Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/575ed7fa-ddfe-3689-8b33-23bcde60b060.roa
File: 575ed7fa-ddfe-3689-8b33-23bcde60b060.roa (raw, json)
Hash identifier: IfjdNtOTAAL0fv/36Lf/RwoWLJVr/NzGeikQ8VbVkDY=
Subject key identifier: E6:02:E3:7E:06:2E:F0:C2:95:05:94:23:51:40:7B:E0:88:3E:FA:BE
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01CE72CE99D399ACE5480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/575ed7fa-ddfe-3689-8b33-23bcde60b060.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397234
IP address blocks: 156.154.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:1c:e7:2c:e9:9d:39:9a:ce:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9022e11a-eeb5-430d-82dc-927fe844b8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:60:13:fc:a2:ed:37:56:ce:f4:e0:ea:2b:
70:04:ef:07:f8:d0:b4:94:bd:c1:1d:50:b3:02:32:
cd:18:c5:ae:9a:d0:16:3f:49:81:64:67:06:ce:10:
7d:12:9b:28:34:40:47:6d:c9:e1:5c:fe:69:75:cc:
22:8f:a2:ef:1d:9a:4b:74:1b:dc:30:33:fe:33:cb:
f5:d6:22:25:55:0c:d0:d6:a3:f8:d1:d1:d1:39:41:
3d:1f:3a:ac:14:35:cc:79:e2:6e:f5:2b:ce:94:9b:
82:29:32:04:d0:8f:d0:d1:44:7b:fe:5d:e8:73:0e:
3a:39:bf:03:af:b5:35:7c:a6:ac:5e:50:12:53:f0:
50:00:14:a3:24:8e:28:0f:55:5f:fb:f8:39:74:cb:
c7:a8:18:64:f8:f7:8c:7f:64:26:55:4e:14:3b:66:
a7:41:ca:72:fd:72:66:73:fd:03:03:c3:72:49:40:
b3:1d:7c:56:31:12:ad:80:23:31:92:5b:d8:82:b9:
7c:8d:d7:01:ea:1a:d9:50:40:2e:02:bb:01:ba:3b:
70:3d:53:0c:2a:b0:97:d1:f3:d7:fe:1c:44:6a:96:
70:3b:2a:55:52:ae:67:78:7d:73:fa:72:8f:96:54:
f9:ac:e8:b2:ff:0c:b4:e2:7d:c6:0d:98:17:a5:bc:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:E3:7E:06:2E:F0:C2:95:05:94:23:51:40:7B:E0:88:3E:FA:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/575ed7fa-ddfe-3689-8b33-23bcde60b060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:a8:3f:63:e6:43:e9:99:55:76:c9:40:4b:b8:f4:3f:8f:08:
62:88:aa:be:96:99:57:80:df:bc:64:93:9c:24:bd:d1:42:35:
77:63:52:b4:75:f1:e7:5c:e6:39:5e:92:9f:3f:64:50:68:50:
88:26:47:01:a7:4d:ca:4e:d1:ff:d6:04:60:f7:1f:b9:73:a7:
d3:57:f9:0b:0c:68:a3:e0:71:b4:31:bd:70:ed:a6:aa:91:6b:
be:cf:7d:0b:3f:14:80:64:1a:65:75:df:18:6e:ef:51:27:82:
2e:b8:99:bd:ef:89:21:97:db:db:67:8c:ea:00:a3:41:47:a4:
12:40:8e:0b:2a:f4:a7:ab:2e:e3:76:c3:48:33:f7:20:85:32:
be:f0:44:c8:a2:d7:01:6f:ac:5c:29:cf:9d:8e:16:b0:02:5e:
6f:e0:29:8c:3b:97:5f:02:0b:11:f7:c0:9d:f6:05:fa:11:6f:
cc:9f:0d:05:8a:8f:3a:d3:be:93:9b:fb:4c:9f:79:41:2b:44:
df:55:e4:49:7c:cb:88:f8:89:e1:a8:df:7a:38:20:fb:ad:2b:
28:28:dc:0d:c4:99:de:ba:07:88:c9:e0:52:6b:dc:1b:84:d3:
b3:b2:83:45:23:67:6d:e1:0f:e8:80:13:2c:43:1f:55:46:d3:
72:31:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:54:43 2025 by rpki-client