Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c717ecbf-1ad1-3b85-966c-0ec200235f21.roa
File: c717ecbf-1ad1-3b85-966c-0ec200235f21.roa (raw, json)
Hash identifier: e77tfi+aT1rPT0LOLQgrDZcTtIhgAMg1VA1EYIuiPuA=
Subject key identifier: 26:A6:04:05:E4:4C:1E:AA:F7:74:56:C4:08:C8:76:5D:EC:55:82:FF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F012A65298184AAEE22100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c717ecbf-1ad1-3b85-966c-0ec200235f21.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 12008
IP address blocks: 156.154.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:12:a6:52:98:18:4a:ae:e2:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=d88422ca-8479-49f6-86db-137beb115a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:b9:e0:f8:79:c2:03:2e:15:db:25:0b:86:
f1:b9:da:8c:0a:3c:93:38:77:69:00:62:00:ad:74:
6f:6e:c2:75:58:7a:93:52:e4:38:67:fa:00:85:b2:
83:c9:31:71:b9:47:ff:64:8b:3f:be:df:4b:45:ce:
1a:d5:db:81:9e:bf:6c:e3:b4:83:ac:29:7d:3c:01:
73:6f:0f:84:06:d5:6b:de:2a:ac:f6:d3:d2:46:cd:
95:5c:87:b9:33:3b:e8:4e:f0:17:38:72:6e:fe:29:
e2:56:73:e0:86:1d:23:35:99:53:77:71:b7:10:67:
e6:41:2b:15:13:1a:cc:4f:0d:a3:ab:28:88:dc:3b:
57:c0:ec:c6:bd:e0:af:1b:20:59:a4:da:c1:4e:c3:
02:7a:75:a8:2a:85:8f:1e:bc:f9:97:74:46:9e:d5:
e9:b8:8f:24:b1:01:0d:19:35:68:8a:df:ee:3c:62:
a8:65:88:2b:f3:f3:9b:34:b1:05:06:84:2c:bd:7a:
7f:11:40:1a:03:75:33:d0:8b:ad:9f:d8:ec:1c:a5:
3a:34:b3:d0:11:e9:30:6e:dd:35:b3:91:6d:1b:1c:
cf:bc:71:b7:bb:60:11:36:96:d4:51:6b:9c:6c:b5:
89:e9:73:aa:5c:03:a0:3e:a9:2a:95:24:b0:66:41:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:04:05:E4:4C:1E:AA:F7:74:56:C4:08:C8:76:5D:EC:55:82:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c717ecbf-1ad1-3b85-966c-0ec200235f21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:96:4b:66:34:d8:d4:84:9b:94:94:fd:c7:75:1f:84:56:d9:
83:f5:51:0d:da:53:91:4a:f7:29:66:a0:f0:71:b6:c3:ad:60:
e2:b5:79:7e:03:ea:31:9a:b0:f9:3a:4c:89:7f:3e:16:57:a9:
89:6a:37:3b:5e:2d:53:7d:b5:b0:94:63:00:3d:09:44:0c:62:
c3:42:29:8b:bb:0a:86:b4:db:97:d0:9b:f2:10:15:a9:22:ae:
4a:e0:c6:7f:ad:14:90:64:00:7a:f0:53:2c:2f:a2:b6:88:ad:
3f:51:eb:69:84:3b:45:38:41:37:02:54:95:cc:8f:b9:b7:7f:
9e:56:0e:82:ae:0d:16:58:ee:66:53:6a:49:85:0e:d4:02:40:
8d:5b:82:8e:ba:8e:94:7e:e5:95:a6:4b:db:a6:be:48:d7:f4:
e7:52:13:81:07:99:c0:da:52:c8:13:a1:46:b3:8e:08:ac:6c:
3b:8d:bc:18:6d:23:fd:80:58:f9:fb:8e:b0:64:3a:51:ff:f7:
86:96:d1:d8:a5:fa:e7:8a:dc:e4:65:f2:d9:eb:63:3d:2f:2e:
18:62:d7:6f:b9:50:61:c1:41:14:7c:5f:39:58:d6:6e:e5:19:
5d:8a:e7:b1:28:ab:eb:08:cd:ca:be:b2:57:1a:13:96:de:de:
58:28:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:41:37 2025 by rpki-client