Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c56fde7d-5c0d-3f7a-ab1f-ea5d51bd25f1.roa
File: c56fde7d-5c0d-3f7a-ab1f-ea5d51bd25f1.roa (raw, json)
Hash identifier: qEhsBfYgoSq+BG7RtwoNIMTLmBjZ4x7oFe3ge+eh000=
Subject key identifier: 9F:5D:43:B4:82:E9:20:F6:0B:22:BD:6C:3B:1A:36:0F:C7:30:3B:9C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01C00372B5123DE4B5B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c56fde7d-5c0d-3f7a-ab1f-ea5d51bd25f1.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397216
IP address blocks: 156.154.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:1c:00:37:2b:51:23:de:4b:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=20c6eb77-a4ea-45c1-b2d0-933815cbecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:d6:28:30:1d:6b:a1:e1:d0:ed:3e:6b:c0:
e9:04:46:5c:dd:9b:ec:f4:c9:50:0c:e2:61:1d:06:
b6:d3:40:a7:a3:13:8f:04:06:1e:85:dc:fd:61:e2:
99:fa:1e:bb:b3:07:7c:aa:06:0c:43:5c:83:e9:8b:
60:25:c1:9e:56:83:28:e3:83:ce:43:24:4a:06:69:
14:a0:e0:af:0d:31:59:13:9a:45:0b:66:2d:85:2c:
c2:64:22:9c:0b:d7:29:d7:11:5f:c2:7e:ea:53:87:
73:b4:bf:c8:95:db:3f:42:c5:e3:c4:5a:44:cc:3d:
77:be:e9:b4:31:6d:d4:8b:f9:56:58:a3:be:67:01:
cb:6f:1f:75:ff:8e:15:b5:1e:cf:29:de:44:fc:46:
3a:53:bb:10:4d:db:7f:84:3f:5f:c0:5b:d1:3f:3c:
b1:13:18:9e:6d:a1:99:af:7e:84:82:f9:ca:bf:e6:
a0:0f:b8:a2:c3:28:b7:2b:83:4b:cb:84:e0:f9:a1:
0d:0c:d4:87:41:89:59:9f:cf:a7:13:c7:db:73:79:
5c:51:9f:fe:05:48:c6:e9:49:a6:e9:b0:44:4c:4e:
85:ef:29:43:07:9c:d8:bb:95:ba:c4:fc:70:d9:1f:
61:87:f2:f6:e0:89:51:94:82:23:39:9b:c5:7f:91:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:43:B4:82:E9:20:F6:0B:22:BD:6C:3B:1A:36:0F:C7:30:3B:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c56fde7d-5c0d-3f7a-ab1f-ea5d51bd25f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:74:1a:b6:78:9e:66:93:c5:44:ad:15:a5:e4:4c:b1:81:e2:
a1:89:5f:2b:48:56:c4:97:a0:18:8c:58:97:67:74:b7:3c:97:
e1:e0:67:14:af:82:17:cc:94:db:9c:79:ec:42:41:c4:0b:3a:
dc:82:6d:1a:9a:bf:47:9f:95:48:b4:82:13:50:d7:91:ba:4f:
0e:37:cc:1e:80:1a:a8:da:e9:93:15:14:91:d2:f9:82:6d:71:
09:ef:bc:73:91:47:12:57:24:a5:fe:c7:19:1b:77:67:78:9a:
fd:e7:76:8b:5b:93:62:2a:62:0b:18:2d:f6:19:12:22:8e:8a:
9a:d5:59:80:cb:60:b9:1d:eb:0c:ca:c6:57:32:ad:2d:e7:fc:
f6:09:da:c9:6b:31:60:06:25:d1:4b:d7:0b:ce:3b:45:62:b9:
31:5b:ad:f2:2e:59:79:7f:3e:5a:65:f9:b7:7e:c3:2b:44:10:
f2:c8:d7:23:67:5f:89:2f:83:ac:c6:d4:be:57:b8:d3:30:a6:
05:e0:32:e9:60:48:a6:b9:c3:aa:5b:70:bd:e5:89:bf:73:31:
b1:0b:52:1b:1f:11:4b:51:8b:bf:54:82:05:93:ba:07:a7:b6:
0b:30:48:17:db:5c:50:db:f8:e4:dc:15:9c:8c:08:ab:89:b2:
7b:bc:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:47:39 2025 by rpki-client