Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f709cff-1636-3383-868d-85240b9b89e7.roa
File: 0f709cff-1636-3383-868d-85240b9b89e7.roa (raw, json)
Hash identifier: v/hjs/7/nFd4wNPovjeM4+V1hfkFxgVstL9nzjZg7D0=
Subject key identifier: 76:C2:3A:7A:5D:5C:DE:23:8D:16:C7:DF:8A:A1:94:AB:93:CC:25:BD
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DEE7252C4152AE7286F0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f709cff-1636-3383-868d-85240b9b89e7.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397220
IP address blocks: 156.154.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:de:e7:25:2c:41:52:ae:72:86:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=6a68d7f5-5133-4220-be59-0556bf09e21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:7d:68:25:d2:fe:9e:1e:6b:b0:5d:76:0c:
6b:04:1c:c5:27:65:7e:7b:f5:f8:71:ee:ac:3e:e8:
27:60:ee:f8:cc:81:3b:90:c7:93:d9:ee:47:21:57:
3c:af:25:c9:c2:3a:7a:2a:56:b3:eb:8e:02:8d:9f:
b6:68:b5:c4:ae:a9:df:e1:0c:05:4c:77:dd:8e:df:
06:25:60:f6:4c:9d:bd:86:86:23:ec:fd:47:ad:4d:
dc:6c:6d:aa:5f:97:d1:c1:cc:69:26:21:9b:16:47:
19:1b:d8:49:f0:b6:7b:ab:cb:93:51:e8:fa:f5:eb:
df:4b:c0:fc:4a:a4:13:74:bc:b3:27:0f:96:e8:c6:
da:45:d5:82:d7:08:c4:33:e9:b2:d3:a9:a5:86:ac:
4c:de:51:39:33:e8:e7:1d:44:33:9c:1a:75:dd:18:
bb:f8:db:15:42:72:64:fe:13:0c:ed:ff:41:26:5a:
e1:c9:fe:87:73:fa:41:7e:96:e5:ab:a5:97:e2:a4:
65:31:04:9f:74:3c:dd:48:c1:98:a7:41:7f:8e:55:
84:f2:d9:01:32:6e:02:3f:b1:72:7d:ba:e7:eb:b1:
da:5d:f3:9e:11:68:6b:4b:2f:df:1a:5c:f8:03:a2:
eb:9e:b8:7c:ac:02:18:74:9c:1f:6c:08:6c:1c:d0:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C2:3A:7A:5D:5C:DE:23:8D:16:C7:DF:8A:A1:94:AB:93:CC:25:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f709cff-1636-3383-868d-85240b9b89e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:55:21:69:6b:95:38:10:1e:25:2a:b9:51:43:2a:d4:f1:89:
30:37:38:88:e7:22:c1:e4:24:ba:79:81:66:08:43:6b:47:25:
d4:ed:7d:08:ea:0e:43:0e:ff:5c:91:92:3e:d9:9b:f9:47:84:
68:75:35:fa:9f:bf:44:02:ba:f0:13:95:0d:cc:4d:7d:e6:90:
8f:9c:32:7a:a4:e2:f0:c8:e1:0e:cc:27:78:ae:be:8c:04:58:
40:69:ee:96:50:7b:db:0b:99:05:6e:aa:b1:30:24:b4:04:4c:
c8:05:0d:6f:61:2e:39:ad:30:9b:26:96:00:cc:0e:ed:f6:68:
68:f2:f0:ec:00:99:98:7b:57:73:bc:2f:6d:3c:22:1b:39:91:
61:a4:1d:05:61:e4:81:3a:67:5e:9b:2c:fe:d6:d8:8c:c3:ef:
15:ee:ba:05:ed:89:1e:89:b7:f2:c6:ab:e7:15:59:8f:22:96:
06:d2:13:74:29:4e:66:7b:85:28:f3:e3:4c:1d:42:d5:b6:06:
9c:15:ad:d8:c1:bb:09:b5:b6:81:3a:06:e1:36:91:ed:1e:66:
b5:55:fd:d6:71:8c:eb:8d:08:58:02:6b:25:13:9e:fe:2e:70:
7e:00:ad:c9:55:33:c7:19:ba:42:85:6e:c8:a6:8e:57:c8:9e:
64:91:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:30 2025 by rpki-client