Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/292e8148-c1a4-3529-9cd8-9c9df367bb78.roa
File: 292e8148-c1a4-3529-9cd8-9c9df367bb78.roa (raw, json)
Hash identifier: pKNzWN8rd6I9g+/v1yk4xD8J2mNpTAYvKfsUqM/eyUw=
Subject key identifier: 40:64:F6:40:0D:0E:F4:67:7F:96:32:86:60:04:CF:EA:65:9D:C4:B7
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965352E15CEF38871A3480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/292e8148-c1a4-3529-9cd8-9c9df367bb78.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397228
IP address blocks: 156.154.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:53:52:e1:5c:ef:38:87:1a:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=63a66964-dd7e-41a2-a1c1-4809593e19ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:ca:8e:66:42:b7:ba:7e:20:0f:96:0d:5c:
e3:90:da:6c:86:7a:27:9c:6a:5d:16:d7:a9:7c:ce:
63:eb:54:e7:89:8e:c2:ff:d0:8a:a8:6c:92:c8:58:
f6:96:38:08:6a:60:2f:05:2f:61:29:53:67:ed:36:
85:d6:3f:9b:6f:cd:c0:52:f5:f9:37:7b:65:34:b7:
f6:e9:18:50:58:48:ab:a5:f6:a8:3e:94:7e:f0:ff:
63:ae:f0:5f:4c:f3:2f:15:5f:35:03:47:f3:d5:e8:
94:05:af:fc:fd:69:90:78:92:e7:f9:8a:c8:25:6d:
bd:bb:15:55:9f:21:af:9a:0a:ca:0f:4b:c1:20:e8:
04:39:ed:0e:13:4f:21:5a:2b:52:94:b5:b8:44:14:
77:6a:dc:30:78:32:ec:19:6c:55:2f:57:e9:be:4d:
a3:86:67:f3:76:88:e1:b5:33:66:71:3f:97:47:4e:
e5:4e:0a:41:1e:d2:41:39:f9:dc:4b:b2:14:28:85:
48:7c:55:df:81:c5:44:b2:8f:df:a0:27:9a:91:3b:
55:41:0f:a3:0d:a9:45:01:23:82:81:bc:6e:e8:15:
d2:ac:f6:79:ba:8a:74:54:34:30:bb:84:d4:f6:94:
e5:cc:a1:76:10:83:24:7b:41:e9:5d:79:5f:64:58:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:64:F6:40:0D:0E:F4:67:7F:96:32:86:60:04:CF:EA:65:9D:C4:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/292e8148-c1a4-3529-9cd8-9c9df367bb78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:92:71:35:fa:83:ce:db:73:30:2e:e1:57:50:38:6a:af:12:
f6:7d:21:0f:98:f9:b8:a0:4e:5f:0c:58:88:6f:35:42:71:60:
20:42:1f:1d:b7:e4:10:47:1c:e8:43:51:cf:75:ea:b7:39:44:
5e:a8:19:55:ab:0b:31:e9:36:06:c2:c7:1d:f0:09:62:d1:b4:
be:a8:3e:41:d7:1d:17:f6:13:83:83:e9:0e:11:36:51:87:62:
c2:72:71:29:34:67:3d:be:b6:08:9b:03:76:4d:53:76:30:3f:
2e:c0:f8:1a:5e:53:38:97:d3:99:13:8e:85:23:32:c3:f9:d1:
39:41:e7:43:07:66:fe:4b:ee:ba:6d:02:16:de:f3:0c:de:f8:
58:6a:1b:b7:7b:b2:16:02:c3:c5:79:64:f4:a0:85:ac:27:ee:
6f:97:e2:56:3a:2d:d4:88:94:a4:7d:7d:5d:2d:c8:ff:03:22:
b4:73:fa:a0:ba:e1:e5:fd:4d:d2:51:9e:c7:c0:3c:da:91:99:
be:06:90:a7:3a:7c:a6:b5:ee:b2:01:5c:19:7f:c1:5b:19:82:
42:a3:49:c0:fd:44:4f:d4:b2:b0:d2:66:73:95:38:e6:a1:0b:
46:a5:1b:76:6f:0f:82:8a:13:df:26:da:37:0f:da:f5:69:a2:
80:4d:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:11 2025 by rpki-client