Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2c244aa9-dcd8-3f0e-a40d-6a328e7427ff.roa
File: 2c244aa9-dcd8-3f0e-a40d-6a328e7427ff.roa (raw, json)
Hash identifier: 8op0tKoCE3FD5IDYqPUN0IAS2Oh1ZQyfd2lU4+0mDCs=
Subject key identifier: 4E:BB:2A:8E:B6:7D:64:8E:18:87:37:EF:DF:76:1B:91:8F:FD:19:F2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848DF2595B6B67D8C0A89A1FE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2c244aa9-dcd8-3f0e-a40d-6a328e7427ff.roa
Signing time: Thu 13 Feb 2025 18:27:53 +0000
ROA not before: Thu 13 Feb 2025 18:27:53 +0000
ROA not after: Wed 14 May 2025 17:27:53 +0000
asID: 12008
IP address blocks: 156.154.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:df:25:95:b6:b6:7d:8c:0a:89:a1:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 13 18:27:53 2025 GMT
Not After : May 14 17:27:53 2025 GMT
Subject: CN=ebb0df1b-466c-4449-af5b-5236c3974709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:3c:2a:0e:1d:f6:22:54:fd:39:55:03:7c:
a6:5a:cd:6d:e9:7d:22:cf:6b:73:84:12:c3:bf:f3:
8f:8e:1b:1a:2f:61:80:84:a3:ff:01:5e:02:ad:d3:
4f:db:36:44:1a:a9:f7:a4:d9:c2:2e:3b:91:02:2c:
12:c4:1c:4b:b0:ab:b2:4d:ea:ea:95:04:64:7a:21:
8b:4f:be:c2:5f:a9:e1:33:51:51:5c:07:20:7a:61:
45:e5:a0:3e:99:99:8c:65:ad:14:c9:43:92:88:7c:
e7:48:f3:45:87:c8:df:8f:04:c8:d4:b6:3d:eb:e2:
12:da:a7:44:aa:ad:8d:70:c6:5a:55:a7:1a:66:8a:
4d:0a:a0:b5:f4:9d:5e:5b:4f:01:61:65:16:57:f7:
8e:8d:eb:7b:4a:54:4e:f6:ff:9a:7d:e6:f9:41:a3:
da:e6:0d:6e:57:64:61:76:62:41:95:df:19:a5:91:
21:12:2b:03:78:cd:45:db:aa:34:14:07:2c:bb:48:
7c:fa:42:44:cd:ac:8a:c9:6a:f4:38:c8:ec:72:0b:
25:fa:c2:bf:32:b3:b5:e7:42:64:2a:55:64:b6:c0:
5c:c8:1a:58:da:b1:6b:75:d6:93:31:85:d0:0c:92:
8c:d2:d0:f2:85:61:af:0f:b1:c2:88:8f:58:ea:54:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:2A:8E:B6:7D:64:8E:18:87:37:EF:DF:76:1B:91:8F:FD:19:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2c244aa9-dcd8-3f0e-a40d-6a328e7427ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:14:61:0f:0f:00:7f:8c:39:0d:19:97:3b:ae:ed:54:b4:07:
2a:ff:4a:1d:eb:e1:8f:db:8f:3d:6f:22:ef:76:0f:73:96:89:
6a:dc:2c:f6:29:5b:19:b5:4b:fd:b8:52:7e:31:a7:2a:4d:21:
b2:ef:c9:64:16:71:f3:1e:34:4a:a5:e7:4f:79:2e:11:b3:3a:
56:b0:93:41:e0:70:d0:eb:21:21:ef:00:80:ab:80:ff:37:90:
8f:55:0c:1a:f3:cf:ec:1c:aa:a9:34:a5:56:01:01:d3:ee:2f:
94:f4:42:24:93:2d:94:a4:48:9f:03:ad:7b:0a:29:ed:ba:ba:
91:9a:9f:12:ab:73:31:f6:4d:4b:59:e1:a3:b2:d4:2f:bb:0d:
24:18:24:39:c9:bb:fb:d5:af:72:b8:a7:dc:63:84:13:e5:eb:
a0:90:c4:cc:f8:01:70:46:d7:0d:3e:e4:a5:8b:8a:75:78:07:
7f:21:fd:3b:63:c1:97:01:76:00:d1:d1:07:9a:f1:d5:16:c6:
67:6f:5f:35:a5:2a:f8:1f:31:4e:8c:5f:bd:24:17:3f:53:32:
89:83:2d:25:69:ab:3b:d3:43:3b:e9:1f:25:4b:02:f9:04:cd:
7b:d4:d6:0f:86:6d:cc:3b:4a:e8:86:5b:88:08:bf:eb:9a:42:
5a:bc:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:56:20 2025 by rpki-client