Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99d5526f-cd1f-3db5-8e07-3863151e51fa.roa
File: 99d5526f-cd1f-3db5-8e07-3863151e51fa.roa (raw, json)
Hash identifier: 542dPEalZhYw/TPVJSn824dvTVj1nK0EcwUE33sq8eA=
Subject key identifier: E3:26:22:5A:9A:61:A2:76:6A:4C:49:6A:1B:C8:C5:1A:13:21:31:18
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F011AB4D3A0D0025E6FDC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99d5526f-cd1f-3db5-8e07-3863151e51fa.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397226
IP address blocks: 156.154.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:11:ab:4d:3a:0d:00:25:e6:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=ed1dba7d-7615-40b1-bfee-42ff5783ccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:99:32:3a:55:80:96:67:99:e9:c2:52:9d:d8:
bc:6c:eb:1d:1f:11:c3:7f:98:d8:57:1c:c8:59:53:
3e:2a:d6:08:6c:9b:e9:29:38:f5:33:b6:5d:2d:ae:
de:e0:f9:14:e6:29:09:db:b0:95:86:c7:c3:06:a5:
e5:cf:7e:a8:16:40:ac:ec:52:ae:06:d5:34:b7:1f:
18:1a:ec:6e:34:e9:5a:41:f6:c8:19:60:09:da:19:
f5:74:69:53:ca:a9:9b:43:a9:eb:c9:46:35:3d:eb:
2a:04:0b:0c:fe:bf:24:c0:94:0e:78:71:ba:66:b3:
cd:0c:87:f7:05:a1:e9:7b:15:14:d7:5a:dc:e6:37:
d4:f6:60:32:17:c5:56:48:35:d1:1c:13:be:33:10:
68:dd:9a:40:c1:86:fd:42:78:7e:8b:ff:88:b5:10:
8f:93:46:cc:5d:37:02:06:00:ba:d4:53:b9:14:21:
a8:20:a5:85:70:79:46:77:cf:61:60:b2:73:76:fe:
5e:e7:fc:79:1e:ba:20:4d:e4:95:e6:ee:f8:46:f8:
58:22:73:b0:99:42:49:46:01:e1:0e:5c:fb:81:7c:
cb:f7:5d:40:91:7b:5b:37:eb:9e:eb:45:0d:11:06:
0b:23:35:c8:25:54:f9:63:88:97:45:8b:7c:df:a2:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:22:5A:9A:61:A2:76:6A:4C:49:6A:1B:C8:C5:1A:13:21:31:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99d5526f-cd1f-3db5-8e07-3863151e51fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:0c:ec:c7:50:d3:77:04:dc:6f:41:e5:cf:b8:3f:6b:0f:b5:
03:67:2f:b1:f7:d6:ea:b4:e0:d2:dc:69:21:ac:36:aa:a6:ae:
57:58:f3:74:37:44:12:08:5a:e5:ac:19:84:47:c6:d5:be:d9:
13:7b:20:be:16:7c:3e:2b:66:7b:89:6f:c2:c4:d6:d5:90:01:
16:30:b7:9d:60:52:01:ab:70:6b:18:2d:50:9e:ae:3c:5b:2a:
cb:0c:08:84:01:75:67:34:9e:cf:80:9c:f3:bd:68:af:dd:33:
c1:92:34:b6:34:40:f6:aa:6e:49:d8:bb:c1:22:5f:77:40:0f:
7b:24:5b:42:42:71:09:3e:0d:55:3e:0d:4f:33:30:4b:30:28:
7a:43:42:7b:93:b7:52:26:82:5b:da:6f:71:8d:52:93:98:e4:
b5:42:ac:ea:7c:01:74:b5:eb:73:b8:10:43:4a:22:fa:2b:a8:
bd:60:19:9a:ca:bf:b1:3c:7f:34:da:37:64:af:bf:81:b2:ad:
5d:0e:f7:f0:4c:99:be:59:6f:04:1a:7a:2d:bb:4b:91:24:fb:
fd:7d:07:29:a1:87:5d:a0:4f:cd:6d:c3:81:78:af:3f:e1:3b:
10:af:fb:ef:1d:fd:43:00:71:b7:34:4c:4c:e6:f1:cb:30:6e:
ff:94:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:02 2025 by rpki-client