Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/53d521f5-9431-3892-a32e-112ef9e945f8.roa
File: 53d521f5-9431-3892-a32e-112ef9e945f8.roa (raw, json)
Hash identifier: z67GTSCLgL3LKBi1a71Bq6keyKm00ZelWOx1rCWmT4A=
Subject key identifier: 44:CB:6E:B6:76:7E:44:FA:35:A4:B5:CC:BD:36:0B:E8:26:55:B4:12
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858486C2B28F390424139CAC95300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/53d521f5-9431-3892-a32e-112ef9e945f8.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 397221
IP address blocks: 156.154.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:28:f3:90:42:41:39:ca:c9:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=3a50a7cd-9221-487a-9226-57c9758d9b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:04:18:a7:3a:a4:f8:5f:db:ae:fc:5f:b1:
3a:01:da:98:b0:a4:c6:15:9a:db:d8:1c:7d:78:a9:
75:c0:b5:de:62:2d:bd:ac:79:83:a0:1d:e7:83:ba:
5b:3f:96:bb:5a:94:3c:f0:40:9c:f1:47:2c:5e:3a:
f1:75:8a:f3:8b:5f:4d:f5:1f:65:af:cc:01:cd:58:
e5:93:a3:7f:28:39:02:a9:af:8c:01:ad:6f:c2:5a:
83:24:b4:13:d1:4d:78:c0:be:6b:e0:41:cc:46:83:
72:a2:10:7b:70:1c:c1:96:a3:c8:58:6c:42:cc:4f:
e5:42:62:62:94:31:e6:9d:01:b8:c7:00:1e:5d:f1:
c2:90:d5:f9:28:f6:ea:3c:97:5e:da:76:95:08:94:
16:3b:6f:65:c8:81:44:8b:c9:e9:4c:7b:c5:89:cf:
69:88:ff:68:52:07:90:8c:c7:ad:f8:87:8c:5a:f4:
ed:4b:8e:24:1c:1e:0a:73:49:54:c6:5e:59:e2:a4:
67:1e:e3:d0:cc:0a:ba:93:3e:63:16:97:d3:22:db:
28:cf:89:cb:b4:2e:ea:83:cc:65:b4:1a:65:46:25:
d7:81:c7:48:4e:86:2f:d2:11:24:ea:5b:e4:40:21:
c6:16:86:3b:8c:e2:d8:6a:01:84:bc:6c:69:5e:3d:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CB:6E:B6:76:7E:44:FA:35:A4:B5:CC:BD:36:0B:E8:26:55:B4:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/53d521f5-9431-3892-a32e-112ef9e945f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:19:bd:b5:8a:45:b1:f3:94:87:bb:0d:81:f4:05:87:e5:1a:
e5:5f:d8:e4:7c:8f:13:3e:ce:eb:91:6d:ac:24:42:d6:41:ee:
46:d7:26:2a:64:8a:18:66:ad:c0:e2:92:5c:5b:84:5d:6f:a7:
3f:33:8c:5f:86:b6:fd:12:5f:be:d9:2d:ba:da:ef:77:c8:7e:
3b:db:c2:b4:4f:af:e3:30:e9:a8:02:a8:47:bb:23:bb:7a:2a:
46:fa:df:ec:36:5f:9a:6b:1b:2c:fe:53:c1:8a:d3:98:de:ff:
9f:be:56:86:6c:57:ec:c8:9d:cf:5c:e6:b1:ea:aa:90:93:32:
40:ab:b5:2a:54:b1:8e:8d:37:1e:25:10:fc:be:f4:5f:f9:f4:
68:0c:ac:12:d4:08:cc:e7:76:eb:16:7b:22:1e:ee:6a:72:70:
29:de:2a:79:99:30:a6:3b:d7:5c:40:09:2c:bb:78:85:a7:fa:
f7:e9:24:51:9c:44:57:20:ab:72:60:91:3c:63:a5:a4:3a:38:
68:e7:7a:1d:3e:09:fd:bc:12:f9:f1:d9:9c:7a:7b:0c:5c:23:
92:f7:91:7f:04:59:a7:5a:f9:80:c6:68:19:84:d6:12:27:d5:
2d:a7:db:53:de:66:34:f9:9f:9c:4e:b7:98:d4:88:95:f6:80:
11:a6:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:30:54 2025 by rpki-client