Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1b0aba34-c0d4-3f1a-b0a7-e8246f247b3d.roa
File: 1b0aba34-c0d4-3f1a-b0a7-e8246f247b3d.roa (raw, json)
Hash identifier: dTxZnQr2SMmwx1aYweQdYPrmXHMsFxp72PN+7JQmET0=
Subject key identifier: 99:12:78:CF:BD:6F:B6:3A:24:3B:EB:3B:7B:93:22:D5:D8:1D:A0:8E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B64285385AC43ACDCE1D880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1b0aba34-c0d4-3f1a-b0a7-e8246f247b3d.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397236
IP address blocks: 156.154.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:28:53:85:ac:43:ac:dc:e1:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=58620bf6-4e1d-429b-a0cc-d76459d6c5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:36:e5:27:0d:6a:e7:12:b8:50:1d:ed:a8:
a4:57:de:9b:cb:08:8c:0f:52:71:75:19:7e:f7:c2:
4d:e2:38:c1:ce:4d:51:99:d4:45:7b:3a:47:9a:08:
fc:9e:33:e9:cd:fc:0c:ed:b6:2b:00:95:84:ca:43:
9a:16:87:21:fe:d9:9c:f8:bf:27:fb:66:86:5e:01:
fb:ed:44:3c:41:37:0d:86:ff:29:7b:8d:0d:2d:c3:
5b:53:fb:66:e7:e7:6e:5c:13:70:77:79:60:b1:93:
c7:a5:83:ad:65:e1:49:51:77:3e:ac:c5:9a:e9:90:
04:f7:18:da:b9:59:ad:0e:65:91:47:3e:a9:50:4b:
1c:58:97:73:03:77:a1:69:70:4d:77:51:89:fd:d6:
cf:4b:c0:34:81:3e:34:67:21:ca:07:76:f0:88:fa:
a9:64:3f:62:f1:63:17:d3:41:5a:39:19:f4:63:c9:
9a:48:ca:0c:a2:e4:c2:48:b1:99:92:b9:f7:95:0b:
8a:29:3b:a5:79:cd:c1:bb:77:07:96:f8:0b:3b:6d:
fd:3b:99:cc:0a:d9:4d:1a:03:c3:14:0f:3c:bf:96:
76:5f:40:99:ba:e9:a2:72:ac:ec:43:f5:02:c3:3a:
45:c4:c5:ca:7d:ad:b4:ad:72:9a:c2:77:66:e1:f8:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:12:78:CF:BD:6F:B6:3A:24:3B:EB:3B:7B:93:22:D5:D8:1D:A0:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1b0aba34-c0d4-3f1a-b0a7-e8246f247b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:22:6c:37:e4:4d:9c:fc:f4:32:5c:37:c0:b1:92:3d:9a:00:
fc:c5:8f:1b:e3:f9:79:fa:75:cf:0a:44:4c:39:6b:f2:2d:7f:
4f:de:df:ac:da:b4:d6:3f:1b:b1:cd:5a:2e:ec:e5:07:88:d6:
4d:1d:e1:93:ea:9a:6c:4e:c8:65:de:32:19:19:df:af:01:0f:
35:85:6e:81:98:3e:8d:c2:66:92:96:03:65:da:e0:c4:96:b3:
35:05:0f:94:2f:85:b8:48:a3:0d:7f:90:88:4d:0d:ca:d5:d3:
55:08:9d:28:f7:e3:f3:32:d8:a5:81:6f:e6:8b:18:6f:55:a2:
10:a4:6f:b4:ae:f5:91:db:9b:1a:8e:1a:9a:60:2d:48:8b:18:
da:fc:74:98:1e:57:0e:bb:67:08:4e:58:40:46:ed:40:a5:9c:
61:e5:0f:90:fa:30:cf:63:f3:84:99:c8:29:bd:9a:a9:03:9b:
6c:37:cb:f5:6d:31:36:fc:26:cd:fd:b6:0b:aa:60:47:72:4c:
70:fa:6c:e0:b0:9d:c4:67:ee:72:3d:a2:ce:01:6d:7a:5c:82:
0e:cf:60:16:f2:2d:85:24:12:a3:b0:f4:87:6f:5d:71:80:52:
e5:a9:5a:91:db:1f:8a:3d:c7:dc:4c:f1:4e:b7:99:35:1d:dc:
98:aa:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:24 2025 by rpki-client