Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d63e445-c74e-3a20-afa9-23efefffd922.roa
File: 1d63e445-c74e-3a20-afa9-23efefffd922.roa (raw, json)
Hash identifier: E8DXsVJAuc7zKRRGYtgDPw1sHxah+vxd9U23M7hvPUU=
Subject key identifier: FF:AE:A8:BC:19:A1:44:5E:A5:7D:41:9A:FC:A6:42:A2:00:62:00:3B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DB29490AD86CFC85F300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d63e445-c74e-3a20-afa9-23efefffd922.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397215
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:db:29:49:0a:d8:6c:fc:85:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a445ecd3-c596-4c59-b970-60c1ca8a5589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:7d:7a:cb:14:fd:22:fd:b9:f6:38:fc:97:
cc:92:72:21:14:0c:5e:54:b8:92:48:d7:dd:6d:1d:
87:87:b3:50:27:34:04:c6:0d:50:22:19:6f:bd:4a:
39:03:99:5d:21:64:07:ed:79:af:88:98:eb:12:eb:
a3:e5:1f:53:8f:14:83:bd:5c:9b:c6:7f:c3:86:f8:
fb:c4:43:e8:7f:5c:57:b4:45:94:8b:c3:2b:88:61:
27:fb:b9:5b:3a:35:1d:33:50:25:00:d8:8b:a1:96:
57:94:23:be:57:38:eb:4e:58:28:14:ae:68:1e:1d:
80:eb:fb:b9:cd:51:ca:ec:d5:42:7a:b1:df:d2:de:
5b:10:02:96:ee:82:b6:cd:1f:b8:26:fd:b6:cd:69:
8f:8f:4d:d0:03:d9:be:42:ca:1b:a3:d2:3f:ee:52:
b6:51:5f:9f:53:1d:fe:e7:08:c0:f4:d4:fd:17:5d:
c0:c6:f2:68:60:fc:db:ea:03:22:48:58:55:83:4b:
03:6f:50:9e:a7:e5:de:a5:c4:c4:ad:67:a3:a9:20:
26:49:61:52:60:56:ce:4a:22:64:f0:93:4b:de:b4:
4a:ef:f7:9a:fd:37:47:c7:b8:5d:a4:02:ff:6c:59:
bc:ae:9d:52:86:06:ed:11:92:2d:2e:db:c9:18:0f:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:A8:BC:19:A1:44:5E:A5:7D:41:9A:FC:A6:42:A2:00:62:00:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d63e445-c74e-3a20-afa9-23efefffd922.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:4d:6d:3c:7d:cc:0a:f4:4b:81:a0:ca:dc:57:3c:58:e4:c9:
5e:20:43:3e:23:8d:8b:c8:d2:fb:75:e5:33:02:de:01:c3:4d:
a6:0c:1a:93:cd:c6:7e:16:e3:ea:29:3d:04:a1:1b:e2:9c:16:
02:eb:e9:2c:f6:fe:36:14:e7:4d:e8:8e:4e:d1:3d:54:85:e8:
d0:a1:84:8b:b8:9f:1a:cf:84:2a:aa:b3:87:99:70:b0:1f:ee:
ed:5a:56:7a:b6:5d:e5:be:db:5c:1a:da:91:33:99:6c:d9:a3:
b7:e1:d8:13:13:70:17:48:05:75:ea:5f:13:c0:a2:6f:a8:c4:
1c:61:aa:44:c8:93:54:22:6e:e4:f0:03:37:53:54:f6:35:16:
ae:33:f3:29:b1:38:bc:96:02:83:87:1a:59:38:ec:3a:be:f6:
14:52:92:92:2a:60:09:23:79:24:b5:82:16:3b:ca:e1:c7:11:
c6:c0:27:3c:b8:70:8a:4e:af:b5:f1:23:8d:ed:55:c2:e5:bf:
12:74:5c:8e:67:57:22:01:54:f4:b8:41:94:42:bc:a8:c9:1f:
1a:a4:8f:9d:54:f6:a7:db:96:29:25:59:b5:8f:1a:1c:f9:ce:
9e:35:42:e4:95:e6:2a:3c:61:d9:82:e7:21:6f:a5:c7:0b:60:
7d:85:a6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:13 2025 by rpki-client