Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74f6da50-8aa1-31ed-a126-6eb8c4ce4549.roa
File: 74f6da50-8aa1-31ed-a126-6eb8c4ce4549.roa (raw, json)
Hash identifier: IQyOBaXnTp7DBNZ8OfFHvNJIPoWYLRI80aArkB+NiYk=
Subject key identifier: 16:91:7C:A6:14:B4:54:7E:43:47:DD:36:72:D7:03:C0:EB:82:71:81
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00D455B38CAF4E2DE2640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74f6da50-8aa1-31ed-a126-6eb8c4ce4549.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397215
IP address blocks: 156.154.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0d:45:5b:38:ca:f4:e2:de:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=5f2f6882-e07f-4720-aace-80cbc2330f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:b6:30:5d:0a:e7:39:64:6e:0f:55:69:ff:
49:9d:b4:25:30:13:08:09:63:78:4c:b3:a9:de:7a:
43:63:08:38:1f:7e:a7:bf:1e:27:5f:80:15:b0:bf:
01:83:67:92:7a:cc:2d:6b:fb:06:7e:e4:1c:be:3b:
09:d3:10:21:c6:4c:a3:5a:6b:d2:60:ae:01:46:98:
bb:8f:64:f1:f7:ad:eb:c1:31:94:0b:bb:0f:91:e3:
47:bb:bf:22:b2:6e:76:fb:60:7e:4c:71:48:27:39:
3b:d1:52:d1:d2:0d:06:45:78:2f:42:8d:0c:65:b3:
ce:bd:47:f3:db:17:ef:bf:c9:50:da:01:f3:bd:93:
70:eb:db:6c:56:2f:b6:ca:45:a9:d0:16:2b:b8:ff:
3a:cf:fa:af:a5:29:46:04:71:68:1f:80:15:b6:34:
c4:9b:5a:87:2a:d4:dc:1b:e8:f7:2e:53:fd:25:c0:
da:8c:7b:4d:8e:ef:ec:0b:df:f8:a4:11:df:e0:36:
45:dc:ca:6f:d4:9a:82:60:d4:93:75:bd:fe:a4:d3:
ef:c5:20:91:e8:74:5f:06:0c:08:52:4f:2d:1f:90:
61:17:56:9d:54:95:49:90:d5:fb:be:67:90:15:b4:
4d:2e:40:4a:a5:18:81:97:35:bb:aa:a2:c9:10:0e:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:7C:A6:14:B4:54:7E:43:47:DD:36:72:D7:03:C0:EB:82:71:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74f6da50-8aa1-31ed-a126-6eb8c4ce4549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:bb:a7:89:bf:d6:cb:62:81:a8:74:c4:13:93:ab:ad:8c:e7:
27:18:2a:81:fa:8c:00:d5:c0:6a:96:3b:25:4d:73:6f:55:d5:
9a:a3:84:91:13:d9:ba:0a:52:14:33:0f:c2:75:da:53:15:a1:
f4:57:cd:70:c4:9a:b4:e3:95:a8:ad:02:60:1a:48:05:f8:9b:
4e:bf:b1:18:73:43:f2:12:91:31:e2:b2:ee:c5:dc:72:f1:b2:
b7:77:36:5f:aa:f1:13:81:d8:e2:e9:d9:81:c2:f5:a4:e8:96:
05:5c:ff:35:2e:a4:55:4b:38:c8:63:89:13:0f:96:3f:8a:e6:
f5:e9:51:b0:ce:d0:33:b6:ce:56:40:c5:eb:1e:f6:4b:f8:8a:
5f:db:a1:ab:31:b3:d7:60:f6:1a:6b:e0:dc:6a:f4:7b:3d:e3:
8e:cb:8b:23:98:e6:57:0f:af:52:22:d6:db:6d:fb:47:7e:99:
c6:17:b5:3b:18:a9:42:e7:f4:72:ce:79:6c:fc:8a:7d:85:14:
51:c5:49:1f:63:ea:ea:42:cf:eb:66:b1:95:43:f6:d5:7b:e9:
e4:3a:be:ae:3d:4f:51:8b:88:2e:7e:35:b8:6e:8d:f4:e4:fe:
5e:e7:5b:10:d3:09:59:bc:89:bd:5e:ef:35:bb:c7:51:f2:68:
89:9f:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:26 2025 by rpki-client