Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ebc5940-a56a-3e76-aa3e-542e4342cadc.roa
File: 4ebc5940-a56a-3e76-aa3e-542e4342cadc.roa (raw, json)
Hash identifier: sqIv46gxMCOHyaviBGD9uOXrhkm4FRtv99vk1DhhAno=
Subject key identifier: 9C:AE:A7:6D:28:FC:E3:56:B6:B8:48:C9:69:3A:FD:A9:5D:24:21:31
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DE647EFD8F30F95A9AC8
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ebc5940-a56a-3e76-aa3e-542e4342cadc.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397243
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:de:64:7e:fd:8f:30:f9:5a:9a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=42ea6579-9736-4ba1-9e09-f773887d3b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:0d:eb:3a:52:88:33:97:65:5b:57:01:4c:
86:8a:2c:ab:fd:1b:76:8d:b6:ef:7e:42:c5:d3:e5:
1d:b0:46:cf:d8:69:7c:45:68:bf:68:b1:00:ba:58:
09:8f:d4:cf:93:f7:cb:e9:57:a3:64:aa:c6:a8:79:
a9:37:41:ae:67:d3:49:98:34:6b:9d:34:09:68:d8:
58:23:20:20:18:73:9f:9a:33:c1:1a:28:42:12:eb:
89:df:1e:da:b9:5a:83:00:c2:00:0f:d7:82:b9:7d:
f0:09:8a:44:b1:f8:4d:01:71:1a:7d:1d:06:b2:0f:
2d:20:ff:e7:80:ec:a4:df:c0:b1:09:77:b5:05:d3:
1b:2e:24:6e:2c:b2:0d:a9:bb:b9:bd:48:4a:69:aa:
64:cc:c3:2a:83:8e:a2:a6:98:78:b9:c2:be:80:91:
4d:54:ee:fb:46:1c:93:3d:95:38:92:ea:83:05:2b:
90:89:bc:fc:ec:b0:27:92:3a:2a:9b:e9:0d:f9:14:
84:47:37:db:32:db:a7:79:4e:19:4f:cf:04:37:d5:
cd:0c:c1:12:cc:b5:4b:9f:c3:f6:63:c5:d1:5c:64:
61:98:08:a5:c5:c4:c4:0a:d7:54:b7:d2:7d:09:ed:
fd:f2:58:72:2b:ed:33:58:76:99:18:83:63:cf:ec:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AE:A7:6D:28:FC:E3:56:B6:B8:48:C9:69:3A:FD:A9:5D:24:21:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ebc5940-a56a-3e76-aa3e-542e4342cadc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:38:2d:38:2d:d9:df:f2:8d:92:0d:94:cf:e0:e1:9f:bc:70:
86:43:a4:e9:25:a5:57:c2:fd:4e:51:c3:87:82:5e:6f:90:af:
aa:be:52:57:91:7d:c5:c9:17:d0:7c:13:87:c2:d3:bc:f5:75:
94:76:fd:61:85:81:7a:6f:10:93:17:2b:13:cb:af:89:44:26:
49:5b:00:dc:9d:6b:85:32:3d:c1:72:25:dd:ac:f8:14:25:39:
8f:d4:b8:f7:c7:4e:4c:ac:76:32:ee:53:61:7b:80:80:2c:db:
23:ae:41:d0:61:b5:92:53:60:db:ba:6d:a7:d2:1f:e3:4a:16:
a1:eb:32:41:db:ed:ce:3c:ca:7a:8a:98:e6:ee:f4:a0:4e:06:
c2:6a:a9:b5:c2:3d:1b:7c:6c:c2:d0:ab:7e:49:c0:1b:23:31:
b1:b3:74:bf:27:af:aa:8f:70:0f:d5:b5:bb:f1:22:ed:bb:67:
3c:f9:d4:41:5d:67:b6:04:1d:1b:9f:e1:82:18:27:71:d1:d7:
62:87:5a:10:78:92:cf:47:8f:91:da:cd:33:bd:68:8a:91:9a:
ff:51:0b:06:0e:a0:ab:be:03:fa:f0:d0:76:2b:36:52:98:dc:
05:97:71:18:29:5c:88:62:08:e7:a8:04:f1:be:04:2b:15:8a:
63:18:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:38:53 2025 by rpki-client