:4b:27:33:19:48:a7:39:
b8:56:34:b7:48:37:61:9d:7f:eb:01:5b:02:7e:0f:68:be:8c:
43:fa:58:a5:fc:e7:5d:1d:c0:27:cf:b2:7e:17:f5:83:93:e3:
69:65:2f:ec:4d:ca:ec:11:94:c5:95:97:fe:e8:7b:6f:c2:5b:
5e:12:1f:db:ba:ba:87:9c:c1:36:e5:ad:95:2f:da:7a:70:54:
cc:72:a4:dd:f3:da:22:12:b4:d9:5c:3c:04:2d:fd:67:8f:39:
3a:3c:cf:ae:93:df:85:93:02:27:3d:e3:fb:c6:55:ed:3d:ec:
87:c0:28:35:29:a3:44:c8:e7:3a:c2:1d:e3:47:18:70:35:a2:
7d:68:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:48 2025 by rpki-client