Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d1ab15c3-9630-3549-9ae7-fa50a58e4793.roa
File: d1ab15c3-9630-3549-9ae7-fa50a58e4793.roa (raw, json)
Hash identifier: qcxyfele0Ff805F8mYZmstYYOc/aTwdP/MqNDJYrqC0=
Subject key identifier: 47:8D:60:5C:0C:36:E6:91:45:C6:E3:E0:39:FF:F1:9E:C0:36:39:C1
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0045A0CE1DC197D52F800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d1ab15c3-9630-3549-9ae7-fa50a58e4793.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397225
IP address blocks: 156.154.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:04:5a:0c:e1:dc:19:7d:52:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=fe15ee04-c448-4456-95d3-2c92451ca76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:19:c9:a0:84:de:b6:8c:7f:8c:d5:16:c0:
50:e0:f3:8c:1f:bf:78:80:1f:d8:59:47:5a:35:d1:
4b:41:7b:d6:6d:e7:fa:ed:e2:7b:90:f2:bf:27:ea:
85:37:5c:8a:e2:c2:e6:be:ec:48:e9:48:d7:79:fe:
58:9b:5a:57:ad:0d:0c:8d:40:f7:67:ad:64:5e:a0:
ad:c6:ad:fc:fe:1f:3f:aa:90:df:84:00:1c:48:7f:
d0:25:de:e7:79:d6:04:c9:d2:0f:55:24:b3:f6:7f:
3a:35:b4:0e:a6:d6:df:66:0a:c0:49:ac:87:38:f9:
b7:90:c8:71:51:59:5a:bf:4b:a0:a8:62:65:83:56:
e7:8c:d9:4b:5b:f5:fc:fb:f7:9a:76:d7:a5:04:5f:
51:ce:f0:1f:ec:f5:3c:69:2b:29:62:90:50:20:cc:
60:cf:c2:2d:4d:66:10:81:b0:27:23:66:e7:3a:ee:
b6:a2:a7:8b:40:94:de:bb:f0:6c:1d:f3:ef:65:5a:
6c:6f:4f:4c:dc:a4:ad:10:37:c5:a7:cc:c3:46:36:
bd:59:c4:0f:82:18:95:f6:de:14:3d:78:cd:ab:24:
bd:f5:36:1d:ab:b9:33:28:99:c2:a1:73:15:6e:97:
6f:32:7d:d8:a4:bd:3a:e4:eb:d8:30:fb:33:60:a3:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:60:5C:0C:36:E6:91:45:C6:E3:E0:39:FF:F1:9E:C0:36:39:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d1ab15c3-9630-3549-9ae7-fa50a58e4793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:9a:e0:6b:19:a8:ea:4b:c8:0e:24:83:d4:85:ab:75:c5:d2:
df:3d:1c:11:7f:08:99:0a:64:0e:17:22:5f:12:8d:0d:5f:fe:
8d:1d:0f:14:e1:9a:39:73:b1:54:70:9c:c8:eb:6d:70:b2:3b:
ed:0c:68:f1:af:7a:b6:ee:eb:29:e6:3b:8a:6e:ab:da:9a:06:
56:9f:c5:56:e6:35:04:b5:1b:7c:76:35:bc:88:1e:0d:38:dd:
80:ff:ac:a3:bc:1d:1f:52:bf:4d:e6:90:c7:ed:23:7f:c4:9e:
06:88:a6:08:12:b2:59:39:55:f9:67:8c:05:37:9e:bd:7c:42:
da:fc:fc:14:a7:86:4d:11:27:a0:b7:17:82:a2:53:0b:19:5e:
fa:34:dc:6b:69:38:e6:d1:97:8e:c7:e3:8f:00:bc:d1:74:4f:
ad:5f:08:d3:88:ed:26:fb:e4:34:fc:6f:f1:58:f4:ff:15:d1:
e8:5a:c2:a0:6f:4d:83:ee:55:3b:f2:15:cf:d3:4f:a6:2f:31:
4f:ab:4a:f7:60:02:1b:68:39:8f:28:2a:c9:f3:3a:e9:8f:92:
a1:8a:b0:f8:63:9a:37:8d:45:6e:cc:22:ab:0f:6f:c7:cd:2c:
80:72:ad:93:43:6f:d2:11:9c:ec:71:69:ec:23:b4:de:b7:f3:
5b:fd:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:17:06 2025 by rpki-client