Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e70f6741-9470-32f2-850e-fa551ace7313.roa
File: e70f6741-9470-32f2-850e-fa551ace7313.roa (raw, json)
Hash identifier: U+foZYvk7KcTUgjRDWs/FyTMfZUfAdx+BY+i1hqacIU=
Subject key identifier: F5:E1:49:D3:32:DA:70:89:A9:2D:CF:69:81:6C:12:2A:30:FB:BC:71
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0060B2DB743D82D334300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e70f6741-9470-32f2-850e-fa551ace7313.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397221
IP address blocks: 156.154.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:06:0b:2d:b7:43:d8:2d:33:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=968caece-9a7d-4c86-9b57-2ed9ec28e1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:7f:bb:ac:54:57:35:71:cc:e9:30:af:e3:
95:da:6e:eb:86:98:da:9e:b5:00:f6:e7:9d:f4:a6:
27:2d:64:31:5f:a9:17:41:c1:4f:a9:50:1b:f7:7d:
f1:cb:ce:31:77:32:5a:21:70:2b:0f:5a:0e:b8:d4:
f9:08:28:88:e4:17:44:86:d6:70:41:73:e2:9b:dc:
f3:ec:df:77:61:51:57:c4:59:a0:44:f9:cd:d4:f2:
de:c9:7c:03:9f:79:6a:17:51:b0:17:a7:48:fc:47:
92:3f:fe:44:bb:93:69:73:5f:3c:61:90:73:f2:44:
0a:21:62:39:f6:7d:2f:eb:12:59:6b:8c:74:0d:d3:
32:8e:8d:a7:2d:ff:ca:98:1d:93:20:8a:9a:29:27:
a0:63:00:e0:58:47:5e:cb:99:70:a9:81:ee:2e:9b:
4a:37:30:11:c0:51:8f:ec:98:8d:0c:4c:44:65:c7:
27:1a:60:49:af:f3:09:73:d4:cc:3a:8d:2b:d4:9c:
30:bd:0b:c2:27:19:1a:3c:dd:e0:56:71:dc:b0:e1:
ea:86:be:28:61:3b:76:02:9b:42:b9:7a:24:cb:03:
40:77:84:98:17:db:5b:a8:fa:45:c2:26:ee:6a:fc:
5f:53:39:65:c6:04:22:1b:6a:51:0f:58:5f:89:f6:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E1:49:D3:32:DA:70:89:A9:2D:CF:69:81:6C:12:2A:30:FB:BC:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e70f6741-9470-32f2-850e-fa551ace7313.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b0:92:f8:07:dc:2c:f6:00:76:a4:87:df:7c:42:12:dc:33:
f3:c5:d1:56:de:7a:44:cb:35:67:15:89:d4:5c:b3:05:25:83:
b7:86:3f:78:e1:7b:9d:0b:4d:b3:11:ab:de:b6:18:5b:e6:cb:
22:2d:8d:ef:58:b1:3f:01:ef:70:94:03:fe:5e:61:72:80:d9:
91:55:b0:8f:0b:e2:4f:86:a0:d9:b3:4f:58:1a:b4:55:6c:9f:
55:3a:1e:ae:d0:ce:54:75:ad:88:e7:97:5c:02:43:cb:ef:b1:
e7:ea:90:3f:79:c6:63:94:f0:b5:90:e3:04:12:64:39:27:17:
ab:88:5f:f4:4d:f2:34:f3:64:46:ce:33:cc:ca:fe:7c:99:d4:
e9:94:02:7c:36:35:1c:fb:c0:0b:63:95:75:ff:0c:a4:49:d2:
27:b9:26:21:1a:d4:53:60:94:47:b9:46:9c:6a:b1:7e:3e:d3:
ce:3c:86:84:a3:b3:0b:78:1f:ea:94:34:79:9d:09:40:d7:4f:
65:91:21:12:23:c5:f0:e6:0f:3f:dc:5e:81:69:f0:aa:bf:f9:
a8:d1:0c:c3:7d:c3:9e:92:9b:46:4a:f0:ba:b4:82:2d:6b:10:
b3:e9:65:fa:03:a6:e7:ea:68:d0:c7:e5:b6:b1:1a:f0:b3:82:
38:99:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:28:45 2025 by rpki-client