Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b555e68-4c51-3752-a450-b18f92e0d2fa.roa
File: 2b555e68-4c51-3752-a450-b18f92e0d2fa.roa (raw, json)
Hash identifier: dSUSqo9Zww1V1g/KHpNEWRJhZ2wLvKuZflryhb8midg=
Subject key identifier: 44:30:CA:C6:81:1D:AA:5D:31:C3:A1:AE:2F:0A:B7:07:EE:03:AD:18
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285847DDCA14196A68AE12AE5ADA80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b555e68-4c51-3752-a450-b18f92e0d2fa.roa
Signing time: Wed 13 Nov 2024 14:00:39 +0000
ROA not before: Wed 13 Nov 2024 14:00:39 +0000
ROA not after: Tue 11 Feb 2025 14:00:39 +0000
asID: 397238
IP address blocks: 156.154.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ca:14:19:6a:68:ae:12:ae:5a:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Nov 13 14:00:39 2024 GMT
Not After : Feb 11 14:00:39 2025 GMT
Subject: CN=e00acc6b-8357-4773-b2fe-5c5949596056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:f0:7f:1d:14:5c:89:15:81:4f:db:03:79:
bf:87:c8:4f:c8:a6:0f:56:9d:7b:0e:fc:68:af:22:
f6:59:d0:db:3a:8c:e0:43:38:a6:3f:60:7e:21:7e:
25:79:83:6a:2d:24:62:c1:dc:54:29:d4:dc:79:2a:
04:44:22:59:d6:53:fd:32:53:80:fd:3c:61:2e:4e:
c1:20:24:11:f9:e4:c2:4c:31:af:92:98:fd:fd:51:
49:5c:c4:94:ba:40:42:ac:e5:1d:77:0e:be:a1:1b:
eb:aa:df:c1:c4:94:d6:92:5b:e5:58:58:e7:fb:2f:
cf:75:af:2f:69:dd:60:f1:f0:5f:8d:5a:c2:b7:3d:
a4:bf:f3:f3:89:fb:f1:c4:5f:94:1b:3b:9a:90:18:
c4:88:10:d4:26:9a:8a:ff:25:db:98:21:02:ff:9f:
f2:25:d4:63:d0:76:e3:ab:16:28:5d:68:b0:da:84:
1b:d4:ef:f3:49:63:aa:39:d7:65:d3:f0:69:41:a1:
57:8b:ab:75:27:49:e0:e5:2e:98:b1:40:a4:66:d3:
4f:d0:22:bc:26:31:d3:65:1a:43:62:21:ac:87:08:
0a:16:a1:c5:11:5c:71:84:c6:1f:73:5f:c0:f8:f5:
33:1f:96:ef:59:27:f8:f7:b2:f5:69:83:68:fa:2c:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:30:CA:C6:81:1D:AA:5D:31:C3:A1:AE:2F:0A:B7:07:EE:03:AD:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b555e68-4c51-3752-a450-b18f92e0d2fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:24:2e:01:a3:9f:cc:b8:e4:d9:88:2f:a8:93:c8:3d:19:ba:
07:a8:b8:1c:ba:22:0a:fb:59:9c:78:d6:cb:66:fc:a6:5c:27:
23:fe:0e:eb:1d:0a:f5:42:79:53:af:99:4b:7e:f2:f5:2b:07:
16:d3:9e:66:80:f2:79:6c:eb:37:12:cd:01:16:b4:6a:74:0b:
ae:85:4e:c2:49:dc:4a:60:69:79:ea:68:c1:f0:21:55:a4:11:
f6:dc:d2:9d:7a:bf:18:2a:28:b0:28:c4:aa:2a:0e:66:1c:04:
84:1b:a1:4c:bd:a7:c8:60:78:07:74:8a:f2:61:f8:1d:8d:34:
75:be:63:d6:ba:d7:78:ef:2b:5d:6b:08:2a:10:1f:cd:99:a6:
d6:df:89:68:45:66:f9:67:5f:87:51:30:a9:2b:36:f6:b9:1f:
43:a0:24:eb:f5:53:cb:08:3b:0a:2a:fc:ea:85:1f:5d:b5:95:
7c:54:82:7a:5c:12:77:c1:f7:07:0f:46:46:00:8f:db:d7:0f:
00:8b:0a:e9:89:21:04:1a:58:0e:68:49:4a:e6:1a:ca:48:fc:
5d:00:bf:d8:c3:06:e7:35:c4:d9:ac:de:43:36:56:3f:ee:af:
f3:b4:59:13:e6:fa:42:f1:19:e1:62:c0:22:f8:e0:7d:06:13:
70:1f:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:29:35 2025 by rpki-client