Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b872439-cce9-39b6-862b-8b966c1e02ea.roa
File: 2b872439-cce9-39b6-862b-8b966c1e02ea.roa (raw, json)
Hash identifier: LR4B+SmY3RU6+hUoThIcZsZu+tR1J/2cnYzESoUYCyQ=
Subject key identifier: 32:5D:74:FD:36:05:5D:40:EB:89:2F:48:8C:D8:73:74:1D:16:E9:01
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00833029AB152CB5B5EF0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b872439-cce9-39b6-862b-8b966c1e02ea.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397226
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:08:33:02:9a:b1:52:cb:5b:5e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a3947f3c-a441-4ba5-98a3-a98d11dd0ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:c9:f3:04:89:76:a4:5d:36:50:1d:b3:46:
5b:7b:09:0c:9c:36:46:40:c2:3c:a5:b6:3e:82:5b:
7b:39:1e:74:d9:af:e9:96:93:c1:77:f7:2f:2e:bf:
40:52:08:d1:01:b1:ec:79:9d:62:cd:61:9c:f2:3a:
28:8d:d7:06:9b:be:ac:f1:79:74:ba:90:c7:2e:42:
e2:a3:3c:a9:e2:66:89:2f:73:4f:29:f2:c9:0b:15:
5e:77:d1:ee:a2:91:77:6e:3a:42:6e:96:3f:56:94:
b0:33:b3:41:6f:54:e2:58:f6:38:aa:4f:fb:2b:37:
6e:df:8a:fd:be:6c:da:6f:3a:70:ae:b6:b3:90:78:
82:92:7d:be:1c:f7:ad:62:73:5b:7b:7f:b9:ef:51:
a1:24:95:69:08:2d:e3:98:bf:00:4b:10:42:ac:59:
3c:31:70:b9:9c:93:1a:f7:98:c8:a8:fd:50:22:70:
99:aa:dc:c6:e2:ca:5f:d2:99:6b:bc:e5:91:3c:82:
fe:c1:b4:14:bf:d4:1d:80:02:bd:cd:bc:50:0d:3d:
bf:0a:04:50:9b:3c:69:72:39:69:6c:b8:e0:de:01:
e1:4e:ec:ef:15:35:4c:28:78:d5:dc:95:bc:c8:a1:
93:1e:88:c3:ea:4a:6b:8d:89:e4:45:67:88:cb:e5:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:74:FD:36:05:5D:40:EB:89:2F:48:8C:D8:73:74:1D:16:E9:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b872439-cce9-39b6-862b-8b966c1e02ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:fc:a4:53:29:c6:d3:28:eb:4d:21:f6:a6:f1:03:37:1b:b7:
dd:03:03:a3:be:f6:14:19:48:5e:89:1b:e1:bf:ab:30:8a:8f:
01:32:75:8d:a9:86:c3:01:b2:97:58:b9:f7:56:ad:3c:73:93:
1e:1e:c7:da:d1:5e:d1:1f:ec:44:a0:63:f1:bf:35:40:65:15:
df:c6:18:e3:ab:04:f7:86:2f:b1:8f:8c:15:99:86:a4:a7:33:
3b:a5:48:85:65:64:f2:c8:6c:6f:4a:ac:d0:63:06:ee:8b:1d:
2b:be:4c:57:cd:02:f1:c5:cd:18:eb:c7:91:f7:de:aa:05:76:
c6:41:85:36:c7:f5:b1:d8:0c:f6:4e:b0:ac:8b:31:0f:80:2a:
14:d5:d7:c9:7b:b8:bb:f0:2b:d5:ef:21:89:9c:10:f8:b1:d9:
68:4c:15:00:c7:5d:99:1b:fd:a4:79:31:9f:7a:89:63:22:84:
55:8e:46:39:98:25:f2:52:59:25:06:9b:be:25:15:c9:2f:41:
9a:1c:99:a4:8f:e4:3d:75:fb:bc:08:cc:33:5f:a1:2a:1c:b9:
74:03:79:d4:fd:3f:a0:e4:0f:2b:c2:0c:3b:38:c6:37:a0:0c:
7e:2f:95:f2:b5:0c:ae:9a:24:85:7a:01:2e:01:24:13:b9:27:
d8:8d:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:42:34 2025 by rpki-client