Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8a4dfbd-9b8a-3b38-9f7c-dcdd0ca3fb61.roa
File: c8a4dfbd-9b8a-3b38-9f7c-dcdd0ca3fb61.roa (raw, json)
Hash identifier: efO1x5tXfox0DDN1jd5/ZbcUiifUlUT6MFcg+zdsUj8=
Subject key identifier: B1:D9:DF:D4:BA:43:AD:B2:B6:1B:08:02:F4:23:77:D5:74:8B:FD:2A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0069E9A8C4884EBA627F0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8a4dfbd-9b8a-3b38-9f7c-dcdd0ca3fb61.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397231
IP address blocks: 156.154.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:06:9e:9a:8c:48:84:eb:a6:27:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9ae3ab05-b1a0-492c-b236-26afb997628e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:b3:37:23:99:da:f3:d0:2d:e6:81:64:0d:
5b:62:90:ad:20:ea:13:38:c1:22:c2:ba:66:5d:ad:
68:d4:4e:94:cf:f9:6f:9e:43:3f:dd:ad:fc:0e:e5:
54:c5:98:02:2f:17:07:ff:aa:76:01:fb:bc:2c:36:
a3:3d:99:57:3d:e8:e1:82:4d:51:98:b3:7d:87:c0:
91:b6:00:2e:2a:07:d0:ac:ef:08:f0:b1:86:e0:ab:
48:f0:f4:6e:1c:f9:76:73:77:eb:6c:af:9d:10:69:
a2:e8:5a:39:d7:1f:19:44:1e:73:03:7a:a6:96:05:
d7:3d:50:ca:1d:28:ee:c2:d4:dc:08:8d:4a:23:6e:
95:fe:d3:c2:e0:c4:cc:15:b0:c4:c0:b7:a8:6b:bb:
dc:64:bf:b5:a9:5c:09:8b:72:9f:97:87:f3:84:80:
c7:26:0e:3a:d8:f3:7b:e7:9c:1f:8b:6a:ef:d7:12:
43:e4:09:c6:fd:27:75:6f:03:4e:96:0c:05:35:96:
b7:bd:ba:17:f6:01:18:75:a2:d7:dd:70:9b:a8:e0:
6e:3e:a2:de:81:e0:78:9a:58:75:ee:ef:28:52:c8:
48:a6:1d:f5:eb:cb:a7:31:0e:b1:8e:e1:65:77:e4:
0b:c1:00:dd:f7:67:e8:26:44:12:45:ec:f1:2e:ee:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:DF:D4:BA:43:AD:B2:B6:1B:08:02:F4:23:77:D5:74:8B:FD:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8a4dfbd-9b8a-3b38-9f7c-dcdd0ca3fb61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:26:84:c3:5c:a0:76:f7:6b:9f:6a:fd:4f:65:ca:45:73:37:
b0:3d:1d:23:4d:74:2d:18:5e:a6:04:53:42:ce:20:cf:9c:0d:
5b:55:5a:91:26:4e:d0:55:b4:e9:cd:51:6d:a7:4c:27:d1:b3:
0a:9a:03:a5:8b:b9:43:03:b1:0c:b9:9b:4b:5f:5b:0b:7a:d3:
b3:1e:d9:ba:98:b1:ac:70:64:51:6b:d6:4b:7d:bc:03:f3:1a:
ba:a0:94:bf:cf:d1:91:04:1f:0d:50:c3:6d:dd:df:64:22:27:
00:1d:e1:ca:54:23:9b:ec:de:6c:ab:63:8e:66:d8:fa:fa:df:
3a:7a:99:80:93:1a:96:2f:ac:93:73:05:16:1c:f6:b3:81:30:
8f:ec:9f:dd:86:6b:94:55:6f:30:cd:8d:3e:2b:6f:28:1c:c0:
cb:5c:ab:dc:c1:b0:71:71:cf:74:c5:42:69:f4:47:af:e9:e9:
56:cd:71:44:e8:29:2f:00:dc:14:80:a5:0b:c7:7a:50:b5:70:
80:b6:0b:60:8d:a6:07:da:45:ca:ee:11:e0:97:43:6e:89:54:
f5:19:3b:8f:c8:a3:44:d8:b1:40:85:cc:45:a2:ac:b5:b6:b6:
e7:c5:82:9b:e1:bc:19:bb:96:d8:43:3a:b1:7e:35:60:11:6c:
b6:83:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:21:13 2025 by rpki-client