Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7fe5896-cbf5-38e1-a062-db2b18f272f8.roa
File: d7fe5896-cbf5-38e1-a062-db2b18f272f8.roa (raw, json)
Hash identifier: 18+uS0enny6rpxrULFVY6FshpyH/rM2aXYdkeusZ24Y=
Subject key identifier: 08:C8:29:D7:18:11:43:70:02:8F:CA:19:E3:45:9E:C5:E3:5D:DC:C2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0156A466DCD22DB3EFF40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7fe5896-cbf5-38e1-a062-db2b18f272f8.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397228
IP address blocks: 156.154.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:15:6a:46:6d:cd:22:db:3e:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=0a8ce5b4-cb94-4180-83b9-59a69c7a9f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:30:b9:02:bf:8f:03:c7:cc:32:ce:f5:15:a9:
74:db:7b:cc:87:e1:01:8b:12:5e:7f:30:a4:0e:6b:
a4:91:2d:eb:f8:b9:e6:26:c3:8e:7a:27:03:f5:cd:
f0:4f:f4:bf:d4:b5:30:1d:cc:cf:63:34:98:e2:50:
4d:90:f6:4a:56:5b:6a:d4:21:cd:ce:4c:4b:29:fd:
de:84:3f:1a:d8:6b:f8:8f:1d:2c:73:6f:0c:ff:84:
ba:20:e5:5f:29:c5:28:91:27:ec:5e:06:a0:d8:b1:
33:e1:e6:7b:fc:a1:fb:b7:be:c6:f9:e7:10:b5:93:
d3:40:a1:72:bd:e1:0f:8c:5e:af:f4:3f:59:88:63:
07:33:6d:27:95:8f:a0:c6:36:1c:e4:b4:ff:07:b2:
79:fa:e4:aa:3f:9d:45:0a:ba:e0:3c:99:8f:4d:95:
a9:cd:7a:53:ae:18:d7:ae:61:7c:65:12:aa:73:64:
fd:59:c0:7b:2b:6a:3c:57:f6:02:48:7f:19:f7:0c:
f5:66:49:42:79:d6:f0:4d:4a:fd:62:71:bd:38:d9:
d6:78:68:b7:81:8b:df:c0:e1:22:bb:f4:5c:05:97:
84:27:ce:51:31:16:64:32:8b:21:37:9b:ef:97:3b:
57:8b:87:f7:b2:b8:f3:ab:7a:32:cd:b7:b7:6d:19:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:29:D7:18:11:43:70:02:8F:CA:19:E3:45:9E:C5:E3:5D:DC:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7fe5896-cbf5-38e1-a062-db2b18f272f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:c7:3f:de:a6:32:79:7d:ec:b3:7b:01:0e:7d:aa:01:9c:40:
d9:ac:0c:ce:b6:8e:ea:2d:e2:0e:f4:46:8a:16:cc:92:cd:da:
c2:b5:48:bf:a1:89:91:3c:3c:9a:f5:17:43:9c:ad:e8:ea:e2:
67:73:28:c3:79:51:a4:af:5f:0a:8f:e1:b4:74:1d:e2:da:6c:
a4:53:da:3c:24:a2:d0:98:28:41:6f:c7:05:da:69:75:7a:23:
5d:1e:ff:e5:36:fe:1c:42:7e:f9:fb:98:7c:78:53:c8:84:02:
ea:e1:73:f9:2e:2f:ee:da:f8:7f:1b:af:01:0e:72:89:76:10:
28:9e:a1:a2:4e:d0:8e:f2:84:ce:24:3e:58:1c:d7:a2:bf:bb:
ab:fe:8f:55:3e:80:46:80:8c:73:49:8d:db:49:11:9f:bc:a3:
27:4e:31:5b:90:c7:0b:8e:83:06:72:c4:aa:a8:40:cb:2c:be:
c9:7c:8a:95:38:1a:9c:b8:71:1d:56:7b:ef:01:5c:7f:02:10:
b4:ef:5f:36:13:7d:4c:13:b0:5c:ff:1d:95:49:e0:49:55:7c:
42:16:85:10:fd:a6:ab:b6:f9:41:c1:f7:b1:0c:33:7b:82:af:
03:36:06:fb:d1:ea:de:ee:9f:48:88:0c:ca:0a:2d:57:c3:34:
41:a8:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:17:27 2025 by rpki-client