Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21420acd-7dec-35e8-88af-b6e4bae537f0.roa
File: 21420acd-7dec-35e8-88af-b6e4bae537f0.roa (raw, json)
Hash identifier: 2rEf7S6U9v3Cyf8kGYsESwixmXH3NadiPuNJ0oyFoJ8=
Subject key identifier: 43:67:36:6C:0D:68:F3:11:1C:41:39:9F:90:C7:F1:72:A4:F0:21:F6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858484C12EFDDCF338CCF94AA0200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21420acd-7dec-35e8-88af-b6e4bae537f0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 399165
IP address blocks: 156.154.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:ef:dd:cf:33:8c:cf:94:aa:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=44a45c26-ec21-47b0-9d45-ac691932a95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:18:76:b5:98:8e:cb:23:5e:f3:2a:42:a9:
b8:35:d7:b0:11:59:05:54:4f:90:4a:ac:83:fb:ce:
17:81:7d:0a:9c:0b:0f:b2:5b:07:07:d5:aa:92:80:
3a:ea:5d:54:e4:ec:29:2d:59:92:cf:e8:97:f8:5a:
fe:f5:47:f6:34:53:e9:5c:95:4f:fa:75:04:a1:92:
5e:2b:81:df:d9:93:79:82:64:65:ca:d2:68:a1:51:
ab:46:62:bf:03:bd:80:b0:96:ed:03:5b:46:e6:34:
3b:ec:79:80:76:db:72:89:38:e1:7b:15:ec:aa:9d:
73:b5:79:ca:7e:63:86:6d:85:cc:30:01:18:7f:e9:
6c:bd:87:73:c1:b2:de:ff:5b:6d:23:94:60:34:a7:
fe:9d:22:6a:1c:11:b5:48:9a:98:68:8f:4b:96:b6:
fc:b1:24:46:7c:cc:8f:9d:1d:f1:f3:70:ea:8b:ce:
20:9f:a9:4d:01:44:53:7c:2d:79:d1:71:46:a3:d3:
63:3e:5a:d0:05:7b:15:91:3c:05:2b:85:16:d8:cf:
ab:8e:52:cb:f4:f7:47:aa:bc:1b:dd:50:ff:2c:75:
59:97:e5:0d:65:fd:97:85:36:ec:21:84:d1:e7:33:
b2:10:64:ba:b7:e4:28:cb:bf:3c:f3:66:54:3a:1b:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:67:36:6C:0D:68:F3:11:1C:41:39:9F:90:C7:F1:72:A4:F0:21:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21420acd-7dec-35e8-88af-b6e4bae537f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:2b:97:46:20:43:35:80:fe:0a:f0:55:54:37:ec:8e:73:e7:
1b:ed:14:92:49:41:ce:1e:b5:8a:06:ba:56:47:0b:c8:a7:b2:
15:ef:f3:d1:36:2a:fe:3a:50:49:0a:a8:1b:c6:19:49:31:ab:
c8:69:ea:8b:02:f3:c1:42:ed:ae:b9:e7:62:97:2a:11:33:e4:
56:53:90:7e:f9:d7:7b:4c:95:f1:99:4d:df:2f:15:cd:2e:89:
5c:88:fe:af:01:b2:8d:d8:6f:71:e7:67:c5:f5:a4:17:71:8e:
41:70:c1:3e:aa:4a:f0:12:ff:89:39:9e:58:24:42:33:a0:6a:
26:07:9d:31:ba:fb:49:01:67:e7:63:22:d0:5c:67:ec:ae:02:
9e:18:11:9b:1e:0c:4c:ad:93:33:ad:e5:fd:12:ad:c5:cd:30:
7e:28:d7:7a:0d:02:6b:21:92:af:7f:81:9f:67:e3:69:96:6f:
24:18:42:08:b9:a5:98:4a:08:1f:ed:29:2d:2d:19:e0:77:34:
e4:61:39:ea:0c:e1:fd:79:e8:95:5f:69:d5:f4:94:96:c8:dd:
d1:96:bf:2b:22:4a:39:88:b2:8f:da:e6:6d:b4:b8:c1:5d:83:
cc:a1:90:c3:77:4a:a8:2e:bb:5c:c3:3b:50:f8:e7:29:ec:58:
6a:9d:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:24:58 2025 by rpki-client