Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3d35a51-4a53-32b0-aed6-1d3373d3495e.roa
File: f3d35a51-4a53-32b0-aed6-1d3373d3495e.roa (raw, json)
Hash identifier: 5WuRDWhkuKyE3GOYZnAPIuIf6VYfMsdWPPKXf4u5rNY=
Subject key identifier: 13:3A:61:57:71:DA:78:7E:95:53:97:69:07:36:82:4A:5F:5C:8D:98
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99639A92B3879C286E5F580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3d35a51-4a53-32b0-aed6-1d3373d3495e.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397214
IP address blocks: 156.154.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:39:a9:2b:38:79:c2:86:e5:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=37675aab-bf64-430c-8816-1d1caf50e2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:da:76:fa:a6:90:04:ff:03:95:ee:3d:1c:
17:5a:3b:3c:b7:20:d5:92:3c:56:de:f2:9d:a2:c9:
0d:13:e2:0c:59:99:20:f3:ea:b7:be:6a:df:85:ac:
31:9a:9f:cc:f7:d5:fe:86:91:2c:3b:7d:1f:14:81:
cf:3c:95:f4:6a:ad:dd:bf:e2:ff:2d:a5:e5:1e:c4:
1b:77:e0:41:f4:21:29:99:82:77:d9:6f:e2:36:b2:
f7:00:4f:79:f2:5c:11:aa:f4:27:28:3e:a8:c8:b8:
6d:81:e2:1b:48:dd:ab:62:ba:91:39:bd:7c:a3:05:
71:75:cf:8c:27:87:b3:32:9d:37:e8:59:74:6c:d3:
67:13:ee:36:e4:02:56:f6:01:98:7a:d2:8c:8c:56:
03:27:02:4c:a8:15:da:4a:9b:b2:d2:c5:2a:ad:64:
8b:a4:4d:0a:ad:49:27:8d:dc:f4:f9:37:83:08:ce:
c6:f8:1b:b7:96:3a:d1:f4:88:dc:43:18:fd:16:51:
a2:31:4b:98:98:e7:39:14:1d:76:cc:f1:77:c8:4b:
af:a2:a5:19:e4:b3:f0:36:ac:f1:3a:69:4c:86:f8:
a2:21:ee:89:9e:68:c1:1f:99:f6:39:22:d5:50:00:
c4:39:fa:8e:47:8a:e9:0f:1e:ff:60:14:3e:52:8d:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:61:57:71:DA:78:7E:95:53:97:69:07:36:82:4A:5F:5C:8D:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3d35a51-4a53-32b0-aed6-1d3373d3495e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:fc:d9:73:8c:b4:fc:00:55:c3:1c:48:74:4f:ed:ac:70:28:
89:e7:79:04:6b:6f:ab:95:aa:4d:13:7d:62:a9:05:b0:4c:9b:
f8:18:97:6b:39:0f:e4:9c:51:1d:42:0b:14:30:84:32:aa:43:
32:ee:15:a4:d0:97:56:7a:8a:fa:b0:b3:b3:fd:b0:58:9e:0a:
96:18:87:1f:25:ee:e1:55:fd:d5:d0:55:fd:1f:8b:a0:12:91:
d2:99:4c:a0:c1:99:f8:07:a9:36:cf:d9:f4:2a:8c:26:de:5e:
69:ab:11:96:d4:0b:2d:81:87:37:e3:e7:28:31:3a:a7:08:dc:
05:7c:f9:c5:d0:e0:ac:e9:91:fa:dd:67:0e:7f:18:f1:28:33:
16:85:82:5b:6a:d7:8a:15:ea:26:2d:0f:06:35:6a:2a:ed:83:
4f:43:7e:0e:21:79:2a:32:17:57:78:52:33:79:20:90:c6:32:
05:54:82:61:1c:8d:63:0a:f9:69:83:fe:f0:a3:47:4c:ca:87:
3b:16:b3:6f:6e:52:83:d7:86:1c:58:18:59:83:77:bb:71:0d:
2d:e6:d7:40:cc:a2:d5:1e:50:7f:81:bf:09:ab:97:17:be:8d:
40:39:cd:d5:f5:09:b4:55:3f:44:5c:b2:3f:d5:8f:e9:36:2a:
a1:a5:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:59 2025 by rpki-client