Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/25abf94f-ed70-3e8b-8235-c93762709e4d.roa
File: 25abf94f-ed70-3e8b-8235-c93762709e4d.roa (raw, json)
Hash identifier: lw6x/d6rEYFZFHSPKUKhSDKv6EuS8pliElpyoog06/c=
Subject key identifier: A5:67:58:85:36:DF:5E:CB:13:2E:B2:11:71:13:90:6A:39:2B:B6:E4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210D9A6DC973D6E7AA7500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/25abf94f-ed70-3e8b-8235-c93762709e4d.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397223
IP address blocks: 156.154.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0d:9a:6d:c9:73:d6:e7:aa:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=636a6a73-f642-4272-aa99-27756532be45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:8d:7b:4e:c9:84:54:1c:3b:35:ad:17:41:
cf:ee:61:f2:5c:da:5a:94:14:48:6d:c5:5c:9c:42:
de:08:8f:d2:4b:94:7f:b6:9f:f8:44:40:96:5e:67:
f1:21:ed:6d:bc:33:30:54:b1:ad:56:f3:46:d3:35:
6d:19:66:82:fc:25:0b:1e:67:8a:f6:64:c4:0d:9c:
06:c5:99:69:23:90:ea:ed:96:43:0a:41:5e:93:80:
9b:41:a2:5f:ec:b8:3e:a8:12:b2:c8:06:8a:d4:7f:
4e:3c:16:ae:ca:3d:84:6a:d3:81:4d:00:26:b1:3f:
4b:30:a9:28:1d:c7:04:12:aa:ad:66:55:d7:63:1a:
cb:b8:0f:47:06:4c:79:54:4b:87:49:d5:5b:82:7b:
74:a4:e5:1e:8d:6a:cc:85:56:0f:eb:02:fa:7c:66:
3d:e7:53:4b:4f:4f:22:c8:8f:66:1d:66:cd:a2:96:
db:28:4f:57:32:36:da:5e:41:e3:9a:bc:5f:a7:0c:
54:21:b9:57:0a:4b:2c:da:00:f7:eb:22:96:fb:79:
af:ef:05:f8:52:ed:68:e2:58:2a:ad:18:ad:ff:3e:
ce:1e:5d:69:d0:46:3a:7b:bd:f4:34:15:9d:3f:4c:
ea:d8:d4:36:e0:96:97:b9:ed:98:ae:b4:9d:79:cb:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:58:85:36:DF:5E:CB:13:2E:B2:11:71:13:90:6A:39:2B:B6:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/25abf94f-ed70-3e8b-8235-c93762709e4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:81:9e:f3:eb:62:56:d5:b7:06:39:dd:d5:1f:24:81:4a:11:
d4:73:a3:07:67:b2:1b:a9:ed:04:dd:de:ac:47:fc:36:71:ca:
a3:70:be:0b:8a:8f:ea:e8:bf:42:f6:9a:44:ff:00:6d:a0:58:
46:b3:c5:fb:3c:34:6b:d7:43:e1:5a:9e:f7:55:a0:26:9d:02:
55:5c:08:92:b0:e0:c0:f7:df:43:53:24:b4:e4:33:a8:c5:0a:
f5:5d:b0:36:60:60:6d:e9:cc:b1:77:22:61:27:7a:1a:92:19:
3b:1d:7c:fa:5a:29:ea:f3:af:a3:51:e0:32:a3:4b:c1:c8:25:
4b:c6:66:6f:29:40:99:4c:3e:b2:56:85:06:c9:e6:71:08:be:
ed:3e:9d:3f:0e:81:88:1d:7b:52:56:e6:7a:32:81:9f:1a:5e:
06:61:98:b6:d8:71:06:26:b3:37:1f:e8:7d:40:84:25:f4:19:
19:d1:4f:8a:43:5e:02:e9:2b:a2:5a:d8:36:db:a9:d3:e5:5d:
6e:2a:c7:df:25:4d:ae:e2:04:b5:57:62:23:c6:56:e5:31:ef:
c6:17:a0:36:71:90:7c:66:76:db:25:67:b9:d3:a9:db:0b:02:
f3:9e:3b:a6:53:50:4c:d0:0f:fa:61:99:a1:2a:45:02:55:9e:
16:69:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:07:13 2025 by rpki-client