Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/faf82ae2-53c9-3116-b2d2-66a29af2f159.roa
File: faf82ae2-53c9-3116-b2d2-66a29af2f159.roa (raw, json)
Hash identifier: BwvIcGxTi5NwxllMU35ecRMN+ocociwvc9AG66qEPf8=
Subject key identifier: 5F:92:E9:01:65:F2:5C:13:B8:CC:EF:54:73:EE:0E:3C:B8:C9:3C:C8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00AC5261B088AF435DD00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/faf82ae2-53c9-3116-b2d2-66a29af2f159.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397238
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0a:c5:26:1b:08:8a:f4:35:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=321900e0-2216-4f31-bfcc-ab83dfbfea0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:08:5b:51:c0:a2:29:25:9f:5f:27:08:ac:
19:1e:4c:f4:3c:f9:94:34:8b:a9:82:52:f5:f0:c3:
ee:38:45:e1:a3:23:ae:61:1e:fb:3f:16:4d:91:38:
eb:36:a9:52:33:90:9b:17:89:71:b3:a2:8b:0e:e1:
5f:f2:25:bb:b0:be:f1:83:15:bf:5d:66:2e:ff:45:
b8:f8:8b:74:93:4c:a4:3c:15:43:69:3a:f9:dc:97:
62:f0:f5:48:94:38:29:8f:49:d8:9f:0e:72:a0:5f:
50:bc:ee:35:29:ad:40:ae:88:06:1d:85:66:e0:0a:
46:71:c5:3a:95:c2:8e:e1:8c:01:64:29:a1:42:8f:
d3:5b:9f:83:fa:e7:e7:39:df:e0:0f:b2:1d:62:6a:
18:62:d9:6a:2c:10:d2:c1:95:e5:ef:4f:51:d8:85:
af:f8:0f:78:30:68:aa:78:34:e4:d2:50:79:5d:ae:
3f:f4:e0:73:95:8d:65:a4:02:90:6d:c8:18:9b:6b:
02:ee:ed:f4:f3:40:35:b7:b6:c8:fc:d8:57:d1:12:
cf:f6:8d:c0:9c:de:6b:a4:0c:03:1a:d0:f6:c1:eb:
43:e8:83:b7:dc:f6:f3:fe:2e:44:46:99:dc:3f:34:
06:26:bf:f6:2a:2e:bf:92:4e:b3:bd:73:15:78:8e:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:E9:01:65:F2:5C:13:B8:CC:EF:54:73:EE:0E:3C:B8:C9:3C:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/faf82ae2-53c9-3116-b2d2-66a29af2f159.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:88:8d:32:53:d3:70:b9:1e:8d:f2:71:4e:63:30:18:1c:97:
d6:0a:d8:07:e7:b0:20:d5:33:b6:a1:04:85:e0:ee:fc:5d:ce:
07:5c:2e:20:0a:48:43:ec:e4:85:36:ed:5d:6c:3c:85:15:4f:
e8:4c:95:be:e5:34:cd:47:de:ee:1e:af:ae:e2:13:fd:e3:47:
97:f4:ba:15:92:4a:b3:fc:3b:e4:e5:fa:4f:80:a6:32:ed:fa:
9c:3b:2d:a1:b5:b2:a7:23:18:ac:91:ec:c5:4c:75:56:28:6a:
01:79:c1:2b:ba:4d:a1:d7:25:01:37:97:e3:ab:e8:c9:64:b3:
fa:4e:81:e7:ef:9b:f4:be:3c:a0:8c:b1:ee:a8:7c:44:60:a2:
0e:02:f2:4e:0f:68:9e:10:d8:d9:bb:02:15:3d:4d:92:aa:b3:
df:cd:bb:19:bf:46:5f:b7:6a:24:4f:eb:39:13:c9:73:df:e5:
36:c9:3a:50:0c:33:14:05:2e:4c:47:cd:64:75:00:16:7f:11:
a6:43:b8:f4:3a:f5:0d:dc:b4:0b:4f:8b:50:89:5a:c9:05:e1:
fc:c1:20:60:10:f2:14:a3:89:d3:ff:38:5c:b6:e9:45:b3:f5:
71:0b:e9:76:34:ec:47:5d:cd:4f:cf:23:7a:b2:92:cc:0f:5a:
5c:8b:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:45 2025 by rpki-client