Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a562be1-0f38-329e-9220-4ee56ca11b64.roa
File: 1a562be1-0f38-329e-9220-4ee56ca11b64.roa (raw, json)
Hash identifier: gv3wHEiqS/FD7UeSz8BItLbBhHosQdVfX4mxJR0n8jI=
Subject key identifier: 17:4D:91:06:C3:F0:5B:FA:71:9E:4C:6F:07:F0:5D:21:64:28:7C:EF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210C27185D195B1F9CDB60
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a562be1-0f38-329e-9220-4ee56ca11b64.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397230
IP address blocks: 156.154.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0c:27:18:5d:19:5b:1f:9c:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=4f6806d8-bb61-468e-811a-cb8e21167263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:af:61:a5:4b:f3:d6:75:17:ff:25:ba:71:
f6:96:f8:de:82:2a:c9:4c:a5:93:60:7a:d7:67:87:
25:2a:b3:a2:f8:81:bd:d1:c1:10:40:6e:43:d9:45:
9a:31:42:0d:b1:69:e2:a9:a3:b5:75:5d:b9:36:cf:
93:2d:c1:a2:b4:17:0e:a3:e0:cd:59:6f:8c:4f:5f:
28:17:0b:3e:71:25:29:33:91:a8:af:b5:11:42:6c:
4c:94:1c:e4:d0:a3:a8:f3:89:96:94:1a:c7:5d:21:
4b:27:c8:fe:38:60:6a:35:c4:c2:96:b4:be:fc:33:
1d:f7:23:18:86:d2:04:91:4f:ad:72:a4:62:f2:e3:
96:5f:d7:63:4d:a4:36:d4:e0:29:62:41:24:64:c4:
fc:57:ee:20:b5:ed:96:af:a0:1b:1e:95:32:e3:a4:
76:e4:96:2f:95:b3:2d:2f:4a:df:0f:2c:e4:99:27:
f5:e3:76:35:cb:77:51:64:a5:d4:dd:27:cf:ff:aa:
7f:7d:a6:c5:b5:dc:87:4c:d7:d5:49:9d:2a:68:dc:
ac:f1:a1:a8:d3:30:ee:58:14:43:37:62:7c:a4:54:
cb:af:6f:4f:d8:9b:3a:d1:09:04:87:d4:09:04:18:
08:9c:ff:2a:a1:2f:ff:79:6f:e1:37:e2:cc:88:73:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:91:06:C3:F0:5B:FA:71:9E:4C:6F:07:F0:5D:21:64:28:7C:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a562be1-0f38-329e-9220-4ee56ca11b64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:ae:f5:21:a9:d1:79:4a:e9:5b:1f:4a:bc:20:9f:a3:7c:03:
f5:50:4e:1d:99:6d:93:87:1a:ec:e6:f8:16:dd:fe:4f:22:43:
d6:8e:3e:88:cc:4e:37:f7:3c:54:11:82:1b:74:25:a9:8c:f4:
42:4f:b2:d0:f0:dd:34:4c:09:49:51:8d:c2:79:72:14:b9:92:
a0:15:da:e7:1e:3b:b3:a6:cb:c9:a0:24:ce:5b:bf:e5:8a:b7:
f9:e8:6b:1c:e1:b7:75:52:27:c6:65:a3:b8:32:57:f2:14:92:
73:90:6e:e7:e6:df:10:c5:95:2a:8d:8d:b0:44:79:43:40:3e:
82:da:fc:e5:14:ad:cd:6f:c1:e8:48:c1:29:70:de:3d:64:ba:
68:34:0c:c8:8b:0a:39:3d:59:50:2e:5f:76:e8:15:9b:49:49:
35:3a:21:11:0e:bf:9e:1f:6b:09:73:c3:8a:dd:c9:1c:00:82:
83:4c:70:b7:74:d6:dc:69:b5:33:f5:5c:f6:e9:b5:02:c9:5c:
f5:30:5d:5f:6e:27:77:d4:59:04:49:fb:42:11:fc:ff:4a:3e:
25:8a:97:89:48:e5:cd:5c:82:a3:e8:c5:d7:e0:28:f6:c3:81:
66:6b:ef:0d:da:49:60:48:82:bd:23:7c:53:ec:3d:95:db:63:
9b:00:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:43 2025 by rpki-client