Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2e3fa63-a12c-3865-8f65-ea5f1d881285.roa
File: e2e3fa63-a12c-3865-8f65-ea5f1d881285.roa (raw, json)
Hash identifier: bPtYzso4IMDxx2GbGTW8lhshv+oj68XWZcwnoiUOu9Y=
Subject key identifier: 81:20:A1:7C:08:2D:94:22:CF:ED:60:52:33:5E:B8:7B:EE:F9:D2:28
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01D4F4023B16779535C80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2e3fa63-a12c-3865-8f65-ea5f1d881285.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397241
IP address blocks: 156.154.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:1d:4f:40:23:b1:67:79:53:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a2ebcbda-3598-4b4c-869d-59352c94aafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:11:5c:e5:6b:af:71:62:aa:6c:d6:f3:41:
b7:16:89:ff:f1:bb:3d:74:37:69:5d:fb:14:c9:1d:
82:37:94:2b:a2:41:9c:32:94:34:f7:73:ac:8a:4b:
3b:4b:b8:24:f5:32:34:74:80:ee:f7:9f:be:6d:8e:
94:b5:44:76:a2:70:09:a5:e6:d0:18:d4:c3:11:9d:
e9:fe:04:7a:0a:a1:0d:bd:a2:6a:6f:c4:46:09:5c:
10:e9:39:8c:70:af:e4:d9:d5:64:26:4a:c9:5f:26:
1c:26:88:5c:b6:0e:a0:fb:46:15:65:fc:d4:22:31:
af:2c:06:be:ba:0e:e7:44:ab:da:bd:e1:f3:4e:58:
17:36:aa:62:7d:b6:40:96:29:d3:9f:e6:06:bd:60:
0a:e6:73:a6:56:0e:cf:78:72:99:6f:b1:94:b0:25:
34:c0:c3:dd:61:db:a6:57:d6:09:a8:e5:57:fc:08:
94:e2:60:2f:32:65:6b:44:63:40:97:22:39:e8:97:
47:18:43:95:2d:10:ce:aa:1b:77:02:4f:c5:89:95:
d5:60:f8:1d:ba:98:c0:51:14:93:7f:06:84:39:d7:
bf:83:6f:3b:c1:2e:eb:16:63:65:20:fb:f8:57:6e:
63:3d:98:2d:a8:ae:41:76:8c:73:21:bb:ec:55:92:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:A1:7C:08:2D:94:22:CF:ED:60:52:33:5E:B8:7B:EE:F9:D2:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e2e3fa63-a12c-3865-8f65-ea5f1d881285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:69:43:df:7c:d0:95:36:81:a3:2f:2d:f7:8c:52:6f:90:9c:
41:23:da:cb:89:32:92:8d:af:6f:e9:45:0b:ee:a8:09:0c:0a:
60:29:10:bc:29:be:30:41:68:e5:0e:84:7e:ab:df:1f:1e:d5:
2d:bd:d7:62:1c:4c:cb:31:d5:22:31:19:b5:8f:09:9f:7d:e1:
6a:79:23:24:7e:22:3d:c2:3a:9e:cb:18:e5:6c:da:1b:0f:45:
a6:92:cb:74:cc:65:cc:4b:9f:5c:d1:57:c7:fa:40:6e:06:3c:
24:c1:03:84:7f:38:4b:64:9d:34:61:28:d6:eb:d3:fe:49:51:
1c:58:66:95:52:4f:5e:ca:b1:38:4a:5a:01:b4:c5:2a:ac:46:
2e:60:d5:aa:7a:0d:88:66:66:46:89:7c:d3:cf:c8:50:e0:7a:
67:82:21:1c:ff:9b:f9:f9:0a:4e:c1:5b:4f:37:3d:46:04:3c:
05:73:a5:92:9f:b1:b3:c3:be:d0:1e:16:7e:29:6d:a8:dc:94:
c7:ba:63:e3:6f:f7:f1:96:c1:7c:7c:f5:ae:9a:8e:01:11:2f:
05:f1:4a:82:4e:18:d8:83:89:e4:e7:fc:95:bd:1c:d2:61:5d:
d8:bd:ce:15:fd:5e:6c:51:92:67:3c:f0:55:37:1b:0e:6a:6e:
3d:94:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:22:14 2025 by rpki-client