Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/deb2f5fa-ecd2-33eb-a95c-1579c4a700db.roa
File: deb2f5fa-ecd2-33eb-a95c-1579c4a700db.roa (raw, json)
Hash identifier: VcBv6uAYxxAwOjxDbTDZ0dlAgfPO6X87NkTgzL/o6lo=
Subject key identifier: 02:91:7D:4B:E6:6C:A7:B8:F5:86:50:5B:6D:4A:8D:9D:DB:4C:8E:61
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F005218B374C9FC5316380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/deb2f5fa-ecd2-33eb-a95c-1579c4a700db.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397238
IP address blocks: 156.154.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:05:21:8b:37:4c:9f:c5:31:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=6cbfd19d-2a90-4baf-abfe-359fc287f8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:6b:8c:21:6a:27:9e:0e:bd:04:ee:a2:67:
6c:3a:54:ab:26:76:ea:e0:fc:73:be:15:c1:ab:ae:
47:4e:2a:08:6f:64:90:96:0b:63:f2:de:f9:3d:48:
7c:1b:d5:a6:76:91:d1:87:fd:a6:58:89:19:33:a3:
82:8b:98:ec:90:85:5a:6d:12:38:92:81:30:7e:99:
42:d3:b6:c5:b2:6a:55:06:22:55:6a:a2:0f:eb:d0:
db:7e:c7:e1:b1:22:eb:59:9f:0a:a6:0a:b4:ba:01:
7b:aa:aa:3d:40:91:c9:0a:2e:e9:23:ba:61:d8:f6:
e8:de:7d:cb:36:3c:6c:b8:3b:fc:f4:8c:c8:a3:16:
2c:7c:9c:ae:e9:28:81:b6:59:cb:51:ba:76:80:15:
94:8b:24:50:1d:49:33:3e:a5:d7:5d:39:21:ef:21:
d1:e4:17:70:41:36:17:2c:a8:42:ad:e4:e5:5f:8a:
73:2f:14:67:90:87:4a:76:90:00:55:05:78:c0:bf:
9d:df:d9:e8:8e:ec:86:40:0f:42:72:c8:29:b4:d0:
90:3e:97:6e:22:be:35:4c:d8:1d:1a:da:23:b5:8a:
6f:67:dd:df:d3:dd:c7:5a:ab:32:9d:e1:7b:08:bc:
b9:bd:95:1e:7a:f6:87:1a:27:bf:8e:c0:d9:d0:54:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:91:7D:4B:E6:6C:A7:B8:F5:86:50:5B:6D:4A:8D:9D:DB:4C:8E:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/deb2f5fa-ecd2-33eb-a95c-1579c4a700db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:bd:b0:2a:fe:f1:5e:3b:3c:8c:b0:aa:4b:42:d3:b5:3a:f5:
f2:ec:f6:a6:63:3d:4d:b2:8a:e8:51:bf:27:d2:56:11:d6:6e:
54:07:41:f6:cd:c0:02:27:72:0c:1e:9f:af:56:a8:16:66:74:
ca:64:14:9b:a1:7b:75:49:f8:87:be:80:fe:8e:fe:11:a7:9e:
10:12:20:8d:00:31:79:d6:59:c3:7c:7a:3a:78:8c:32:d2:d3:
db:fd:17:9d:7a:e9:62:77:b1:52:99:20:72:5b:82:ee:3d:4a:
05:45:a9:dc:72:9c:4d:6b:0a:4e:d8:ec:63:a0:73:5c:c3:1f:
b3:ac:8d:c7:d8:9a:21:0a:8d:b1:d1:60:8b:dd:a1:7a:fb:11:
b3:d0:db:3c:57:9d:29:41:86:54:62:57:fe:5d:27:d9:67:30:
ce:a2:90:9e:cf:1c:ea:a2:17:9b:3e:df:44:91:dc:a2:4d:f2:
bd:0e:7d:be:2a:31:4e:8e:ff:09:74:77:c7:7e:64:5c:7a:d6:
da:68:b7:7b:66:b6:8f:05:96:99:1b:75:bc:53:90:2f:e4:24:
53:28:9b:df:50:c7:88:7f:fc:5b:9e:82:0c:9f:8a:4b:92:1f:
c1:b7:e3:35:b5:9a:48:23:fd:42:09:f6:63:99:01:54:bf:6f:
93:11:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:14:08 2025 by rpki-client