Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa
File: 23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa (raw, json)
Hash identifier: 2u2fEBbrTt2FWJYcepd9TM1P/rAoXUAgAbDEIWtx5G4=
Subject key identifier: 5F:71:A3:2B:A8:21:1F:05:F4:19:36:D6:D1:44:44:D6:2A:EC:EA:52
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DE580F57048CAB3A2780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397242
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:de:58:0f:57:04:8c:ab:3a:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1287e661-3442-4bf1-8cc7-e248d2aca66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:ef:d5:81:1f:86:67:bd:15:9f:77:e5:9b:
4f:90:9a:c2:d7:0c:05:7b:2e:4f:97:98:85:c8:18:
8e:51:35:e6:51:06:3f:00:e9:7a:e2:6d:f9:2c:3b:
10:dc:a0:73:e3:42:57:a6:4c:79:a0:04:45:ce:4d:
7b:10:f1:21:c3:fb:77:fa:0a:66:27:4d:97:fc:48:
c6:e0:02:a6:a0:a5:fb:b5:ed:0e:bd:06:cc:c2:50:
d7:2b:9e:4f:08:8a:25:f7:a6:8f:db:4c:58:0d:0c:
68:73:36:dc:a8:24:db:2a:af:62:05:91:9e:06:11:
29:b1:c5:ed:25:17:6f:62:93:36:2a:83:9a:0f:68:
b1:cf:55:3f:cb:f7:76:42:34:24:64:5c:19:06:c8:
63:88:3d:ce:ac:25:2f:56:37:3c:cf:de:ed:ea:04:
9c:35:7a:b6:f2:91:e2:1b:fd:5b:cf:08:16:0c:a5:
c5:9a:81:05:ad:f9:43:2b:1c:49:89:de:b4:37:66:
d6:e8:7c:01:64:4b:22:ee:f2:e9:72:05:40:e2:a7:
93:f0:b7:4e:e3:06:99:e5:cb:6f:71:05:a9:32:57:
9b:05:25:65:bc:5d:51:e9:5e:af:5b:5a:1e:da:cf:
c2:52:1b:6f:72:c1:f9:09:b2:1f:c6:7d:97:e2:d4:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:A3:2B:A8:21:1F:05:F4:19:36:D6:D1:44:44:D6:2A:EC:EA:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:91:42:0c:da:cd:e3:45:0c:7a:70:62:ab:71:1a:05:28:12:
26:2d:16:80:df:04:53:89:96:06:34:a4:af:a1:95:00:44:61:
a2:b1:c7:94:71:19:69:1a:6d:b5:39:93:a6:59:77:67:cb:47:
7a:eb:2a:73:97:a4:db:37:cf:66:12:87:3e:dd:4c:99:b5:ee:
9e:31:16:9b:da:30:c2:28:0f:b4:3f:55:26:66:8d:9a:74:d5:
62:2b:42:99:c7:a8:bc:42:93:46:0c:90:40:c3:9f:c9:2a:79:
0d:61:dd:e9:7c:b6:86:6a:a4:5d:ef:d5:df:67:86:8e:1f:de:
3f:17:86:4c:7d:db:58:4a:d2:a7:9f:e6:6d:3b:2b:41:49:4b:
11:14:23:fb:d2:e7:79:98:db:4c:cb:89:0e:1f:31:40:78:57:
7c:7e:fa:d5:47:0c:23:e4:e8:89:71:61:5c:19:5f:58:ec:1d:
e7:b2:d3:59:24:b0:9b:55:e6:07:22:eb:a1:b1:29:50:44:21:
00:3b:c7:0f:9e:9e:10:af:2d:2b:dd:81:42:94:a2:d5:fb:bf:
8f:15:39:63:47:0e:f4:d1:01:7d:50:4f:eb:c6:44:b2:98:0c:
13:c9:f8:58:22:28:96:ea:9a:30:fe:46:82:72:e5:61:c6:f6:
91:6d:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:18 2025 by rpki-client