Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a84bf67-c56b-3923-8b67-396629aa5c8f.roa
File: 7a84bf67-c56b-3923-8b67-396629aa5c8f.roa (raw, json)
Hash identifier: hz2vN08vgbgsl1EpkDTuc3vtjljfr3zHQlc3QWPLJiA=
Subject key identifier: 79:42:B6:BF:36:F3:E1:E8:0D:AB:BE:65:50:18:F1:9F:4D:25:4A:AD
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858485F9B0E9E46F5AAE96E8E7340
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a84bf67-c56b-3923-8b67-396629aa5c8f.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 397237
IP address blocks: 156.154.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9b:0e:9e:46:f5:aa:e9:6e:8e:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=450b5094-a8b5-4d65-8b91-1561e1547767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:00:9c:e5:ce:71:72:a2:92:11:22:87:38:f1:
8d:79:43:fb:47:75:52:28:fa:10:f2:b0:a6:55:82:
43:b7:ab:1a:40:03:7b:98:fb:49:cc:86:a6:86:b2:
64:bf:45:95:cb:34:85:11:d8:4c:0f:c7:db:b4:6b:
aa:92:1c:98:8d:4a:75:a8:9b:73:b7:10:40:92:47:
e5:c9:10:f8:a9:44:51:2a:4a:b9:2d:77:f1:6f:92:
07:cf:1a:af:87:6e:8e:ca:9b:92:ac:67:bd:27:48:
84:9d:cb:a3:08:2d:d9:33:52:cc:c2:d7:1e:42:13:
6f:9f:d0:fb:74:5a:80:94:05:7d:03:9d:a8:fb:b2:
06:aa:17:db:24:f0:a8:54:73:91:ad:dc:ea:47:b8:
29:b4:94:52:4d:76:b5:e5:32:95:4d:23:90:12:b9:
f8:fc:34:0d:18:3b:65:dd:2c:06:24:2e:5d:ff:b9:
e1:c0:0b:46:83:ef:3f:c4:4d:4f:2b:d4:79:36:0f:
f8:c5:93:f3:45:4a:41:21:b9:fb:fc:7b:3f:b2:b4:
dd:cc:73:27:02:13:3e:ee:44:70:bc:d3:cd:59:9f:
31:d8:cd:64:73:e8:ea:ca:54:33:43:f5:6d:8d:01:
11:d8:49:20:3c:31:5e:0c:50:14:e2:42:51:67:15:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:B6:BF:36:F3:E1:E8:0D:AB:BE:65:50:18:F1:9F:4D:25:4A:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a84bf67-c56b-3923-8b67-396629aa5c8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:39:ae:51:51:03:f2:13:82:f6:6b:c0:f2:3d:b9:93:82:3e:
30:9c:10:1e:f0:75:2f:f2:a1:e3:b8:33:2b:26:1c:d1:10:9d:
4b:a2:a4:7b:eb:67:23:db:88:26:5d:0c:e2:4a:65:b0:75:6c:
b9:af:78:73:13:40:89:a0:a3:a5:50:a8:0f:41:0d:27:e4:62:
16:aa:9d:84:82:47:4d:5a:80:df:b0:49:eb:98:24:24:cb:34:
a9:04:0f:66:ab:a7:cf:5e:49:47:ca:71:99:d8:d1:de:86:89:
92:c4:8e:d2:6b:9f:26:b6:85:34:ba:da:49:4b:46:64:2a:b5:
e3:fd:cf:9f:58:5f:1a:af:a3:29:2e:ee:95:71:2a:9d:d4:9c:
ff:43:b0:f1:d4:f0:25:82:f7:63:5a:40:df:98:af:83:83:6c:
0f:b5:fc:1e:76:8d:d5:5f:61:c1:c7:8f:5c:7b:bc:3f:5a:c7:
57:29:35:da:8a:34:12:cf:5f:02:5f:89:92:2f:ae:e9:11:c6:
45:6e:64:0d:65:e2:b3:d5:67:31:99:b1:ff:1d:71:c9:c8:76:
fc:88:7e:34:b4:17:3d:91:2b:6b:12:2e:4b:39:d8:ba:d9:aa:
b3:93:9c:7d:62:87:95:7b:2f:02:4c:43:c9:da:85:e4:c3:31:
7c:4b:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:15:19 2025 by rpki-client