Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/73a13f1b-8119-33b1-8b31-576ac7f5a44a.roa
File: 73a13f1b-8119-33b1-8b31-576ac7f5a44a.roa (raw, json)
Hash identifier: /T21BQD1SvpWUcLbgJ9rO7u4ThdtE/LnHvwUo1wWVtw=
Subject key identifier: 59:D9:23:B7:1E:90:02:25:5F:B6:D4:51:91:02:89:71:5E:BA:8B:E7
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858486C2B29A928F252B34DAE7A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/73a13f1b-8119-33b1-8b31-576ac7f5a44a.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 397236
IP address blocks: 156.154.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:29:a9:28:f2:52:b3:4d:ae:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=b23f1792-0639-4eb0-87b4-7df78d711fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:b4:66:94:94:2c:96:13:0a:a8:e1:d2:3c:
3b:91:76:b8:aa:1b:15:dd:6b:2e:27:5b:84:4f:65:
39:b3:b3:60:8c:92:74:80:d7:d5:67:27:48:d9:af:
a6:10:9b:bd:4a:01:b9:98:8d:89:3b:ae:8d:b6:b7:
e3:ec:e0:e1:88:81:5a:07:17:61:70:c9:e8:5a:27:
aa:ac:8f:3c:9c:66:b8:0b:fb:69:15:48:1b:fc:93:
89:c0:d4:cb:94:59:3a:ff:62:2d:65:52:af:a5:f9:
f3:6a:0a:bb:d4:9e:6d:92:0e:89:94:c7:ef:35:d6:
b9:82:ea:0c:1a:df:e4:e4:d4:16:e4:6e:f9:c3:25:
57:0a:11:58:20:cd:34:ac:57:98:a7:f3:dd:03:69:
77:a9:e6:b4:95:b2:c4:37:f1:9e:46:2a:3b:3b:e9:
40:97:62:84:cf:44:60:c7:cb:0f:5f:70:cb:26:e3:
2a:08:b3:e9:86:ca:b3:f0:1b:6f:0f:e4:f1:42:d2:
3e:d2:87:66:3b:fd:f5:e3:16:ea:35:f9:aa:76:8c:
2c:22:7e:54:7b:8a:2c:39:e4:84:90:60:53:d8:76:
74:14:ff:5e:cb:92:03:2a:c3:d2:6f:f5:78:72:35:
93:76:4a:00:05:c8:84:01:16:f2:4a:4e:2b:99:ff:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D9:23:B7:1E:90:02:25:5F:B6:D4:51:91:02:89:71:5E:BA:8B:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/73a13f1b-8119-33b1-8b31-576ac7f5a44a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:fb:b9:b8:fc:b3:2b:16:6b:21:f0:75:3e:09:71:76:23:33:
66:62:85:f4:a7:a1:35:6a:30:a2:d7:d1:22:28:83:5b:55:b0:
5d:e2:3b:33:dc:de:3f:3d:93:db:8f:a1:81:8b:06:0f:f2:8a:
9d:0c:ec:fe:f8:10:4e:1d:39:4f:ac:90:cf:e0:bd:b0:cb:46:
ae:7c:32:85:b0:de:f7:f0:8d:96:6a:84:fe:54:b2:03:94:a6:
24:fd:2a:6f:77:2f:db:78:1f:97:60:8e:5f:cb:a9:d8:19:ef:
49:26:e7:38:3e:41:17:23:07:bc:62:82:06:88:84:f9:75:54:
9a:f6:9b:d0:96:04:54:66:ec:07:44:e1:ff:80:e3:ea:d4:1c:
d3:2e:bb:14:4f:eb:22:3a:a4:c1:01:ae:90:8c:11:22:7c:0a:
f3:38:14:60:eb:dc:2e:20:c8:3e:46:ba:5b:82:d0:5a:35:7c:
84:f7:d7:28:8e:77:83:5e:0f:c5:53:ea:61:d6:06:03:ea:05:
37:89:30:b6:93:fb:69:42:3e:da:1e:a5:db:6b:b2:42:02:9b:
47:32:9b:e6:d4:16:9b:10:31:4f:48:23:7b:d4:eb:75:85:d0:
49:53:f6:aa:d4:41:6e:87:b9:b1:b6:de:60:8d:1f:ae:e7:28:
bd:91:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:06 2025 by rpki-client