Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6473a8b7-1ffb-3b1a-a3e4-c92a48a15dc8.roa
File: 6473a8b7-1ffb-3b1a-a3e4-c92a48a15dc8.roa (raw, json)
Hash identifier: 7xyr8diMsiavN8p4szwmFt2/Ej6q+djmdCnQVhhpv90=
Subject key identifier: AC:E7:CD:23:66:05:E7:FA:B3:7B:CB:CE:76:A1:2A:65:A7:9E:56:13
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285847DDCA3484F6D06F5B8784C8C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6473a8b7-1ffb-3b1a-a3e4-c92a48a15dc8.roa
Signing time: Wed 13 Nov 2024 14:00:39 +0000
ROA not before: Wed 13 Nov 2024 14:00:39 +0000
ROA not after: Tue 11 Feb 2025 14:00:39 +0000
asID: 397216
IP address blocks: 156.154.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ca:34:84:f6:d0:6f:5b:87:84:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Nov 13 14:00:39 2024 GMT
Not After : Feb 11 14:00:39 2025 GMT
Subject: CN=fef939fa-f78e-433d-9eee-9c8647f0bce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:10:cb:26:55:52:9a:da:87:f3:6a:47:e7:
4e:28:2d:71:03:8c:64:69:ea:52:59:de:44:9d:5b:
f6:4b:02:d8:72:44:18:31:16:22:5c:59:f8:75:42:
5f:81:29:57:b5:9d:0b:c5:33:48:77:a7:0a:c0:ca:
e7:03:f3:eb:0b:04:fd:96:f0:c7:cc:00:b7:ba:00:
8f:9d:e4:7f:2c:4f:c7:83:4a:3e:fa:72:d2:92:eb:
3f:f2:84:c1:91:cd:88:01:5f:fa:1a:e5:7a:e7:a1:
fc:0b:f9:44:96:e9:1e:31:24:02:72:3f:a8:dc:ad:
d7:e3:c0:40:18:4d:e3:2e:46:03:81:e1:40:61:a6:
d1:84:63:a6:44:0c:6c:55:e0:a9:95:df:60:85:50:
18:87:23:b0:bb:03:f4:3d:a8:bc:76:16:52:64:56:
33:47:c0:d8:99:cf:fe:2f:7c:78:c6:2d:7c:07:1d:
94:86:0f:a9:92:00:0e:45:b8:d7:6d:10:08:c9:31:
91:06:15:75:f3:f4:1e:8b:41:58:c2:68:df:7b:61:
0a:7c:f3:2a:24:a9:21:22:b2:89:23:dd:2f:c5:a7:
81:e3:4d:8d:eb:01:d4:16:ab:b6:7f:85:a0:88:2b:
63:8d:0a:ce:3f:1b:cd:92:35:22:75:aa:c2:c2:0c:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:CD:23:66:05:E7:FA:B3:7B:CB:CE:76:A1:2A:65:A7:9E:56:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6473a8b7-1ffb-3b1a-a3e4-c92a48a15dc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:16:14:a5:b7:73:b8:d4:d2:3c:dc:b0:9f:92:f6:a7:fb:0f:
f8:a1:1c:ca:58:fc:c7:ef:5c:a2:2e:5c:79:7a:db:8a:11:2b:
de:b7:c1:9f:d5:48:f1:9b:a2:0c:6b:1c:81:89:92:68:43:9d:
43:5c:0b:ba:63:97:14:7c:c2:b8:fd:e8:85:7d:7f:31:8a:2d:
0e:b5:da:04:64:68:75:b5:67:b2:21:68:3f:7f:7c:0d:46:52:
e2:c9:64:a3:fa:5d:a4:25:83:a7:e0:9a:0a:90:e6:db:7e:52:
9d:5c:1b:5d:03:91:ab:95:15:71:7b:3e:42:43:4e:9c:cf:d6:
57:85:16:47:7b:1f:58:52:f7:37:9b:be:91:d9:55:45:96:ad:
f7:6e:c9:11:8a:71:8c:1f:ea:c7:96:71:7d:28:07:f7:e5:6d:
a1:38:42:67:48:ce:9c:3e:d7:44:6d:00:27:ac:e7:c6:21:28:
13:ec:ad:a6:13:88:4c:50:4b:8c:45:7d:83:98:a3:02:0c:10:
ba:8b:89:55:eb:49:98:84:e6:32:fb:de:2e:e0:fb:e7:c5:59:
33:f4:d0:5a:92:7b:c5:2b:0f:0d:4a:f9:a7:12:f6:d8:af:75:
4f:d7:30:7e:0b:94:ed:03:64:e6:fa:25:04:f6:92:d6:31:0f:
36:ba:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:47:50 2025 by rpki-client