Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/672f2173-372a-3d5a-be5c-7cd10c8bd21d.roa
File: 672f2173-372a-3d5a-be5c-7cd10c8bd21d.roa (raw, json)
Hash identifier: RUNrBPt0aT6y+5rQDdRXY+3cDh5ORee1ZfPs6UhwveA=
Subject key identifier: 4A:F6:FB:B0:3A:D1:71:55:51:34:F0:33:91:55:73:18:3D:70:2E:2A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01589BCC5D6E7B32A3100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/672f2173-372a-3d5a-be5c-7cd10c8bd21d.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397230
IP address blocks: 156.154.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:15:89:bc:c5:d6:e7:b3:2a:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=34025a67-984c-4c02-88f0-a5643aa47d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:55:4f:b3:d7:c6:2b:db:5e:6a:90:09:9f:
3e:9d:9e:e6:46:b5:ab:21:76:e4:b0:50:b1:1b:5d:
25:e1:8a:5e:a6:54:fe:37:32:32:c7:f6:c7:0b:90:
f1:72:f2:56:58:93:a5:4c:7c:3d:af:be:db:16:78:
ae:12:c9:ab:d2:0a:f9:93:bb:42:77:f8:77:a3:85:
b4:36:a3:c4:7c:70:a4:e1:5a:4f:68:12:39:0a:7f:
f5:64:f7:eb:e8:7c:94:50:de:73:c4:06:44:36:59:
23:f7:76:98:55:7c:8d:50:76:e2:79:ba:12:6c:54:
2b:8c:e6:a5:52:27:db:5c:df:3b:bf:55:d0:65:d7:
00:7e:f6:07:00:7e:cf:18:74:d7:5b:e2:d4:59:85:
54:56:9d:7e:19:09:68:b7:92:23:fa:c9:79:26:bf:
b0:ed:94:1f:4c:8b:b4:3b:b7:d6:b9:28:24:3f:b5:
03:5b:1e:77:c6:d9:7a:94:99:49:cf:4f:d1:5a:dd:
1d:6b:e7:dd:b4:6b:09:40:7e:f6:9a:93:8c:59:8a:
af:a1:76:02:af:25:83:30:20:3c:b8:c7:cb:ac:31:
83:1b:98:a3:01:c7:37:b4:f8:b5:c6:25:03:a6:4d:
2c:6a:63:c3:7d:73:e7:56:10:67:5e:2a:fa:f8:4d:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:FB:B0:3A:D1:71:55:51:34:F0:33:91:55:73:18:3D:70:2E:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/672f2173-372a-3d5a-be5c-7cd10c8bd21d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:73:25:00:40:be:37:b9:36:91:02:55:db:23:66:3d:b6:92:
4b:db:2f:f8:38:70:cb:2a:78:67:2c:34:5d:1c:5d:13:02:ee:
75:1b:1e:2b:68:2c:31:ef:7a:7e:ec:ce:33:80:2c:58:02:ff:
05:3e:56:19:c1:d8:b4:f5:df:8b:30:8b:c2:9f:20:f3:3b:53:
a2:cc:01:38:32:f8:82:db:0e:c3:73:01:65:89:93:62:4b:c8:
ba:d3:d3:de:32:36:dd:7c:2a:9d:68:c2:4a:bb:b9:4c:01:aa:
f5:00:9c:7e:5f:7a:01:34:d3:ad:e7:d9:9a:9c:80:3e:53:65:
7e:69:27:4d:9f:30:e8:5c:02:5e:82:98:c2:40:81:48:96:d1:
6c:38:d6:40:e3:8e:ca:f2:48:f3:b8:f5:1e:57:e9:db:b5:77:
02:99:89:5b:cd:27:ed:ef:a1:14:8c:36:d4:78:38:4b:48:ef:
ae:f8:9a:48:cc:70:a9:0c:04:42:68:e8:97:53:58:04:1f:12:
72:d2:d6:5a:2a:a4:7d:e8:43:d9:7f:f0:35:a7:0a:81:1b:69:
a3:ac:d2:8f:1a:12:79:fa:1f:97:1d:0e:fa:47:5f:dd:fc:03:
2a:77:d4:f8:f8:e7:f5:de:45:6c:01:a5:ee:98:e9:2c:d6:ec:
56:fe:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:43:01 2025 by rpki-client