Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/146a9de0-22c0-3f5f-b977-58a4249e22f3.roa
File: 146a9de0-22c0-3f5f-b977-58a4249e22f3.roa (raw, json)
Hash identifier: 5tbHJBcbG2Bq8RNy/DWD+5KvUETpHRzNn3cEMaUrWKg=
Subject key identifier: DC:3B:12:F6:B2:0D:44:5C:2A:71:76:19:07:65:0D:8C:C9:F7:3E:09
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DCF94D5C60F707698040
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/146a9de0-22c0-3f5f-b977-58a4249e22f3.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397215
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:dc:f9:4d:5c:60:f7:07:69:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=edfc03f0-1b43-4ff8-b234-a89882df8694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e4:a5:0a:fb:e0:ed:7a:12:c3:00:d5:23:a1:
00:5b:7d:a8:68:f3:7e:72:57:48:1a:b8:04:6a:90:
7f:f9:47:46:e8:07:4c:fb:71:1a:4e:b8:89:48:3c:
b9:e3:7b:b2:0d:ae:15:7c:11:bf:87:1b:24:ad:61:
58:f1:cb:de:d6:52:64:d1:f7:c1:04:c4:4c:c0:94:
ca:5b:74:0b:50:b5:1e:e6:30:6c:de:a8:92:0a:31:
e2:83:1d:b7:92:28:be:dc:27:94:ad:16:d8:41:01:
06:11:12:32:fe:1b:31:bc:2a:21:8e:e6:53:64:d1:
84:34:90:e6:61:73:b5:08:7f:d5:0e:71:b4:29:53:
31:8d:0a:c2:c1:90:65:9d:57:d5:06:bd:dd:b5:80:
d8:ad:ad:4c:b9:96:cc:cc:fa:54:88:27:16:18:ba:
d2:43:53:f5:d3:18:f2:d3:81:9d:ce:f9:6a:33:f1:
59:ea:f2:03:87:d2:ce:25:5c:25:8f:9c:04:20:e0:
f4:90:4c:24:e0:93:98:db:ef:02:7a:b2:92:ea:1f:
88:c4:ab:ee:47:92:a1:12:17:ff:7f:81:1d:7e:cd:
a6:84:6f:ea:3d:4a:47:b4:51:de:c0:ba:0b:e6:1f:
82:a2:18:8f:0a:7c:d2:b5:37:8c:d2:63:b7:84:86:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:12:F6:B2:0D:44:5C:2A:71:76:19:07:65:0D:8C:C9:F7:3E:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/146a9de0-22c0-3f5f-b977-58a4249e22f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f8:60:f9:fc:db:a1:4f:1e:b7:1e:72:4c:61:1d:06:01:27:
22:e6:51:41:13:32:86:3b:34:2a:71:6f:4b:5c:6f:f9:88:59:
d1:bd:34:3a:46:39:77:b5:59:76:4b:c4:ea:b0:cb:65:b2:dd:
78:42:66:66:8b:5d:e1:57:9f:35:84:3b:21:6b:48:df:f9:11:
b9:c3:57:55:a1:f6:f8:d4:ab:aa:8e:b6:a3:bf:32:79:4c:45:
c6:60:3c:70:ed:d4:78:5b:ad:af:07:16:de:b6:2a:97:c9:83:
c4:52:4d:3a:9b:97:df:cd:91:b4:6a:2d:69:42:6f:a3:b2:b4:
07:36:c3:84:bd:fe:7a:23:73:80:11:76:81:df:98:58:5f:a4:
3f:79:ae:0e:4e:3c:bf:a0:ad:65:12:c9:1c:37:c8:dd:17:9e:
fd:2e:b0:09:53:26:04:dd:83:6e:e0:54:2e:7d:d2:49:70:41:
f9:ca:9e:a0:a5:db:c3:68:3f:db:39:cb:46:81:b6:c3:f8:41:
99:02:15:69:5d:74:1d:58:4d:42:a6:9f:51:6f:33:54:b7:a2:
72:e4:ee:6e:37:7d:8f:d9:4d:2e:28:d1:07:1b:45:8a:c6:9e:
a4:45:f3:80:93:0e:0b:bd:2f:30:4e:d1:19:40:06:4f:05:b1:
bd:b2:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:42 2025 by rpki-client