Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2140f177-fc63-3bb6-a8b2-a5094256cdd2.roa
File: 2140f177-fc63-3bb6-a8b2-a5094256cdd2.roa (raw, json)
Hash identifier: /gWlNOr2VUNfDXBZ4P6XMaCVLvRFInAkXF8UdRbTx2I=
Subject key identifier: F1:75:EE:2A:FF:C8:14:8C:8F:87:C4:CB:EB:E9:4B:4B:69:19:6B:15
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858484C12F0DFD22097BDC7044CC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2140f177-fc63-3bb6-a8b2-a5094256cdd2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 399154
IP address blocks: 156.154.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:f0:df:d2:20:97:bd:c7:04:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a16640c6-bd28-41c0-8e45-c8be4a650489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:ea:ba:87:f9:b0:ef:31:e8:e5:0c:2a:4c:
85:1f:bf:cf:c1:5c:8e:71:b4:62:da:d6:52:ad:0c:
77:27:2b:a8:96:1c:06:db:62:69:58:11:72:c0:eb:
b6:71:0e:56:14:04:b4:23:5b:52:cf:6d:9f:8f:c8:
b4:ae:98:a6:6c:fe:4b:8d:db:98:fc:a3:ba:4e:f0:
00:99:1f:67:91:b5:95:42:b1:dc:80:50:11:c7:c6:
07:92:71:6a:ef:73:f1:38:98:c2:96:95:cb:74:43:
45:d6:8e:9a:80:02:aa:6f:81:e1:05:35:4b:73:2c:
f3:03:b0:17:77:6c:53:f9:a6:5b:34:93:1f:a2:75:
d9:69:fd:2e:51:a1:87:03:21:59:39:16:09:9d:75:
4d:78:53:5b:e4:90:f8:8a:91:12:c5:8a:5c:ad:26:
f8:3b:57:9f:c9:5c:8a:df:74:99:00:73:5d:2b:75:
d1:46:f2:64:35:4c:09:43:32:20:6c:4f:12:3d:6c:
30:cc:dc:4d:21:02:5e:a7:77:10:6b:93:c5:11:6d:
44:12:84:75:66:98:e3:74:78:24:ec:01:59:51:3c:
08:86:73:b9:8d:36:94:53:93:58:fa:a9:c2:56:e6:
d5:83:fb:4a:46:cb:a4:e0:ad:b6:66:03:57:02:a5:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:EE:2A:FF:C8:14:8C:8F:87:C4:CB:EB:E9:4B:4B:69:19:6B:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2140f177-fc63-3bb6-a8b2-a5094256cdd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:d2:8d:e1:2d:e6:50:e0:d4:df:0f:4f:49:d8:dd:db:a6:d0:
9d:23:28:f6:1e:fd:52:b7:2e:2d:5d:72:31:6d:32:6c:69:b7:
d0:c5:6d:7a:e4:a4:66:76:00:6e:71:90:28:b6:d9:2f:ee:ab:
b6:b1:20:47:ae:fd:f0:e1:41:04:45:c0:cf:f1:9d:eb:41:0b:
0a:f1:08:26:1d:e7:8e:34:51:1f:b6:58:4a:d7:c6:49:7a:2c:
59:09:d2:dc:41:b2:4c:37:67:4c:63:a7:be:00:6a:b3:3f:02:
f7:39:5f:82:9f:00:54:d9:8a:7c:8e:40:51:68:54:5b:91:4e:
ae:bf:0e:56:56:9c:f4:8c:8d:14:3c:cd:74:a5:cb:8d:73:b8:
ab:4c:4c:49:3f:5a:7a:f0:2f:43:5b:8f:86:ed:a4:91:3d:41:
fb:fb:59:f6:d2:f5:50:6e:43:93:fc:c9:5b:d0:62:5e:82:05:
fe:c0:b6:34:0b:d0:34:e6:74:6d:f1:bd:98:d4:62:d1:3d:ee:
2c:f2:2a:a8:ce:b0:4e:51:b1:1b:b0:d4:e4:bf:50:7a:47:2d:
c7:21:ed:15:b3:92:ab:76:93:2d:9d:69:62:1d:ba:d8:b1:21:
92:fd:0a:a6:99:68:3e:e0:63:d1:f2:8b:d8:4f:b5:a7:a5:a5:
ec:88:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:43 2025 by rpki-client