Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ca71268-0bf7-3850-a74f-c3f03dab6504.roa
File: 1ca71268-0bf7-3850-a74f-c3f03dab6504.roa (raw, json)
Hash identifier: guAqLZabenMJyyQJ6TR70IkBW/Fqd0qZNP9t/ZubTgE=
Subject key identifier: AF:00:93:09:FA:D4:AA:B8:9F:49:98:F4:C6:3A:A3:51:C6:1E:CD:47
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2104574C0D97DF751A3640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ca71268-0bf7-3850-a74f-c3f03dab6504.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397224
IP address blocks: 156.154.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:04:57:4c:0d:97:df:75:1a:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=fe3b9bc3-2a42-418a-83a7-1c7cbfabd9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:53:aa:09:32:fe:2b:2a:90:72:09:bb:bd:
38:23:e9:be:fa:e1:a9:03:d0:ea:32:54:ea:e5:fd:
4d:9a:f3:aa:64:19:e2:42:59:08:88:a7:f5:d1:5e:
50:68:09:e9:d6:a1:a8:ea:c7:8a:18:19:8e:9c:ee:
9d:8b:ce:9c:be:9f:4b:58:0c:da:a4:ec:21:54:8e:
6d:d6:9e:a3:24:25:1e:fe:a3:9d:4e:72:80:9d:40:
6f:f9:91:a5:f9:49:83:53:fc:81:2e:a2:a6:46:35:
f4:2e:6e:c1:d6:ce:8f:72:da:7d:69:ab:d1:0c:f6:
22:b4:68:35:ba:ef:19:49:72:24:34:79:58:27:d4:
77:d9:56:80:5c:ae:5e:5f:8c:20:4f:78:05:63:1f:
d8:93:87:ef:b3:83:e1:9a:05:f2:36:77:33:8a:04:
29:5f:5a:de:83:e6:29:da:b2:8f:62:83:e8:6b:94:
03:e2:4f:16:83:11:31:61:bb:72:4a:c9:b4:17:d2:
88:85:11:44:e1:d5:42:d5:4e:a8:ba:2b:28:29:ec:
ff:d3:0d:43:8c:f8:2a:4b:47:61:0b:aa:8b:23:c7:
d7:cc:c7:aa:92:ca:9b:cc:fe:10:2e:ce:2c:b7:fb:
90:fc:6c:e2:a6:f2:2f:b3:52:f4:d7:61:18:a6:e9:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:93:09:FA:D4:AA:B8:9F:49:98:F4:C6:3A:A3:51:C6:1E:CD:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ca71268-0bf7-3850-a74f-c3f03dab6504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:e9:cc:23:ff:0b:f8:f9:41:47:25:71:eb:96:7d:5a:34:54:
d5:f6:03:70:08:c2:5e:d2:6c:aa:4e:e3:ad:5c:43:1c:d6:a7:
32:dc:c2:e3:ad:c4:ad:30:d1:97:c8:2a:8f:ec:73:b0:f6:96:
c1:cc:3d:b1:38:24:58:c9:21:51:69:5a:72:0c:86:f7:12:67:
ec:8e:a9:f0:36:dc:52:d9:65:23:04:c8:eb:3c:5b:23:63:c1:
30:84:b9:f0:64:ac:51:8f:51:73:97:78:38:74:3e:80:bb:21:
cd:9c:82:b3:77:c7:cb:a2:07:ab:3f:ee:3d:fe:fd:7a:a1:80:
85:b5:ea:76:af:4b:47:fd:eb:e7:75:48:fd:f1:5b:4d:fe:5c:
fe:20:40:e1:4f:39:d8:b8:64:f9:55:ca:09:5f:ef:26:ed:c5:
25:95:6b:b4:e0:17:80:87:ad:cd:fb:46:91:67:0b:61:f6:bd:
ce:ab:49:59:f9:76:4f:79:f6:8c:86:c1:dc:0b:8f:19:8b:c5:
04:6d:27:a7:32:9c:ae:fb:7f:22:74:c0:eb:63:39:28:7c:4f:
f7:2f:80:5b:33:f5:18:4b:8c:f4:c4:4b:84:83:91:a9:9a:0d:
32:84:61:d6:8b:30:58:fa:57:98:7b:40:e8:99:ab:3f:3c:ff:
cc:a9:39:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:23 2025 by rpki-client