Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/53baf185-2c12-38ea-b296-59b095cb158c.roa
File: 53baf185-2c12-38ea-b296-59b095cb158c.roa (raw, json)
Hash identifier: QOBNbyBGzhTUGL9+rbBSAwOOibUQULJJeqs4i2XHj8E=
Subject key identifier: FB:3D:36:2F:34:A6:EC:D7:18:50:E6:3F:69:3C:B1:AC:99:3D:2C:76
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965D38A427C34902E109B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/53baf185-2c12-38ea-b296-59b095cb158c.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397237
IP address blocks: 156.154.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5d:38:a4:27:c3:49:02:e1:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=db5ce9bf-820a-4f6b-bb8c-16ac84181522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:4f:31:93:3a:e6:b6:62:b0:68:a8:9a:c7:
b3:13:57:57:a8:19:c2:72:0a:7f:de:6b:65:c7:bd:
50:74:72:3f:e8:0e:35:19:44:d4:c1:f2:f2:03:00:
97:4b:34:67:4d:53:15:81:d9:b9:13:52:e1:73:1b:
04:e3:d7:fe:c4:77:ae:52:aa:bd:da:7b:f7:fd:1e:
01:95:8f:6f:6d:e2:5a:bd:07:bf:ab:ed:2b:74:a4:
ad:fd:53:f6:b0:ba:92:c1:09:ac:d9:97:14:2e:9b:
ab:20:ce:7d:86:4f:97:58:35:ea:42:fb:d9:5f:74:
28:af:d7:16:9a:4e:da:0c:84:dd:47:39:fe:bb:5f:
50:8f:c8:a4:d9:e1:07:dc:5c:95:f1:78:25:d7:66:
da:d1:52:f7:74:36:fd:11:2b:55:a6:8f:fb:a1:7f:
cc:6b:6e:e2:aa:2b:71:eb:a5:ef:26:36:24:ed:61:
66:8c:cc:10:b3:2e:96:a8:98:79:4a:b5:18:9b:01:
96:c5:39:ef:d4:84:1d:b2:2f:cc:fe:ad:ab:15:b6:
60:50:90:15:fb:c4:52:a7:d1:be:5d:49:1b:c8:2c:
bf:1c:b1:84:95:8d:0f:26:32:8f:aa:06:86:b2:e7:
30:64:da:30:28:db:37:3e:43:4a:a8:f4:8a:4c:9b:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3D:36:2F:34:A6:EC:D7:18:50:E6:3F:69:3C:B1:AC:99:3D:2C:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/53baf185-2c12-38ea-b296-59b095cb158c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:b0:18:e0:8d:ff:f8:0e:ed:00:3d:0e:12:d0:68:ea:8d:d3:
1c:b5:c3:48:bb:87:6c:d5:aa:f6:6c:1a:23:0c:ad:39:bc:e3:
c4:a3:bb:c2:73:54:d9:41:3a:e6:b7:3c:4d:b3:16:2a:7f:25:
e4:87:2b:89:c7:6e:bf:90:cd:b8:e6:a3:3e:fb:dc:f2:65:19:
6e:b4:3c:84:07:4c:81:37:72:43:dd:de:27:d0:2a:52:ef:2c:
fc:05:d9:d2:66:ab:ca:82:3a:70:12:09:40:dd:54:8b:d0:b9:
c9:ce:e9:48:79:57:48:0f:eb:12:9e:f6:29:3a:0a:90:58:55:
e9:d6:f5:0c:79:8f:32:0d:75:43:59:1d:b2:e0:11:b0:33:e1:
33:61:3d:74:fe:c9:db:ab:a7:06:0d:40:05:47:cb:99:68:bc:
98:a5:d3:10:7d:9a:f6:5a:20:9c:95:74:75:44:28:c0:19:7e:
84:8c:13:e6:5e:e4:0e:1a:90:f1:c3:7d:f9:d9:cc:2b:89:d8:
f8:37:53:58:15:e1:75:e9:d5:66:de:5a:12:8a:f2:c1:c3:20:
71:a1:7b:ef:47:82:01:05:c7:7d:c4:f1:c4:2e:b9:81:0e:76:
60:88:2d:d8:f4:73:f0:f1:e6:d2:f4:2d:82:74:55:9e:cd:69:
6e:80:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:52 2025 by rpki-client