Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/777425e0-d434-3394-a980-938f93099171.roa
File: 777425e0-d434-3394-a980-938f93099171.roa (raw, json)
Hash identifier: P41W73j12LNV73kt9v3e0ZSakQ4nlZJnWaZse/PTPiY=
Subject key identifier: 18:40:28:9F:27:4D:D5:C7:E9:4B:BD:0B:D9:47:59:18:A6:94:FE:5D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F019CCFAE12FD86549D240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/777425e0-d434-3394-a980-938f93099171.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397243
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:19:cc:fa:e1:2f:d8:65:49:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=3ff76350-f365-4538-bc06-c062b4d284fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:ca:64:cc:81:e3:ae:26:33:24:a3:5b:ab:
5e:65:7a:f3:10:dc:10:07:53:e5:8b:14:73:52:f9:
6c:08:87:cd:93:f2:3f:bb:17:33:9e:02:12:82:f6:
28:b7:28:33:71:7d:05:71:34:f7:0e:6e:e5:13:a6:
ca:b8:6b:c6:07:1d:b6:ec:62:ab:18:5b:e6:df:be:
e3:bd:86:7b:be:78:26:7a:27:87:70:5a:be:0c:f1:
00:4d:20:9d:d6:de:95:b4:dc:b1:15:e8:af:35:eb:
33:61:82:96:5f:b1:3c:c1:91:20:cc:e1:2d:fc:0e:
25:86:ee:23:ab:cc:ce:3d:f4:f6:dc:9d:03:ee:8e:
6c:7f:61:9e:88:a9:4e:e6:56:09:5e:d0:5b:cb:ae:
a7:9f:e3:75:40:b8:ed:14:62:4f:ff:0c:88:28:1e:
3a:99:f2:b0:77:d1:2f:5a:90:0f:59:a4:f1:8f:6a:
1c:22:29:2f:15:e0:57:af:70:f0:0b:6b:51:f3:69:
50:2c:0a:b9:3d:45:8d:23:04:b6:10:a3:ba:7b:66:
93:2d:c0:50:65:6b:96:54:c1:eb:9b:1f:f0:ad:f7:
7c:dd:6e:e0:dd:3f:94:df:c2:7c:f7:3f:13:b4:a7:
50:5d:13:6e:37:a3:67:30:aa:a9:75:97:68:a2:28:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:28:9F:27:4D:D5:C7:E9:4B:BD:0B:D9:47:59:18:A6:94:FE:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/777425e0-d434-3394-a980-938f93099171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:fe:1b:98:38:c1:ae:e5:2a:4c:44:f6:b9:b3:1f:9e:b9:65:
5c:43:d6:e6:6a:72:29:1c:6b:3a:f3:e1:6b:46:a8:26:db:53:
0c:0a:3d:89:41:83:98:71:33:f5:5f:c9:4e:18:0a:7f:58:bc:
2d:49:f1:3d:90:88:12:19:a0:44:18:da:5f:ad:46:8d:fc:dc:
81:3a:8e:da:c0:34:c7:1b:51:e9:0c:c0:15:aa:c5:e0:d3:0a:
80:6f:6a:9f:0f:cb:88:b3:d9:a1:69:91:92:3b:ba:01:72:8c:
23:f8:f3:2a:fd:19:c5:4a:e7:e6:a5:96:88:e4:c6:33:4a:c4:
62:92:b8:e4:61:ef:ea:21:25:02:7e:0d:03:07:13:0b:ce:fd:
cc:10:b9:91:bf:f7:97:bf:eb:45:81:3d:a2:95:c5:de:d7:27:
c1:6f:5b:65:57:4e:ae:90:45:e3:09:cb:62:22:a4:96:65:30:
35:3c:74:28:48:e2:3f:4f:aa:94:52:26:08:e9:dd:74:f0:fb:
c0:0a:52:52:11:e6:47:33:bd:4e:76:b0:55:eb:4c:5f:02:f4:
38:24:04:f4:b3:70:8b:24:8a:34:42:5c:66:5b:b3:e7:e2:19:
39:63:43:a6:ac:aa:b4:05:55:5e:84:04:c0:3a:7e:0c:2d:b2:
ee:c3:6e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:31:12 2025 by rpki-client