Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4abb3056-1c96-3de5-b6b1-c33178bb059f.roa
File: 4abb3056-1c96-3de5-b6b1-c33178bb059f.roa (raw, json)
Hash identifier: p7qbqlK3I/+N11Y5iGzom8Cu84becKxTk/9y7gKRDtM=
Subject key identifier: 77:C6:E9:55:A7:C7:33:42:94:DB:3D:CD:E5:04:C2:82:49:CB:EE:96
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01948B160B473149BDB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4abb3056-1c96-3de5-b6b1-c33178bb059f.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397234
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:19:48:b1:60:b4:73:14:9b:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=fc3edee3-2fba-4c65-954a-08cec98120aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:90:64:35:d3:64:eb:00:51:a9:c7:c9:cb:
4d:58:4c:4f:b3:0a:ca:47:c4:ea:02:21:5a:ab:4f:
21:65:5d:20:b6:9c:2c:b7:ec:a7:54:e7:be:65:c7:
05:6c:17:20:a7:55:21:f9:3d:2f:e3:94:8c:8b:2b:
82:81:c4:70:63:fc:cf:c1:21:ab:f8:77:06:eb:f0:
af:6e:90:4c:6e:f8:88:bc:4c:f2:94:9f:69:65:fb:
2b:c2:36:67:a4:a9:90:dc:9b:0e:69:60:05:1e:94:
f3:0a:f7:a7:2c:63:80:7b:44:a9:f7:4e:d6:2a:77:
d3:e6:6c:38:0e:1b:3f:aa:25:fe:53:bc:5c:03:e0:
cf:06:b1:0c:de:91:7f:89:02:dc:e5:33:40:84:4f:
e7:36:19:14:15:1a:49:cb:c2:7a:e2:56:61:4d:56:
25:e6:18:8d:c5:7d:a0:22:1b:50:67:da:70:4c:20:
d7:fd:0b:ba:20:0a:f1:bb:82:7a:d2:f4:9d:c3:f8:
8a:10:73:2f:a6:36:0e:f8:72:cd:ac:e2:eb:cf:b0:
e4:75:6e:27:96:3f:5f:2e:25:4c:29:db:9d:19:e9:
48:2a:48:97:7d:f7:76:6d:80:65:b2:79:f7:71:67:
b7:16:8f:6e:20:ed:48:b6:61:0b:f1:4d:17:c5:6e:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C6:E9:55:A7:C7:33:42:94:DB:3D:CD:E5:04:C2:82:49:CB:EE:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4abb3056-1c96-3de5-b6b1-c33178bb059f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:7c:56:81:99:fb:bf:43:3f:d9:93:a6:11:85:b6:e9:f1:0a:
3b:4a:43:e8:b0:dc:45:ea:4d:b2:57:f8:8a:d9:80:9b:b3:fc:
94:66:3a:a5:99:ba:52:0b:8e:79:8e:3a:3b:92:09:51:02:0a:
5b:18:cd:18:85:15:15:5a:d1:46:ae:5b:0d:1d:98:2f:6e:b1:
17:34:5d:8e:98:a0:72:48:ca:88:47:e3:5e:ba:c2:a8:1f:4b:
da:04:36:68:23:4d:c6:77:1d:2e:2e:be:b9:e5:fc:d7:2f:67:
9e:22:ff:93:ec:e4:c6:71:55:be:c1:97:d9:2b:c1:cc:39:78:
64:64:4c:e0:8f:40:e1:c1:28:6e:c2:8b:e5:f9:07:d8:b1:3b:
80:ba:8f:c6:60:1d:1c:19:0c:1a:f0:54:0f:c8:d2:47:28:53:
5f:d2:35:5e:ad:6a:46:aa:c4:62:e1:39:31:8b:a3:3e:fd:bc:
d4:9f:48:9d:31:b1:a1:1d:78:d8:39:8a:42:11:5f:c6:ab:96:
7e:5a:cd:6e:23:dc:20:f9:f3:b0:4a:fc:0a:1f:45:c5:22:f9:
a4:88:bd:c3:ed:0f:b4:31:7f:a0:98:a4:ff:47:2b:bc:03:7e:
1e:2e:e1:50:4a:4a:f0:4d:d9:9e:67:38:34:f8:13:a8:3d:d2:
7e:25:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:23:10 2025 by rpki-client