Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a950bcd-8633-31ff-b314-e4cbaab7dac8.roa
File: 0a950bcd-8633-31ff-b314-e4cbaab7dac8.roa (raw, json)
Hash identifier: Qb5uFSWt3uDLUgD2UVETkw6vVV3T311x7WCjnDHb3tc=
Subject key identifier: 86:AD:4D:A2:2D:6D:CF:EA:AA:31:12:68:05:9E:F0:48:BE:7F:1C:41
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285847DDCA2BCAF6F11A499B9247D4
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a950bcd-8633-31ff-b314-e4cbaab7dac8.roa
Signing time: Wed 13 Nov 2024 14:00:39 +0000
ROA not before: Wed 13 Nov 2024 14:00:39 +0000
ROA not after: Tue 11 Feb 2025 14:00:39 +0000
asID: 397225
IP address blocks: 156.154.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ca:2b:ca:f6:f1:1a:49:9b:92:47:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Nov 13 14:00:39 2024 GMT
Not After : Feb 11 14:00:39 2025 GMT
Subject: CN=888815fd-e9b6-4663-9711-eda2e2c013a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:cf:c8:9a:13:9a:22:11:92:a0:85:fd:1b:
f3:38:df:6b:e9:f4:30:1c:22:03:da:40:02:95:8c:
30:bf:b1:cc:b1:d5:f5:10:f7:7f:42:d5:cb:80:3b:
74:a0:0c:39:d4:ce:22:86:29:9f:d8:83:7a:f7:2a:
eb:5d:4b:fe:78:c5:ac:00:5a:b9:42:22:4c:01:7b:
0d:7f:5f:d7:ac:4e:40:cb:fe:e4:9a:47:41:ff:78:
07:99:5f:71:fb:8a:9a:23:06:e9:83:f2:2d:58:f2:
e5:7c:d7:0d:ed:dd:fc:0b:b9:24:ee:68:a3:af:aa:
89:1e:cb:5f:c7:0d:4c:a9:93:cd:cc:3d:73:ff:66:
aa:d4:91:5e:9e:e8:4a:7e:f3:cb:72:22:f4:ba:d0:
93:90:c6:68:6d:9c:f7:39:bb:63:d1:73:d7:ae:d3:
6a:60:08:5f:25:a1:34:fd:51:88:05:38:f1:fe:e4:
b1:29:32:a6:86:82:d8:f3:50:aa:28:1e:fe:0f:50:
41:0f:37:ed:8f:f9:fb:62:5b:95:44:0c:37:70:80:
1d:85:30:24:fe:59:54:e7:7e:35:7f:9c:47:1a:b3:
be:2f:1f:32:6c:db:34:f8:f8:31:bb:9d:43:6d:d2:
5c:f4:dc:3f:2a:70:a2:dd:6a:83:0e:7a:38:a8:4a:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:4D:A2:2D:6D:CF:EA:AA:31:12:68:05:9E:F0:48:BE:7F:1C:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a950bcd-8633-31ff-b314-e4cbaab7dac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:48:77:63:d4:ac:df:a8:10:2c:94:22:bc:16:cc:10:06:9d:
90:54:99:8d:ab:c4:7d:9c:a8:8c:9a:5d:56:d2:fb:eb:c0:95:
9d:48:0b:95:20:86:e6:fb:f5:aa:6e:fb:26:23:f1:b8:a2:76:
e6:39:f1:7e:b6:23:8f:ec:2b:91:b3:86:1d:15:14:a1:04:45:
16:17:0e:97:d2:16:b5:3f:3c:68:ea:25:4f:77:a2:ba:8c:81:
a5:2c:c4:6f:69:ae:20:7b:57:5c:6e:a3:60:d2:bd:bf:16:c5:
84:e4:33:6e:45:80:7d:c8:7c:3c:1e:bf:b3:71:0d:84:29:25:
8e:c8:be:b9:c4:2b:f4:79:20:88:57:35:a5:78:f7:27:2d:ba:
58:c7:89:b9:43:c2:7a:9a:9a:28:49:75:26:8b:ca:0e:02:b9:
59:32:03:1f:dd:94:01:00:9b:48:56:32:f1:9c:b4:14:ec:61:
9b:94:98:14:fd:b6:6c:96:29:96:1b:8d:8a:81:85:b0:cc:a5:
9c:b7:75:b7:b3:34:2f:e5:d3:12:4d:14:51:30:12:5b:32:11:
1e:31:ba:7c:0b:d7:35:37:56:4a:1a:42:82:77:58:ca:3e:f2:
fc:91:65:8a:dd:d8:38:e9:cf:4c:67:51:fa:b2:1e:55:b0:81:
2d:4e:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:43 2025 by rpki-client