Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca560653-fefb-39c3-9b8e-a7ee3427975d.roa
File: ca560653-fefb-39c3-9b8e-a7ee3427975d.roa (raw, json)
Hash identifier: Age8KIOat6+sPanJrmqwy+18FGkVkkbJ8COY5zUBD0k=
Subject key identifier: 1D:D4:EF:7C:7A:A7:C2:A0:78:24:08:34:11:77:FB:B5:28:DB:F9:BC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285847DDCA34B05AC47EBEBC29AA40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca560653-fefb-39c3-9b8e-a7ee3427975d.roa
Signing time: Wed 13 Nov 2024 14:00:39 +0000
ROA not before: Wed 13 Nov 2024 14:00:39 +0000
ROA not after: Tue 11 Feb 2025 14:00:39 +0000
asID: 397219
IP address blocks: 156.154.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ca:34:b0:5a:c4:7e:be:bc:29:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Nov 13 14:00:39 2024 GMT
Not After : Feb 11 14:00:39 2025 GMT
Subject: CN=cf6704e7-c85c-4bb1-8acb-ad74af3bce07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:5c:a3:f5:88:06:2a:d1:21:4d:62:ea:4c:
7d:ad:03:19:3a:6b:e5:8b:0b:e5:eb:24:79:ae:96:
1e:fa:f8:a8:9a:c9:5e:c7:fa:75:b4:f0:2c:7e:57:
81:ce:9d:3b:d6:52:c4:f8:5e:79:22:40:52:2a:dd:
8c:da:67:90:3b:29:7f:95:16:6d:c3:7f:32:4e:91:
4e:92:4f:9b:bf:6a:46:ab:1f:8a:da:90:e2:b0:9c:
2b:84:84:67:86:81:0b:11:51:ca:d7:43:f1:7d:47:
b3:3a:59:9e:f8:f8:db:b9:c0:41:36:f1:31:de:2a:
d6:68:f4:19:11:32:35:b3:c0:f0:47:d6:3e:cc:47:
65:91:77:80:1b:6e:54:17:bc:41:3c:1b:f6:38:89:
22:62:bb:03:11:6e:f0:80:cd:7f:63:3b:81:28:e4:
5d:7d:62:bb:03:f8:a8:21:0a:8a:e8:ee:55:d2:f9:
17:3a:d7:45:f7:f7:d2:ab:03:61:d9:f7:05:c9:d9:
7b:ea:a9:9d:8d:56:e0:f0:76:c2:ef:3a:b8:35:ae:
07:51:aa:b0:a6:62:bf:e6:c6:d8:a2:99:bf:dc:73:
38:1e:e8:41:1c:5e:c7:cf:f6:d7:37:73:9c:a0:8a:
c5:c1:00:80:ec:5f:57:81:a2:c2:1b:24:3f:ef:31:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:EF:7C:7A:A7:C2:A0:78:24:08:34:11:77:FB:B5:28:DB:F9:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca560653-fefb-39c3-9b8e-a7ee3427975d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:de:d2:d4:92:76:ee:e6:26:71:1e:16:e8:c6:9b:b9:72:26:
32:a9:21:c7:7d:c9:7c:a6:09:99:5c:ac:9b:55:ca:88:60:b0:
4b:b7:b7:72:b3:73:17:ee:40:fc:78:33:73:94:da:63:09:88:
e9:86:e5:ba:0a:bd:d8:a9:43:69:c9:48:82:15:75:26:dd:8d:
01:f0:95:12:be:4e:12:0c:2e:24:6c:b7:49:4b:96:bb:d3:83:
88:ac:50:fa:da:c7:98:06:15:dd:2c:b4:0a:61:8b:a0:1d:68:
1c:de:a3:79:f5:41:56:3f:f2:64:7a:27:e9:bb:18:d5:3f:e9:
4f:60:08:ee:1b:ea:38:25:59:13:ec:bb:b3:30:73:ee:19:03:
f2:1e:e2:1f:28:38:67:60:d2:0b:51:50:3f:1b:90:dd:2b:50:
41:34:19:e0:44:91:1a:f8:03:c9:09:12:53:30:c2:00:bb:3b:
4e:6b:88:ad:65:4a:39:e5:ba:27:25:7d:ba:8e:c5:6a:cc:73:
17:5e:bf:6a:7c:bd:b7:45:08:5c:6b:cc:67:20:b1:0f:34:57:
37:7a:16:72:39:92:75:d9:c0:f2:6e:e2:7b:d8:13:87:f7:73:
7d:a5:56:6d:8a:b4:09:37:e5:c1:4d:e6:b9:b9:89:06:e7:ec:
2d:ad:ee:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:31:32 2025 by rpki-client