Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f86e8d59-482e-3088-b22a-3c6601fecfca.roa
File: f86e8d59-482e-3088-b22a-3c6601fecfca.roa (raw, json)
Hash identifier: CyijowE3HW7mjVfuhlNc2Uk9MXGTfQ96ySz7jPnOgR8=
Subject key identifier: C2:AD:94:15:A7:CE:4C:56:80:E9:B1:75:22:11:24:A8:61:B6:C9:C8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD21132D42E2B891EA187700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f86e8d59-482e-3088-b22a-3c6601fecfca.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397221
IP address blocks: 156.154.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:13:2d:42:e2:b8:91:ea:18:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=f6aeb5a1-a461-494d-895b-603b1d847ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:2e:1a:d0:28:4e:84:b7:87:29:0f:ad:61:
eb:a3:cc:b2:d2:c0:67:c9:39:6e:e5:cc:3a:e0:d5:
f3:48:86:cf:27:fd:1c:8d:b3:62:e9:bc:ca:97:c7:
43:d6:d8:bf:b3:c8:a2:8d:91:95:98:01:1d:97:25:
5a:8e:ac:40:3b:5a:8b:d7:e5:7f:3a:0a:fa:fe:9e:
1f:8b:61:a5:f2:37:14:58:1e:7c:e3:b8:03:5d:fb:
b7:e3:7f:84:5d:ff:b6:e2:53:33:91:ad:e1:6a:7b:
6b:98:bb:8b:62:4b:06:63:1f:06:74:49:9c:ab:3f:
cc:77:d8:87:43:4c:7d:b1:5d:79:84:cd:85:6f:15:
d9:c3:b9:be:b1:d6:fe:95:f9:79:2d:a0:33:b8:32:
80:c3:84:35:ad:fa:e6:2b:e4:9c:44:bb:50:27:d5:
58:de:d4:3d:ec:8c:87:1e:c7:74:1b:9a:55:1c:8a:
fd:c5:ac:b5:6d:a1:21:88:0b:a2:3f:c9:54:c8:7a:
b2:02:a5:b5:de:ac:46:b2:79:12:18:2e:53:4e:a4:
b7:1e:69:6d:22:83:00:9b:d1:2a:49:99:bb:82:f3:
4a:ad:8f:84:e4:ab:c4:64:2b:96:c7:53:6f:ba:be:
4f:09:7b:0b:7b:89:f3:30:19:6a:6f:a1:68:67:3b:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AD:94:15:A7:CE:4C:56:80:E9:B1:75:22:11:24:A8:61:B6:C9:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f86e8d59-482e-3088-b22a-3c6601fecfca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:0d:98:63:82:96:61:58:ad:86:10:e3:0a:a3:ba:dc:58:be:
dc:b3:80:15:31:09:56:c5:b4:08:3a:36:fa:8d:85:48:ab:c7:
70:d3:14:a5:be:3f:f3:be:c1:57:a9:c3:d5:8b:15:a0:66:b9:
a0:00:83:13:81:6e:1a:3a:66:bf:73:70:07:e5:de:49:e3:f1:
06:97:5e:de:40:16:bf:3e:1f:ee:47:be:d0:20:f8:04:ca:af:
d7:94:bf:e3:06:15:62:c9:73:1d:7d:c3:b2:20:c3:4b:b0:66:
e0:3a:ff:3a:6d:16:c1:5e:dd:fc:4c:28:39:f4:20:39:36:e4:
c8:aa:70:e5:c5:4f:95:21:83:26:19:80:d4:48:94:42:8f:50:
2c:8b:b1:df:67:04:b1:1c:d9:7b:3a:8b:24:42:27:85:94:7b:
2a:1e:0f:7a:dc:f0:6e:63:7f:0d:bd:9b:4d:13:42:ce:16:d9:
a7:5d:c4:7a:75:0c:a0:bf:36:0f:06:15:28:b6:f3:69:e9:51:
00:c5:59:17:e3:e2:ba:e9:3a:24:91:f9:0a:1c:f2:1d:54:db:
d9:47:a7:c6:91:6a:86:ef:2d:d8:bd:1c:4c:3d:a6:77:51:32:
db:28:6f:52:1d:69:aa:93:17:f9:ac:d8:2b:2a:6a:4b:1f:8b:
42:1c:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:09 2025 by rpki-client