Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b69bb10-7157-3819-ad84-747522bf29e9.roa
File: 3b69bb10-7157-3819-ad84-747522bf29e9.roa (raw, json)
Hash identifier: NG3sOtjD/YyvckTFwnaXOV+KqoYlhd69qI3kTsHkoUo=
Subject key identifier: 0E:C5:66:FA:94:F8:0A:55:E8:F9:04:BA:49:56:38:19:5F:35:0E:CD
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD211077E4CD3A1D98982720
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b69bb10-7157-3819-ad84-747522bf29e9.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397241
IP address blocks: 156.154.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:10:77:e4:cd:3a:1d:98:98:27:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=f96b8161-71ea-4464-b8e2-562d392cfdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:84:54:df:bf:fb:1e:2b:5c:92:50:90:09:
81:78:fb:15:74:b2:a9:29:d5:1e:fd:98:a4:58:c9:
5e:b0:2c:88:7c:cc:da:c6:3a:5b:24:15:92:e2:81:
e7:b1:a0:77:14:3f:8d:30:d2:01:a7:06:2b:fb:c2:
74:a7:bc:63:54:2d:1a:ef:26:7b:25:1c:d7:bc:c6:
f4:cc:74:4b:20:dd:a8:2f:78:03:70:6b:6d:4b:a5:
c0:aa:df:75:9b:49:40:ef:91:15:3e:4e:72:25:97:
d3:f2:ca:c5:40:69:ea:93:16:f0:c8:05:9d:de:28:
fd:98:be:a5:53:9e:d7:97:10:c5:fc:07:07:8f:e3:
64:50:d4:c9:36:d3:66:9e:fe:b9:e3:c4:4b:d6:63:
d7:f4:6e:98:58:38:e1:27:11:84:1d:88:ce:dd:77:
de:69:9f:00:f9:83:2f:8a:6b:7e:a9:ca:d3:21:08:
fa:8a:08:70:a1:bf:b8:50:51:47:d6:ee:47:ba:69:
53:f4:4d:ab:ff:52:4e:4a:62:7c:0f:74:51:fd:da:
a6:3f:ed:27:66:0f:2a:6e:ec:95:45:7b:dd:b1:a2:
e2:95:6b:65:11:69:8f:ed:d6:96:2b:76:98:eb:78:
de:5b:e7:33:9f:e8:11:a0:46:a6:08:1d:6d:22:4a:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:66:FA:94:F8:0A:55:E8:F9:04:BA:49:56:38:19:5F:35:0E:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b69bb10-7157-3819-ad84-747522bf29e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:72:bf:4d:0a:59:b5:68:6d:15:b3:c4:75:95:dc:bb:81:86:
c3:85:7b:4a:d8:a6:45:69:e7:fc:d7:8b:18:32:17:db:e0:cd:
ed:49:e6:f0:66:da:4e:4b:01:b2:f3:21:14:0b:ef:95:12:94:
1c:f4:94:68:c7:2a:f6:ef:b8:9f:dd:83:f7:60:6b:3e:05:2a:
bd:63:05:ff:10:cc:00:36:19:3a:73:9c:ca:74:26:71:83:14:
b2:18:ff:ee:f0:19:27:24:d2:01:0e:c9:b9:8c:d3:ef:f9:a6:
6f:e5:35:02:3b:42:1b:ab:ff:56:c3:ac:b6:aa:5f:55:21:06:
3a:f4:1b:5f:b5:ad:e7:40:82:23:4b:13:f4:7b:6c:63:76:25:
c7:24:0d:8c:a0:61:46:9b:c4:1b:f1:1b:9d:03:9c:93:bb:d8:
0e:10:39:9a:51:c2:ff:fc:be:d7:75:3b:f5:82:db:5e:d6:11:
02:ff:dd:ff:f8:e3:42:7e:21:22:71:c6:1a:ee:6e:fa:62:2e:
dd:22:82:b9:60:54:88:36:ff:8c:d5:ea:00:f9:3f:57:a3:42:
fb:91:14:4b:a4:7b:80:4f:7f:a1:20:eb:47:89:43:a6:6f:1f:
fe:82:06:3d:da:ed:3c:26:11:42:5d:4a:7d:7b:3d:0a:26:ed:
10:be:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:08 2025 by rpki-client