Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa
File: ed146ec7-7e6f-319e-866d-36b93dbadde5.roa (raw, json)
Hash identifier: 2N+qR8tcPHGlf1jRJHMO07jPG4LqhTct0am6SEiEKo0=
Subject key identifier: AA:46:EB:BB:46:30:05:D2:22:87:CC:C8:42:FC:67:B9:7A:0B:45:F2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285847DDCA38B7F9B3463FD04416C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa
Signing time: Wed 13 Nov 2024 14:00:39 +0000
ROA not before: Wed 13 Nov 2024 14:00:39 +0000
ROA not after: Tue 11 Feb 2025 14:00:39 +0000
asID: 397228
IP address blocks: 156.154.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ca:38:b7:f9:b3:46:3f:d0:44:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Nov 13 14:00:39 2024 GMT
Not After : Feb 11 14:00:39 2025 GMT
Subject: CN=4b7be36d-11ae-49ef-a421-0311444c6316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:52:ab:b0:d4:8b:ec:2a:f3:9b:0a:14:e6:
d9:3a:cb:23:44:06:85:77:2d:8c:ec:ca:b2:4b:0c:
bc:03:fd:b7:51:31:6d:75:66:55:9f:3f:3f:49:30:
66:2d:c1:8e:11:55:59:4f:d1:6e:48:e2:03:8e:be:
d2:ee:15:1c:04:92:30:89:f8:bf:2a:0a:9e:41:ee:
0b:a0:7f:c0:c6:4f:b9:79:96:c9:ee:0b:38:c3:d0:
7f:05:6a:5a:0f:03:e8:c8:48:4d:dc:af:31:fa:81:
8d:e6:c8:fd:b8:7e:5e:ad:d4:da:cc:e5:0d:b1:3e:
71:a7:17:fa:d5:a5:40:6f:01:61:f2:e7:a1:06:37:
ef:3c:42:25:01:7d:e9:f2:6c:a4:a7:3d:26:53:a8:
a6:b3:66:6d:5c:cd:7a:e7:5b:45:25:b2:74:d3:4b:
c5:a1:74:4d:ab:bc:77:d1:5b:64:a0:37:88:a7:48:
81:f0:60:bf:45:8b:66:78:ca:32:1a:75:b9:9f:5e:
1f:9c:bb:ea:b3:53:13:69:dd:93:e2:ea:1d:bd:42:
63:60:38:36:d5:c1:1d:d4:61:dc:2b:23:c6:09:d6:
74:ff:0e:1f:5d:1d:f4:2b:e7:45:c2:bd:6c:54:42:
d8:69:9f:e2:d1:34:73:b5:c4:70:3e:f5:12:5f:15:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:EB:BB:46:30:05:D2:22:87:CC:C8:42:FC:67:B9:7A:0B:45:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:b0:f7:5f:49:83:fb:c6:14:fa:eb:d4:98:62:a1:89:e4:54:
b6:ec:f8:67:4c:28:1e:39:29:58:8d:7d:ea:42:f8:19:65:0f:
d8:55:3f:e9:f1:43:f2:99:7c:67:61:e1:53:d8:33:30:19:5d:
fc:cb:ba:b9:0b:fc:e5:54:89:c7:34:d3:aa:26:89:72:86:34:
5e:00:72:db:cd:05:28:65:8f:9f:6d:18:7c:03:5b:7c:4d:27:
de:70:df:36:b2:84:c8:20:6f:7a:d1:7f:96:a8:83:eb:6a:e3:
88:22:94:4f:de:0e:d2:ea:95:a0:aa:7b:9b:44:93:5b:0b:c2:
e3:d1:77:62:93:5e:22:e9:a2:87:07:ec:5e:33:28:72:8b:0b:
31:f6:23:3c:dd:cc:ea:6e:ea:5c:4b:0c:a5:02:99:d3:fe:92:
9e:6b:d6:d1:c7:55:7a:7e:14:39:11:61:05:58:d8:d2:79:fc:
bf:5e:b6:8b:34:30:7e:68:68:9e:09:20:19:49:0b:de:cc:88:
e5:19:2c:37:8b:15:8f:70:10:36:da:99:f4:e4:28:11:a1:72:
74:24:a7:43:cd:58:44:31:a2:d1:7a:5b:44:cd:09:09:2f:a3:
21:19:5c:ea:e0:9b:e7:a5:be:ee:72:c0:94:4a:44:b3:58:29:
2b:d7:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:35:31 2025 by rpki-client