Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6e3f274-cf39-329c-bf23-191e11b9bc36.roa
File: d6e3f274-cf39-329c-bf23-191e11b9bc36.roa (raw, json)
Hash identifier: Q9dBQ5Eaz3ynJOgfgHWYpVNYRtFBHpcq38g0ziGNhYo=
Subject key identifier: A0:BF:7B:46:85:FE:22:C9:CE:C5:10:F6:F5:4D:4E:66:8C:7C:CB:44
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00A05CBC765C1697A2480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6e3f274-cf39-329c-bf23-191e11b9bc36.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397225
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0a:05:cb:c7:65:c1:69:7a:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=bbd4a8d5-a136-455d-a68b-527b86a9aa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:04:6e:dc:5b:a1:ec:d7:92:71:9d:50:19:
0f:cc:58:e0:32:77:d2:d1:b3:e4:0d:aa:eb:9b:6a:
1b:c3:63:8e:85:f7:54:41:69:5a:86:44:08:6d:f8:
32:32:06:80:06:17:a7:f1:2c:94:70:65:44:c6:0b:
2f:1d:40:e4:fb:56:37:08:a0:31:7b:b0:2a:ad:33:
4f:c1:85:03:4f:c5:e3:a8:b5:da:53:c2:95:17:38:
7d:26:12:25:d4:ec:28:21:cb:a8:0a:67:f1:67:96:
4b:0f:6c:ec:d1:1d:7f:31:54:eb:c5:36:c8:da:e0:
01:34:0e:28:67:bf:9c:1d:75:aa:15:fd:17:13:8e:
f6:82:d3:d6:ce:aa:99:a0:90:da:e6:bd:cb:c4:01:
56:b2:87:c6:a9:dc:5e:d7:3c:26:65:63:b7:16:e4:
21:fd:f4:8d:0a:0a:26:2e:db:11:dd:cd:58:36:86:
33:8a:ae:32:a7:57:b3:2a:80:0b:f1:f9:9a:39:38:
ec:17:6a:f0:91:5a:4b:68:6b:ca:b8:00:61:9a:57:
02:78:a7:09:f4:ca:15:a9:28:f7:ea:20:63:59:ad:
bb:3f:b2:5e:72:ca:ed:61:aa:ee:6a:cc:42:91:73:
3a:0b:8c:ae:20:20:05:88:c8:09:54:45:34:a0:63:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BF:7B:46:85:FE:22:C9:CE:C5:10:F6:F5:4D:4E:66:8C:7C:CB:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6e3f274-cf39-329c-bf23-191e11b9bc36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:e8:f0:bc:43:02:c6:c3:ad:e7:49:25:76:64:73:ed:dd:7c:
d8:a4:f1:c8:b9:81:c4:17:2d:a1:3f:80:c5:a6:a3:aa:04:3d:
ce:ce:35:41:ec:a5:35:94:f1:d6:8f:3b:4d:40:b0:e9:a3:a1:
40:0e:1e:51:b6:de:3e:a8:2e:95:b4:4a:f8:ea:92:22:6a:ca:
f7:9c:a5:c4:2a:03:2c:ac:60:f3:d4:3f:26:b5:e7:54:35:d7:
87:8a:97:71:6e:2d:db:b5:6e:99:f8:8d:d8:62:33:ca:9d:be:
05:c2:f5:e3:26:d7:1e:5a:29:c6:09:10:28:d6:ff:7f:ad:d4:
9e:29:c0:df:fa:5f:43:71:a8:b2:24:53:62:5b:8e:b8:72:df:
8a:e0:dc:58:cb:b0:b8:d3:00:73:bc:f1:df:ba:3f:ce:27:04:
30:3b:ce:c1:4c:65:ea:47:4c:c5:94:8a:c4:ef:a3:33:c1:59:
75:97:19:98:ba:ac:ac:65:f0:12:ec:a5:79:d5:8d:37:90:1a:
d3:32:c2:d9:81:6c:12:97:56:96:f0:fe:f4:1d:83:63:48:e2:
1d:39:5a:2b:5d:19:ae:e9:18:dc:48:d5:86:93:0e:5a:c5:f7:
55:70:84:6c:03:fa:e4:63:0c:4f:de:2f:44:bb:eb:00:bc:95:
ee:13:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:15 2025 by rpki-client