Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e16de2a-b0b8-3748-8ca2-11494ab5dd07.roa
File: 4e16de2a-b0b8-3748-8ca2-11494ab5dd07.roa (raw, json)
Hash identifier: +camB4FAJ6buxAMtwFuSqlN/vmqc4LrhgtqdNKzCcJo=
Subject key identifier: D5:41:A1:CE:09:56:0C:52:6F:ED:FC:92:0A:74:E9:B8:22:CF:FE:66
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858484C12F0D72788D53B58A5C540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e16de2a-b0b8-3748-8ca2-11494ab5dd07.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 399153
IP address blocks: 156.154.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:f0:d7:27:88:d5:3b:58:a5:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=41738fb8-e748-4177-a3ed-cfec29746a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:e0:35:d3:52:b7:ce:f9:32:12:9f:12:09:
58:d7:1d:48:20:e6:56:2a:50:cc:a5:26:ed:0c:8c:
67:5f:ce:e7:05:0b:8c:5b:02:0d:4b:55:e0:0a:91:
e5:7f:6f:4d:02:e3:7d:41:68:c6:4c:97:4b:af:18:
5c:a1:a7:38:b4:70:a8:15:55:8b:13:0d:e8:7a:63:
f8:ca:fc:6c:2f:1d:e9:9f:67:2c:5d:46:bd:05:51:
dc:12:86:b2:a6:79:3c:de:34:7d:0c:c0:cc:0a:98:
b1:5a:0a:97:32:da:8f:96:d2:ef:78:c3:2b:bf:db:
99:2d:6d:49:cd:13:6a:f2:4a:94:04:f0:48:2f:91:
81:1b:a9:97:99:6a:71:18:80:b0:b6:58:e6:74:62:
ff:46:4c:28:d3:6e:3c:63:b0:08:cd:7c:87:ac:5b:
a6:ca:65:a7:04:27:d6:10:de:99:06:32:c3:b6:89:
5f:3b:d9:1a:58:a4:e8:22:ef:63:39:47:44:50:36:
2c:91:14:be:e4:25:d2:af:01:2e:70:ec:15:97:d7:
24:26:49:ee:e5:79:46:8d:57:b6:e0:3b:dc:cc:59:
63:53:20:38:d8:ff:4c:6c:9b:a4:54:ac:b7:f6:cf:
00:2b:b4:9e:ae:e5:11:c3:a3:5f:23:e4:e9:2c:0e:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:A1:CE:09:56:0C:52:6F:ED:FC:92:0A:74:E9:B8:22:CF:FE:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e16de2a-b0b8-3748-8ca2-11494ab5dd07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:04:94:b9:23:71:64:d0:43:cb:e0:74:57:df:b8:5e:98:87:
de:c3:32:1e:ea:69:4a:a2:31:2c:90:05:63:86:ae:03:d0:d3:
30:9a:6f:43:99:f1:67:f9:aa:d1:1c:5f:a4:dc:0a:76:9f:8c:
3b:8c:d3:8a:52:6c:e9:16:a4:eb:33:8b:d6:bc:2a:40:20:38:
75:ce:ee:b2:dd:ea:01:a2:67:ea:44:50:c5:86:c3:f0:d8:ca:
fe:f3:3a:9c:6e:74:72:f3:85:75:9b:f8:39:f7:5f:4c:5d:b0:
46:06:36:8e:df:aa:7e:69:97:ad:85:57:3d:8c:ac:a2:55:32:
f7:a2:8e:0b:87:db:09:53:dd:aa:16:f3:47:51:61:b5:69:02:
a7:55:e1:a5:91:56:26:db:0b:27:11:b2:2c:c9:17:24:da:43:
0c:ba:1b:f1:15:b3:07:6f:2a:9d:50:3a:66:f9:00:a7:73:30:
cb:77:00:0c:57:b0:cf:54:14:ef:c5:96:ba:57:cd:a0:6c:14:
cf:f9:ed:45:84:95:70:19:bb:95:08:62:df:52:56:58:23:f8:
39:a6:7a:6f:cd:d3:89:fe:08:16:a1:ca:d7:24:bd:7b:c7:c4:
95:82:43:49:bb:ee:c5:af:dc:23:d9:85:c1:41:db:b7:98:40:
82:94:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:25:49 2025 by rpki-client