Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c0a8953d-7963-332c-b8b6-7a76edfb6a14.roa
File: c0a8953d-7963-332c-b8b6-7a76edfb6a14.roa (raw, json)
Hash identifier: 4JrMOLNiZhfxBcj/8WyZzNe+pwzIJNGM4+n9C0OWP3M=
Subject key identifier: 59:1A:07:AD:89:FE:90:50:1C:F3:1D:AB:88:2C:33:CD:21:A3:4D:20
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0050895E9AE7B7C6DF300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c0a8953d-7963-332c-b8b6-7a76edfb6a14.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397236
IP address blocks: 156.154.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:05:08:95:e9:ae:7b:7c:6d:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=ec8cff6b-3391-4f6b-bd3b-31e88449cc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:98:e2:5a:ec:d1:fd:50:db:19:e8:c4:fe:bf:
30:2f:7c:62:24:61:36:74:bb:42:8a:db:a7:d6:12:
9d:3c:92:2b:be:66:8a:8e:c4:50:93:06:7c:c4:28:
d5:bc:90:08:be:28:3d:55:f6:c8:cd:e6:d4:8d:4e:
b5:a4:b0:d9:63:66:76:c2:4b:ad:c6:56:f5:f7:6b:
8f:75:8f:d6:1a:19:02:d2:d2:7d:c8:b1:0f:53:1b:
36:ed:87:77:5f:df:a6:34:ea:8d:3d:21:47:6d:16:
12:09:3a:a8:07:63:f7:22:93:d9:b1:d0:45:68:ea:
2d:2e:c7:bf:70:63:d7:25:6e:31:e6:02:2e:4d:5b:
3d:1d:d5:77:e0:5c:65:64:28:e0:4c:37:3d:fd:63:
f7:80:e9:a6:dd:53:15:b8:ea:5e:98:d8:61:af:1f:
25:3b:73:bf:6b:58:a8:ec:7a:c3:a9:8f:52:da:90:
59:47:1b:eb:01:42:2c:0f:a2:7f:af:0a:92:7f:73:
a8:f9:db:77:5c:78:2e:c9:8a:38:9c:97:99:e4:23:
31:11:b1:83:85:4e:19:63:e1:3f:de:84:70:8b:c7:
9d:35:8c:a0:f1:33:e6:77:8a:2a:30:ed:7e:95:59:
c0:ef:6b:73:98:15:3a:c5:42:b0:03:a8:f9:d3:58:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:07:AD:89:FE:90:50:1C:F3:1D:AB:88:2C:33:CD:21:A3:4D:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c0a8953d-7963-332c-b8b6-7a76edfb6a14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:25:8d:d6:25:21:59:0d:ea:f2:dd:fa:66:5c:41:91:44:b9:
3d:0c:bb:e6:6b:4c:9b:94:46:92:86:47:6f:4d:a2:f8:4c:fd:
4a:d5:48:b5:d1:8f:e3:a7:b2:8d:94:6e:2f:f9:0a:1c:94:3b:
29:0f:8d:12:48:6c:f9:64:97:7d:e2:08:ee:22:f7:d4:7b:61:
87:d2:eb:84:5f:ae:fb:92:e9:a7:4f:bd:72:a5:44:c2:e1:c6:
4c:c1:25:55:ba:d8:6c:30:04:e7:d4:35:c7:b7:11:2b:4d:89:
a7:b6:4c:54:67:0c:d4:d7:43:e7:bd:7b:62:1a:b1:e9:2e:a1:
1b:4a:dc:0c:97:4a:1f:55:32:f6:9f:ed:9a:75:5f:b9:ec:b9:
8e:d4:6f:3a:d2:d9:a3:61:96:2f:3a:1d:36:26:49:9b:56:4a:
20:b0:b2:fa:a4:4d:85:c4:56:95:d5:ce:22:e3:d5:7e:2f:0f:
86:cd:ad:72:9d:dc:86:35:cb:aa:06:bf:96:4b:32:37:d7:47:
48:0c:e8:a7:14:c0:02:f5:9e:3e:e0:10:eb:1a:1a:3d:68:75:
24:af:c0:bf:6c:43:10:09:f7:61:4b:ff:76:ad:2d:2d:6c:17:
f4:ca:bd:48:b4:f3:df:39:33:dd:e7:39:ad:b6:b3:c4:68:b4:
10:63:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:11 2025 by rpki-client