Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/313c2654-22b1-3b32-99da-a0f240c82b9b.roa
File: 313c2654-22b1-3b32-99da-a0f240c82b9b.roa (raw, json)
Hash identifier: kZq3nctIOTG6aUBJFiWUVYQ0MjGUtsCKKDhSwhlVQ/Y=
Subject key identifier: EC:0A:41:66:88:82:34:82:66:42:9F:93:4C:D1:42:6E:17:22:81:6B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01855D336096E4ABE3120
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/313c2654-22b1-3b32-99da-a0f240c82b9b.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397215
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:18:55:d3:36:09:6e:4a:be:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=ff949600-c29a-4327-99c6-68ca7a5e98b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:2f:30:8a:54:c5:d3:92:91:67:01:99:a1:
7f:b7:16:50:ec:e4:2d:bf:72:48:03:51:74:a1:90:
b4:62:37:d6:ba:ad:a9:c6:a8:28:da:56:d2:cc:eb:
10:84:ba:12:b9:2b:4a:4d:7a:0c:2f:78:fc:c4:58:
10:0d:c0:e6:7f:23:3b:8b:57:ce:7a:cf:ab:28:49:
f6:4f:5c:ed:c5:c5:2a:4e:7e:88:cf:3d:c8:31:98:
52:11:81:06:84:b2:18:0b:c2:d2:9c:e6:ff:21:77:
aa:1f:21:5e:23:41:95:30:51:ea:bc:b3:63:65:ea:
cc:1a:ec:15:82:7e:64:e9:15:67:1b:43:4f:34:fb:
fc:96:4d:31:47:55:5f:ec:ec:03:e0:a6:48:60:2f:
a2:04:e6:a6:83:c1:e9:87:08:63:50:bb:8d:65:9a:
49:47:63:f9:7d:b2:06:da:ad:1b:6e:22:c9:f1:2e:
12:ef:3a:48:8d:9b:11:05:d1:ab:5d:d7:61:45:50:
42:49:38:d2:11:4d:5b:72:1f:bb:e8:c5:84:0f:d6:
8e:be:f3:68:3a:d2:c0:00:13:77:e7:5a:8a:d8:d2:
08:36:4d:60:5b:0d:48:40:d0:05:ad:a5:5b:40:18:
e0:3e:af:b4:94:8e:44:39:58:bb:89:bc:d5:41:5d:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0A:41:66:88:82:34:82:66:42:9F:93:4C:D1:42:6E:17:22:81:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/313c2654-22b1-3b32-99da-a0f240c82b9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:4c:cb:90:d7:f8:26:e0:2e:21:22:d3:8e:30:d9:b6:8e:b4:
fd:d1:a1:e2:b5:8a:2d:03:c0:f8:b0:93:41:25:38:1e:d4:fb:
bb:ae:de:78:ed:9b:be:4e:33:3f:0b:1a:70:ff:56:bf:c6:36:
af:71:34:2f:8a:65:7c:7c:c8:c0:d5:40:a1:17:6f:64:70:95:
b7:b3:96:b5:04:52:23:12:27:a7:da:c8:19:62:7c:69:90:5e:
04:1f:70:f1:aa:6b:4b:8f:05:b2:e8:65:bb:a0:40:2a:1a:d3:
df:83:ee:6f:e9:7d:da:82:ae:92:c6:c8:47:2d:4c:26:8b:27:
e7:b5:05:3d:f5:90:9a:10:6f:f9:86:43:2d:b8:be:b7:a8:49:
b0:4f:f6:74:f1:53:02:b8:25:8b:85:12:3c:6b:c3:44:f1:ff:
90:d3:a1:aa:3e:ef:09:a7:f7:44:87:f4:9c:27:95:27:b3:5d:
d2:c6:36:6e:ca:cb:2b:dd:a8:3a:b2:5a:44:69:37:ae:a2:28:
14:9f:48:0d:72:a3:fa:6e:79:0d:27:4e:10:00:70:52:79:c3:
9e:88:45:e7:86:aa:1b:c2:ef:07:c5:60:9b:a3:52:4b:36:d1:
65:26:75:58:c2:86:e4:fc:e5:58:c9:36:aa:86:59:17:29:27:
03:b9:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:52:55 2025 by rpki-client