Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71873b26-c28e-3d53-bc0b-46138077c879.roa
File: 71873b26-c28e-3d53-bc0b-46138077c879.roa (raw, json)
Hash identifier: s+N62qyv2moW6Nvc8bo22GLJbwGPySrqHrK+ErL2F1c=
Subject key identifier: 21:29:B2:BD:CD:69:64:0B:F5:EB:4F:12:DF:49:E1:47:F9:B4:CF:42
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0088C78A76402416BB700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71873b26-c28e-3d53-bc0b-46138077c879.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397232
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:08:8c:78:a7:64:02:41:6b:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=340a3502-8d28-4757-801e-07abd64d50c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:55:95:50:cb:ed:c2:af:fa:71:e9:99:da:
b4:86:52:79:2a:4a:28:02:de:97:5a:35:4a:24:fd:
8a:43:7a:90:04:24:35:0c:06:20:6a:d3:3f:8a:48:
25:68:a9:54:0b:14:23:50:5a:bc:b5:34:13:43:9f:
02:a0:79:80:1a:15:cb:e9:de:0d:a5:00:2c:df:be:
4a:27:20:96:af:68:f6:f3:f9:72:90:63:61:80:7d:
37:62:dc:e7:3b:dd:5f:e4:2b:45:bf:fc:f9:eb:f9:
11:d1:23:f2:22:0e:a2:fb:fc:57:e5:ec:10:c9:17:
1f:e3:e4:44:35:8b:bd:85:c7:21:63:eb:6b:2f:e0:
57:76:ea:6b:5e:df:3a:87:08:1b:8b:1e:8c:bd:97:
af:14:c1:96:94:ef:4c:f9:0b:66:81:5b:af:11:76:
65:74:12:ca:43:43:4e:9b:74:3e:c6:ab:83:0a:78:
49:3a:c2:99:10:e3:60:c5:3d:5c:5d:b3:5e:76:d1:
63:7e:d8:61:05:dc:55:f0:62:96:e0:58:cb:c3:0d:
41:26:e2:d6:df:62:03:3f:df:e2:1d:07:56:ba:73:
56:a4:ac:a5:83:d3:17:78:08:da:44:50:df:1c:97:
1a:da:ce:77:23:1b:bd:2d:e4:5d:5d:14:fd:87:d2:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:B2:BD:CD:69:64:0B:F5:EB:4F:12:DF:49:E1:47:F9:B4:CF:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71873b26-c28e-3d53-bc0b-46138077c879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:5e:3e:2a:75:b6:fa:91:b5:22:f3:33:2e:04:5c:1f:da:ac:
34:53:65:4d:1d:57:41:e4:3b:a2:6d:20:ee:4b:61:a7:60:06:
d7:c2:6b:69:fb:e8:37:8c:eb:09:71:b5:d9:60:bf:66:67:c5:
49:b3:19:59:72:ee:47:05:37:64:a4:ef:44:b1:67:a2:82:98:
64:88:3b:a8:3e:20:84:8e:71:af:29:48:74:68:1e:41:73:f6:
b8:ab:ae:b7:1c:8d:91:01:ae:c0:ed:87:7e:fe:66:43:d5:1b:
d9:a3:c5:cc:2f:3f:6a:23:1d:9a:04:a4:50:55:67:77:e6:84:
8c:cf:b0:38:aa:81:f7:9c:e3:43:b8:fa:f6:10:d0:27:93:48:
25:48:72:b0:5b:9c:1e:90:a5:e1:ad:46:6f:e7:c0:fb:82:d1:
de:29:fb:bc:04:58:d6:fe:34:4c:5a:4a:95:2a:ab:f9:18:dc:
f7:09:f5:3d:61:8f:35:da:8b:ae:2e:65:db:15:64:60:95:ee:
6b:42:d2:98:30:2a:60:9f:ea:4c:07:09:50:4e:2d:f5:12:56:
d0:be:08:55:c4:7b:2f:67:dd:14:59:44:49:81:25:8f:58:2c:
7b:0f:73:ef:7f:a4:14:c4:24:3c:e9:6b:ca:e9:5a:78:33:4f:
53:07:4c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:18:56 2025 by rpki-client