Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/171bd053-e72c-38f7-96aa-5c2e1eb6fad7.roa
File: 171bd053-e72c-38f7-96aa-5c2e1eb6fad7.roa (raw, json)
Hash identifier: vGc7s0EM5Zg6TjwazOaMw4VgsrLdnyJ0apBxehxC8qY=
Subject key identifier: D3:41:C1:B4:31:E8:D9:B5:FB:41:E1:C7:5F:5F:6E:20:54:39:09:F0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00CE3CD646A11E20D8780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/171bd053-e72c-38f7-96aa-5c2e1eb6fad7.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397241
IP address blocks: 156.154.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0c:e3:cd:64:6a:11:e2:0d:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=566174a2-d0bf-428e-af50-212868a6eb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:db:fe:6f:2c:5b:4c:6a:ae:67:da:b0:a6:
dc:af:17:8b:f0:0d:97:0d:2d:9e:81:32:84:1a:f4:
2c:31:4e:83:a3:aa:18:38:19:e8:1f:48:18:85:96:
f7:bb:54:e3:70:c4:80:a8:1a:21:81:30:d6:2b:af:
39:7d:5b:68:8d:92:03:64:17:28:09:d9:68:43:8c:
85:f6:b8:74:b4:c8:0f:75:59:be:dc:cb:b2:de:d9:
6f:99:6e:d5:d9:fb:5f:d9:f3:2b:10:c2:bd:64:43:
f7:d3:c4:61:75:bb:2d:89:6c:1b:41:1f:b5:2f:23:
7c:12:0f:98:d9:29:22:e5:d8:dd:4a:6b:d5:57:2b:
f4:2e:20:ad:96:3b:0e:7f:d2:a5:b6:54:91:35:02:
79:f0:15:b0:b2:af:f6:75:4e:55:f0:85:d1:b5:dc:
e1:43:9d:09:9b:a5:88:d8:ea:34:4a:03:4a:42:fe:
5c:b9:0b:8b:a9:19:8b:b1:93:fc:1f:33:71:1f:55:
4c:db:d3:57:6e:ae:a7:2c:9f:d1:52:93:83:12:0c:
6c:5a:88:c1:b2:8e:19:5a:bd:5d:2d:3e:c1:16:8e:
01:c1:e9:59:a9:e7:e6:fc:fc:d4:a0:d0:8c:c6:d2:
ee:01:4c:3f:d6:1a:9b:7f:b3:ae:f3:4c:bf:d6:41:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:C1:B4:31:E8:D9:B5:FB:41:E1:C7:5F:5F:6E:20:54:39:09:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/171bd053-e72c-38f7-96aa-5c2e1eb6fad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:53:3e:ef:40:ad:d4:fc:fe:8d:40:00:4b:61:14:38:1f:81:
f6:d1:0d:3c:48:3e:c8:c8:b2:76:89:6a:c5:ca:99:f0:15:f7:
ed:ff:f6:e7:5d:ec:d0:d6:52:e1:91:69:6b:d1:a9:69:fc:d1:
6a:e2:f8:74:e7:87:7d:5e:c4:2f:29:32:58:0c:7d:0e:87:be:
72:69:96:99:ca:24:ec:d4:08:aa:a6:4e:5e:a4:e6:d2:4c:5e:
9a:5f:a0:4b:d3:6d:1b:d7:09:f1:01:05:26:e6:d2:70:25:6b:
fe:24:ca:16:06:d4:de:a3:71:0c:34:9c:27:e7:39:04:ac:7a:
69:a3:c9:46:f9:eb:05:95:a1:5f:0f:03:a9:7b:d5:b5:86:10:
f0:52:9d:08:ba:4c:b1:6e:dc:d0:59:0a:e4:6b:30:08:3a:72:
41:d5:3e:17:01:8b:9c:f5:8a:e1:e9:fe:46:9a:7b:e5:3c:8f:
3b:c9:d3:e8:30:a4:5f:72:4e:25:1b:da:10:da:79:b0:47:40:
fb:0a:92:a9:f8:ae:9c:17:59:10:7c:65:83:0e:d6:fb:04:fc:
97:5f:0f:91:a0:ce:64:54:f0:d4:f0:0b:ea:52:ad:36:b5:49:
3e:7f:b7:7f:af:7c:80:fd:fd:80:08:54:fe:ad:20:c6:ed:46:
76:da:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:24:03 2025 by rpki-client