Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2004358-f1c7-3695-abf0-a29ceb6c2356.roa
File: d2004358-f1c7-3695-abf0-a29ceb6c2356.roa (raw, json)
Hash identifier: b5/P/bnnyktFM5/E8uGXfMCuXT7csQQZzudrJqQxpcM=
Subject key identifier: D4:8F:6B:06:4B:8E:6E:13:15:6D:EE:01:FD:1A:C9:1B:88:AE:E2:E2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F007E467C0277A61746F20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2004358-f1c7-3695-abf0-a29ceb6c2356.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397221
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:07:e4:67:c0:27:7a:61:74:6f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=376a9a4b-ad85-49bb-9813-c1aa8e41ff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:44:b9:f8:bb:e1:af:16:fe:85:81:2b:69:
dc:02:29:12:a6:40:9b:26:7e:4d:a4:7a:88:7c:58:
8a:11:68:e9:98:a6:e5:59:ed:f4:35:e0:a8:c6:9d:
fd:f4:96:b5:e4:71:6a:73:ef:15:16:59:0c:4c:e6:
3f:53:fa:ef:3b:1d:e2:00:0f:8b:46:4c:a1:e2:f7:
50:0a:71:01:ff:36:31:31:8f:90:cb:8d:36:14:e5:
3f:17:72:82:89:32:2c:32:b9:e6:e8:51:43:61:57:
57:a7:d3:30:c2:3e:fa:7b:0f:97:46:85:82:0c:4f:
a3:86:a5:b0:d6:e8:b7:45:80:74:03:81:48:e1:df:
10:fd:5b:c5:9b:53:aa:6a:df:d4:cb:8b:d6:72:ae:
e2:e3:a9:4a:57:41:9a:74:82:78:06:3b:b1:9c:d9:
99:df:a5:73:6d:4c:f4:9d:52:f8:22:38:53:77:e1:
ae:91:9c:42:99:49:50:af:98:be:2a:de:a2:a6:35:
6e:9d:b9:c6:18:7f:c1:42:12:35:19:4c:37:b6:87:
89:5e:2c:bf:11:f3:93:64:29:be:37:5a:94:48:10:
d2:bc:d6:aa:3d:a1:7f:5c:f0:83:1c:83:66:98:8b:
d4:93:3c:35:bc:96:5e:38:65:72:bf:91:e1:90:43:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8F:6B:06:4B:8E:6E:13:15:6D:EE:01:FD:1A:C9:1B:88:AE:E2:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2004358-f1c7-3695-abf0-a29ceb6c2356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:93:4c:78:19:86:5f:d0:7b:92:b7:3a:11:1e:48:0f:0b:2a:
1a:1f:da:ad:7f:5a:e5:95:dc:34:40:7a:59:2a:f5:c6:99:27:
6c:e0:7f:d6:b9:07:af:a8:07:63:0a:bb:cd:20:dc:b0:9e:ff:
75:d4:a6:f1:cf:44:78:3c:2b:97:4d:be:d3:7e:6b:69:d9:d8:
9f:20:be:8a:be:44:ae:59:ff:e0:f9:c1:f3:2a:2e:a0:a3:af:
aa:10:d4:df:87:79:71:36:ef:2a:c9:06:cf:36:8f:64:ae:75:
99:85:14:29:4b:9a:ff:6a:2c:43:a2:2a:62:21:dd:b2:b2:2e:
4e:1b:d2:68:25:1a:ac:39:aa:11:37:f8:3f:be:16:07:5d:66:
c2:3a:ba:79:8f:39:8d:cf:c2:df:21:8a:d5:35:26:1a:e3:09:
e3:4b:fe:99:5a:df:a5:fb:0d:4f:a0:ad:6c:94:52:30:da:79:
fd:a9:6f:ff:50:72:b3:d9:cf:01:88:62:d3:f8:df:50:a6:29:
9c:e7:21:3f:26:8e:80:50:12:c2:fd:cd:65:3d:4a:3d:f6:08:
c3:fe:21:54:91:d4:65:5d:df:86:6d:a5:4c:fd:d7:4c:9f:64:
33:9b:fc:14:fd:fd:ba:e6:e7:8e:61:c7:45:8a:c3:fb:1e:51:
b7:7d:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:19:30 2025 by rpki-client