Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa9231de-b6f0-3b35-96d4-ec826dd73191.roa
File: fa9231de-b6f0-3b35-96d4-ec826dd73191.roa (raw, json)
Hash identifier: XsuOmJe3abdWpfhj2r+ZdHpG1K6tfrqIgHVYyXufq/g=
Subject key identifier: F3:F0:5C:19:3B:CD:EB:E6:07:7C:68:6B:E2:9B:C2:C9:FB:2A:0D:58
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584819CFE4B2D0796AAA87D8C900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa9231de-b6f0-3b35-96d4-ec826dd73191.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 397238
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e4:b2:d0:79:6a:aa:87:d8:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a9d84702-ff6c-4027-b9ba-7bd04b381121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:ca:b9:39:41:2e:fb:6c:44:55:6a:35:5d:
26:53:ef:59:d4:2f:9b:a6:79:06:41:20:ef:d9:6a:
42:bd:46:61:6b:d1:01:60:7a:59:cc:03:dc:92:27:
3d:af:12:48:ce:12:c4:cd:fc:eb:7a:1a:bc:89:30:
ea:e4:9f:f1:b3:2f:d4:81:ca:5d:2f:76:33:68:75:
15:44:e6:c4:6e:7e:6f:43:0e:4c:f2:b9:58:6d:25:
18:90:c0:77:7f:d0:d5:ba:d1:04:ff:9c:e8:ec:eb:
91:23:cb:62:92:f4:3c:a3:56:d5:c6:dc:fa:4e:cb:
40:fb:39:95:f7:57:fe:c7:6f:20:5b:f8:a3:8d:8c:
4b:cc:77:68:b3:19:99:3a:5e:64:32:33:59:1f:52:
ef:9a:63:e4:fe:8e:b4:9d:b7:d1:20:48:57:e0:0e:
f5:0f:0e:9e:51:51:c4:8f:7b:a9:f8:41:72:4e:54:
3d:be:48:08:02:74:d6:04:f5:96:96:7c:79:69:10:
ca:a2:bb:e2:58:d1:98:6d:80:09:3a:44:f0:d7:11:
fd:a4:d2:29:6b:02:ae:ee:12:3d:6a:7c:c7:e7:ef:
1e:59:8a:ee:a5:ff:f3:e3:ce:bd:e6:5f:34:26:fd:
bf:f6:7c:60:ea:c9:bf:dc:0b:31:7c:ef:c5:94:80:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F0:5C:19:3B:CD:EB:E6:07:7C:68:6B:E2:9B:C2:C9:FB:2A:0D:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa9231de-b6f0-3b35-96d4-ec826dd73191.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:7d:40:58:1a:d6:9b:f7:72:1d:1e:fc:f3:58:c5:a8:d3:a2:
0d:b0:10:9d:f3:60:b9:8c:5a:49:2d:21:0b:33:a5:8f:f5:69:
b4:4d:e2:bf:1b:fe:44:8d:42:fd:9f:4e:51:db:38:e0:a9:84:
13:88:05:98:95:76:af:78:60:83:da:70:c3:f9:84:40:b9:5b:
83:88:90:55:31:4a:71:d0:86:a1:88:39:51:2c:c9:19:12:36:
2f:37:76:bb:bb:f4:8c:a2:90:62:cf:f1:c8:4d:ff:8a:f3:fc:
59:2d:1c:09:59:46:d6:d8:67:c0:a5:05:8a:8e:24:90:01:b5:
09:db:98:23:4b:fd:b8:f5:ce:92:08:f7:a5:4c:52:3a:27:d7:
15:05:59:7e:df:17:e7:3b:9c:da:2a:fe:9c:e1:34:de:57:8c:
2b:c9:c9:58:b0:75:7a:44:98:34:f9:43:11:4e:a3:03:da:41:
b1:b8:e5:b4:16:10:5a:3b:a8:18:d6:20:76:ef:a6:70:11:3e:
ba:49:63:3e:df:11:73:1b:28:35:c7:52:95:b6:00:bf:aa:3d:
05:c2:8e:97:5f:10:d6:4e:1a:c3:08:58:cf:4e:7d:47:8b:10:
c4:95:63:ae:41:72:22:70:62:a7:bd:c2:e2:5e:45:36:5d:56:
4c:29:5c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:39 2025 by rpki-client