Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85b542c8-603c-3a75-98d8-357f40c93c8e.roa
File: 85b542c8-603c-3a75-98d8-357f40c93c8e.roa (raw, json)
Hash identifier: e689ENNolbIbRIOh0w6gSpUXZKdlHs4BjwwRQLJaXVY=
Subject key identifier: F9:7B:C0:39:6E:AC:55:3A:CA:3D:B6:6E:BA:E2:BE:77:18:CA:42:AA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F009AF960539FF5B69C2C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85b542c8-603c-3a75-98d8-357f40c93c8e.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397219
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:09:af:96:05:39:ff:5b:69:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=f2dee0de-70ce-4c02-86e5-2bca0e8e8c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:d4:e3:2d:94:82:9a:da:4d:64:6b:0e:6d:
c2:dc:9a:86:85:29:90:b6:3f:09:f9:64:0b:ba:cd:
33:39:65:1c:e5:5d:42:0f:48:86:71:4c:82:21:8b:
74:bb:40:95:ce:b7:af:60:7b:31:d8:e3:9b:6e:62:
13:ce:f9:53:5b:18:6f:ac:41:72:49:18:9f:e4:66:
9e:76:91:0e:fe:3a:ce:9c:03:99:cd:c5:1b:d5:07:
4e:ba:ce:e8:35:16:e6:5f:88:ba:b7:a2:6b:2b:2c:
32:46:37:67:51:12:0f:f5:8f:79:e1:6c:01:68:7c:
0a:a3:38:7e:d7:98:e4:13:99:d9:22:13:ce:eb:d2:
c2:0c:12:52:40:78:b0:fb:0b:78:02:e9:31:2c:37:
66:72:a4:3c:e8:b2:32:ee:af:91:e0:ae:7e:c9:e3:
36:ef:e1:33:55:88:39:8e:5a:8d:32:a0:d2:8d:00:
83:70:3d:ff:4b:fb:57:bd:35:82:6b:04:16:de:ae:
d8:66:6b:f5:e7:86:ce:87:c5:a4:dc:8a:a8:08:f9:
61:4f:d0:41:0f:71:60:1a:70:74:e8:85:25:df:14:
22:52:83:3c:eb:a4:97:7a:cc:4a:e9:7e:f9:0c:04:
00:73:a9:50:ea:5d:af:ef:0b:21:65:1d:93:ac:a0:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:C0:39:6E:AC:55:3A:CA:3D:B6:6E:BA:E2:BE:77:18:CA:42:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85b542c8-603c-3a75-98d8-357f40c93c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:52:d6:0c:bf:f6:8c:e2:bd:4c:8b:d3:f9:10:a4:f7:9d:70:
c4:b3:5c:5c:3c:6e:a5:7d:06:dd:9f:d2:8c:f1:84:a3:21:ba:
9e:96:6f:b3:fa:eb:60:1e:fa:3d:f4:f4:27:b4:3f:8d:6c:ab:
3d:8e:52:ab:a8:d9:de:63:0d:a4:18:e1:5c:66:33:5c:9f:51:
4d:41:94:9e:09:b2:58:db:da:ae:0a:bf:92:a5:74:7d:ba:b2:
35:3e:16:eb:85:c9:c3:fb:ee:1b:3a:5e:0c:9b:d3:f2:6d:e4:
22:a3:0a:b7:c9:9e:c9:ea:1b:88:5f:ac:12:fc:2d:40:77:07:
21:ae:39:65:5a:e0:64:db:1e:d9:26:80:2b:4d:3d:76:86:45:
a7:25:d0:26:87:61:da:ce:92:70:3d:b0:fd:81:b0:3c:b8:c7:
fb:98:fc:f9:6e:59:5f:92:68:ef:56:6a:f1:6f:f1:9f:26:17:
63:25:5e:8b:c3:c8:29:76:cc:a0:f3:3e:ae:f0:c5:56:06:1b:
5d:67:bc:bb:b7:10:d9:4f:e0:da:21:ca:f0:1d:03:ad:c0:16:
d5:00:96:42:ba:13:38:56:29:fb:6c:06:b0:85:e2:9b:d5:ed:
5a:2b:e7:06:d0:5c:2d:58:25:7d:c6:42:ce:60:fb:9e:10:f8:
58:24:30:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:06 2025 by rpki-client