Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b2b425c-ac15-321e-a471-316c9ed1f83d.roa
File: 4b2b425c-ac15-321e-a471-316c9ed1f83d.roa (raw, json)
Hash identifier: 5TTsand9W6FJfntn/wbOMvZDEoh3t2koeBjm+6oqMow=
Subject key identifier: EC:82:C6:F6:EA:92:3B:A6:AE:41:00:8E:E2:E1:ED:CD:ED:A2:5D:FC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858485F9B0E044F9735BBC55EC7C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b2b425c-ac15-321e-a471-316c9ed1f83d.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 397225
IP address blocks: 156.154.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9b:0e:04:4f:97:35:bb:c5:5e:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=0be551f3-32d1-43bc-9978-57be7b6d4545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:c3:d2:6c:4b:73:1c:b7:19:98:7b:cf:d7:
0d:0c:23:a3:bc:b4:0b:f0:d1:95:d9:5a:30:01:6b:
85:2a:3e:e6:2a:78:4d:f7:0c:18:9b:15:f2:a6:0a:
03:1a:aa:3c:eb:3d:e4:37:57:16:be:24:e2:63:af:
76:71:ab:8c:76:db:44:fa:48:a3:ea:e8:d8:7c:d0:
8f:e8:d9:3c:7e:67:2a:13:d2:b4:e2:ad:5a:48:d6:
2e:59:93:10:cf:11:68:59:cf:3f:1f:a0:2b:ee:3a:
8e:a7:3d:0b:76:cc:5f:28:e8:e3:c2:b7:3e:9b:e6:
d7:59:ed:02:42:81:86:69:43:3d:29:df:da:d9:b1:
7a:38:61:e8:53:7f:64:41:50:0e:3c:60:f2:60:81:
0b:e4:f7:54:ec:5a:4e:87:3f:05:6d:c0:9c:09:6e:
5c:ac:c4:5f:b3:11:94:c1:33:79:81:e1:47:9b:3c:
f6:7c:fb:60:a7:cc:f8:cd:73:54:f5:f8:d2:e5:c3:
17:8c:2d:99:cd:d9:e1:c3:80:43:8b:13:4e:ca:c9:
07:57:88:06:20:52:01:7b:27:bc:d6:49:fb:9f:28:
e5:a0:d7:8b:1a:8b:53:de:d9:ee:cc:30:0c:e1:53:
f0:ce:95:fa:94:c9:6b:e8:3e:6e:f0:a0:ac:e8:8d:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:82:C6:F6:EA:92:3B:A6:AE:41:00:8E:E2:E1:ED:CD:ED:A2:5D:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b2b425c-ac15-321e-a471-316c9ed1f83d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:f3:8a:5d:f1:98:2e:33:fa:e6:ab:79:36:bc:10:3b:1f:5c:
89:c9:18:a6:a4:0b:52:9d:90:03:61:98:da:8e:1c:4b:45:58:
66:6a:b1:10:be:73:c5:01:c4:92:dd:4f:6c:0e:50:3f:d9:ad:
8a:6a:74:ef:ce:1f:87:2e:ce:b9:20:f8:57:a0:f2:34:06:b8:
1c:a9:7d:9b:d9:5b:5d:82:46:f2:90:3a:53:98:dc:23:cd:00:
a8:97:1d:cf:9d:51:7a:60:85:75:7e:68:dd:95:2b:e5:9a:28:
7b:39:f7:d5:3d:48:4b:d3:3e:f0:db:0b:95:d0:9e:9e:b3:51:
00:08:62:50:1a:c5:30:c6:03:04:1a:7d:8f:b8:fe:db:67:d5:
01:45:f5:2b:8a:a0:97:c0:21:05:e9:06:11:62:b3:33:2c:b3:
23:1b:f8:f4:8c:b7:59:51:b6:1a:6f:23:77:af:42:cf:90:4f:
23:a7:84:7f:66:9d:3c:20:71:56:37:b3:0b:0f:58:29:87:cb:
0f:56:80:47:c9:83:f4:93:65:31:fb:90:0a:b9:21:35:18:71:
e1:94:93:57:d8:d3:02:34:db:3c:8f:bd:74:1b:6a:b6:06:7f:
38:2c:64:69:cf:9e:a7:84:fc:38:72:f8:cb:69:4d:ac:f3:a3:
f1:2c:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:06 2025 by rpki-client