Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f2a680b-f04d-33e8-9d09-15281372c2f9.roa
File: 0f2a680b-f04d-33e8-9d09-15281372c2f9.roa (raw, json)
Hash identifier: OgNQrQEvFZGQj47yfR0l0+92BShpWYXEA+e4W0lRVUQ=
Subject key identifier: FB:90:11:3A:33:BC:48:10:D4:0D:93:9C:4E:5D:77:24:87:5D:BE:A0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F010D05180E555A33AEB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f2a680b-f04d-33e8-9d09-15281372c2f9.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 12008
IP address blocks: 156.154.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:10:d0:51:80:e5:55:a3:3a:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=6a303596-b2e2-42ac-8995-de32cb985e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:53:66:ee:ee:82:59:25:76:dc:c5:ac:a3:
87:2f:60:56:48:14:83:7a:c0:85:94:1b:8b:97:1f:
5e:7e:44:b9:3c:1e:da:3c:c1:e2:3d:1d:a7:48:94:
fe:f3:6e:84:6b:97:a6:f5:c0:ca:b5:31:d8:7b:f5:
b0:9b:7b:52:b9:b7:31:96:a5:a9:e6:0f:48:f0:d9:
8f:25:ee:95:db:52:8b:97:cf:e9:e0:c1:9c:a0:98:
39:e9:13:e7:e5:90:0c:8b:52:88:f6:48:f4:09:0a:
28:c3:ce:29:ac:6b:df:f1:cb:c8:b0:3d:bc:c6:3a:
7d:38:ef:28:29:4a:87:39:80:15:ce:53:2c:9c:25:
0b:4e:8e:1a:0b:2c:93:c2:4f:5b:33:8a:ac:af:ce:
b5:1b:5a:07:53:91:a8:df:e5:b5:2e:51:1c:79:cb:
3c:37:c1:42:9d:09:39:a2:68:5c:97:d5:c0:e8:0c:
77:c4:c8:46:00:cc:8c:22:5b:7e:fa:60:7d:a4:fe:
32:7a:b3:e5:7b:a8:53:9b:2a:bc:82:c9:f2:5d:4e:
e8:95:86:f2:5b:35:60:e1:9c:df:be:5c:90:37:93:
88:7c:01:91:5c:0d:b3:0e:09:5f:aa:67:c6:58:44:
70:8e:f9:03:d8:bc:da:2e:a5:83:62:56:aa:e4:1b:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:90:11:3A:33:BC:48:10:D4:0D:93:9C:4E:5D:77:24:87:5D:BE:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f2a680b-f04d-33e8-9d09-15281372c2f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:bb:71:ed:f6:06:f8:93:18:7e:b9:f1:07:34:56:18:45:a7:
e3:b5:3c:d9:70:fa:31:34:f7:8f:f9:0f:25:92:f1:c6:80:a6:
2c:b4:cb:7b:7e:bb:1f:6c:eb:e1:d7:b8:39:0b:14:ba:a5:3e:
57:b8:b4:a8:75:6a:91:68:c2:d6:77:b0:78:3c:8d:5c:4c:6d:
97:5b:70:c5:72:04:bd:83:a8:34:c6:82:93:1d:38:3c:b4:90:
2d:e7:03:58:a7:6d:f4:62:06:e2:81:a9:1e:03:fe:e4:9f:95:
e7:45:b1:0b:a1:41:10:2c:44:3a:c2:89:fb:d5:9d:60:da:8f:
cf:ca:ac:ab:94:37:a5:ff:f2:55:a3:ac:d0:30:bc:69:23:91:
45:ed:07:b1:4e:a6:a5:58:d4:82:e2:c1:ea:8f:f4:10:97:b3:
ce:9e:66:1c:bb:04:cf:0e:bd:13:48:9a:db:fd:ae:c4:9c:93:
62:1e:19:fc:f7:d6:8f:03:38:12:f1:b2:29:4e:a1:52:07:fa:
fa:59:c3:b0:78:f3:33:7f:3f:93:77:e7:a0:2b:7d:f1:98:af:
07:bf:ac:31:bd:0c:2c:4a:17:88:6f:d5:51:97:5c:49:b8:e7:
bb:e4:4e:81:8a:d1:10:76:5c:34:86:82:de:aa:de:03:4b:8d:
b2:99:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:41:44 2025 by rpki-client