Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bebb4f2-5fb6-349a-baf7-e39a88d7fb6b.roa
File: 3bebb4f2-5fb6-349a-baf7-e39a88d7fb6b.roa (raw, json)
Hash identifier: dCD+7h5eZ0vhDgSlk1TZvOTpsj4uinR80s5tsOYEgak=
Subject key identifier: 89:0F:C9:9E:AA:C4:E1:91:DB:8E:E5:1E:A3:72:B4:BD:B9:36:AA:06
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB5BD00A69E74E4875D580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bebb4f2-5fb6-349a-baf7-e39a88d7fb6b.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397216
IP address blocks: 156.154.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:5b:d0:0a:69:e7:4e:48:75:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=921e3841-46d0-410e-b93d-87a167056ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:c7:14:03:10:39:45:95:89:ab:4e:22:4e:
3b:c3:a3:f1:89:61:ba:72:3f:d3:f4:f0:e4:f5:17:
94:15:aa:6c:6c:24:ae:b9:eb:e8:25:45:5f:56:5c:
9a:63:a8:d0:d2:19:36:58:43:25:12:56:59:db:6f:
26:a2:93:ef:5a:b1:e9:5e:95:e2:5f:05:d6:a0:04:
af:43:92:64:31:c8:75:9f:52:0c:f0:ae:51:5a:cd:
a9:c0:87:75:ec:83:24:4b:7a:0a:f8:65:82:67:ef:
40:b2:aa:9a:16:f8:52:da:77:16:c2:69:15:69:32:
1f:22:c7:96:c8:4b:60:43:73:08:27:3c:0b:0b:b8:
1b:fa:2e:9d:79:8b:02:d3:d7:48:5e:24:02:21:09:
1e:a4:ba:ee:d8:00:1a:a4:1f:78:d6:85:f8:d3:1b:
aa:e2:a0:f7:bd:5e:1a:87:e3:a5:c7:dd:ab:7a:e9:
7d:28:5b:fa:7b:69:20:f8:b8:bc:b7:07:78:6f:83:
31:11:c0:e3:36:49:c7:be:fc:c0:df:e8:c2:d5:08:
74:a9:b2:34:e9:02:e3:87:db:b7:6d:5c:f0:45:83:
e4:c0:2f:2f:c1:c1:bd:8a:41:f6:61:c2:07:16:77:
ec:73:6e:ef:69:45:ca:7c:0e:e4:4c:6e:4e:ca:66:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0F:C9:9E:AA:C4:E1:91:DB:8E:E5:1E:A3:72:B4:BD:B9:36:AA:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bebb4f2-5fb6-349a-baf7-e39a88d7fb6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:34:df:30:ad:3d:b6:b2:b0:b3:24:b3:3e:49:cf:de:12:47:
35:84:23:9a:f6:d3:e8:72:b6:35:80:83:21:0a:0b:f0:1a:bf:
bf:af:c4:71:07:44:f1:e1:b0:75:11:98:75:f8:34:db:b8:a5:
ba:d9:4c:ad:ba:ae:66:43:63:39:e8:63:da:29:98:70:72:5f:
f6:c9:a1:d7:02:3f:87:3d:c4:0f:0f:d2:d5:aa:c4:dd:6e:fd:
b0:ec:4b:26:56:6c:ce:6a:41:55:3d:9d:16:0e:9e:e3:9b:85:
c5:0b:19:91:7b:99:f5:73:4a:62:10:f7:1b:7d:1a:e2:0d:6b:
de:1e:ed:04:02:6a:25:cb:5a:27:da:5f:6e:d8:35:73:9b:aa:
cc:94:0d:e7:35:c1:86:c3:07:d4:19:2e:af:47:19:bb:70:c7:
98:ac:08:c3:cd:9b:59:dc:84:0b:08:ff:4d:10:64:27:6a:9f:
ab:fe:80:27:1d:0c:4e:4d:45:27:64:32:fb:7a:2a:fb:ee:81:
ba:77:8b:5f:28:80:71:5d:b5:63:45:75:2c:e3:a4:5e:10:23:
cc:ad:9d:83:e1:0b:e7:d2:ef:27:24:13:ab:ed:7c:d5:40:bf:
c9:18:f4:01:a9:4d:60:a5:7f:50:36:90:43:3b:0e:3d:bc:85:
5e:6e:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:47:41 2025 by rpki-client