Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad73951-d963-31e3-9ea4-11f3c3ac6b99.roa
File: 0ad73951-d963-31e3-9ea4-11f3c3ac6b99.roa (raw, json)
Hash identifier: xWZXAq+BFlpoF+nSzhzMHPwA6BGgaLzz8kPHtidd8RU=
Subject key identifier: 21:AF:04:0E:76:D0:4E:7B:E2:F4:FB:8D:18:4D:71:FF:02:82:66:3C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285847DDCA335F2F2A11004D1A7580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad73951-d963-31e3-9ea4-11f3c3ac6b99.roa
Signing time: Wed 13 Nov 2024 14:00:39 +0000
ROA not before: Wed 13 Nov 2024 14:00:39 +0000
ROA not after: Tue 11 Feb 2025 14:00:39 +0000
asID: 397229
IP address blocks: 156.154.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ca:33:5f:2f:2a:11:00:4d:1a:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Nov 13 14:00:39 2024 GMT
Not After : Feb 11 14:00:39 2025 GMT
Subject: CN=da60d3e7-b9d2-4898-a90e-d9f5419b9020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:9d:db:5b:ca:bb:19:4f:65:0c:c2:85:eb:
99:32:4b:e5:5b:b3:7d:47:3a:a1:77:05:3c:c6:11:
65:29:15:e2:4a:51:f9:75:92:45:74:ed:16:34:50:
b3:a1:89:1c:9c:a7:9c:db:80:32:03:b4:32:d8:f2:
4e:5c:85:5e:76:9f:b7:cf:c6:83:47:63:aa:ba:94:
5b:22:4e:7d:20:2f:57:2d:df:55:0f:85:2b:10:dd:
88:ec:ac:7b:2b:c3:b0:8f:e8:f2:1d:fe:df:65:7b:
91:b7:b4:14:a4:60:ba:c2:51:ef:83:03:e4:b6:f6:
09:2c:0f:fc:95:16:4c:6a:3f:ea:e5:6d:b8:21:89:
5b:41:d6:e8:40:66:82:73:c1:de:c8:c8:68:0e:d3:
ac:e1:be:3b:73:1a:19:27:0a:df:e1:9d:21:de:5d:
28:44:3f:aa:3f:75:57:cf:4b:5d:d8:0b:ae:c0:7b:
e1:cc:e6:59:20:3e:ea:9b:be:fa:94:c5:69:dc:87:
3b:c3:ea:cf:ee:1b:4e:22:9d:d3:70:9f:22:b7:d7:
91:05:dd:4f:0f:fc:c9:c1:f5:41:7b:d6:ec:34:22:
da:67:1c:2f:75:c4:d6:be:6f:b1:3e:11:51:29:b0:
f8:fc:40:00:14:fa:e6:52:27:fe:2f:a1:e4:4e:1c:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:04:0E:76:D0:4E:7B:E2:F4:FB:8D:18:4D:71:FF:02:82:66:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad73951-d963-31e3-9ea4-11f3c3ac6b99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:eb:9f:ac:39:c0:de:86:f6:c8:4f:a6:83:28:be:84:df:45:
95:06:f4:57:e9:6f:76:7d:b0:84:8a:9b:8b:b0:a4:c6:d6:a1:
91:65:c1:09:8a:08:c0:42:62:a9:22:fe:bc:43:f0:8e:c4:3d:
3b:b0:a1:c1:bc:61:4e:05:6a:38:6f:80:ae:e6:43:c3:b6:0c:
56:46:dc:a4:c3:0a:fd:85:7d:d2:90:49:49:fe:16:10:ca:b2:
10:e7:fc:9e:07:a6:74:d1:c1:cb:11:59:65:46:2d:54:4f:5a:
0b:64:05:43:44:b4:55:12:fd:b3:07:22:6c:fc:12:d4:75:39:
53:ad:4a:3c:a0:e9:4d:e6:9a:c9:d9:8a:93:48:dc:3e:dd:84:
7e:2f:fe:5c:ab:89:74:ce:fc:d8:2c:df:c7:ad:bf:b2:9f:21:
a1:60:6c:64:df:24:d7:4d:04:f8:eb:f6:4c:2d:9b:90:67:ce:
f6:26:35:91:28:1b:03:7b:8e:94:ae:2e:75:53:04:4c:42:d0:
89:c3:16:3a:39:7f:e4:d8:ad:98:a0:3d:1e:2d:e7:8e:67:52:
40:31:cf:5f:56:e6:29:0a:c7:f4:c6:0b:83:4d:47:1a:d7:6e:
45:fa:00:0a:92:a9:82:0e:73:e0:20:b5:da:b5:03:f9:26:de:
2a:fa:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:01:35 2025 by rpki-client