Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/590f9370-7c9d-388b-9cf7-cf1a9a24edb7.roa
File: 590f9370-7c9d-388b-9cf7-cf1a9a24edb7.roa (raw, json)
Hash identifier: 9YMmO3sm/AAkmcHIgGPCiA001NcSGS76+TLvDLhTbe4=
Subject key identifier: 71:28:78:CE:A4:62:CF:2B:A4:1F:1E:7C:8B:0B:A8:5F:A9:8F:F4:42
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99652C195E2D58A9243A780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/590f9370-7c9d-388b-9cf7-cf1a9a24edb7.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397217
IP address blocks: 156.154.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:52:c1:95:e2:d5:8a:92:43:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=b771dd7a-e8a3-430b-8427-8dda8da7ff7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:06:0d:1b:d8:0d:d3:52:c9:76:6d:77:57:
75:e7:9e:70:55:61:7c:02:96:ac:6a:88:5d:15:a0:
a9:44:9a:df:1e:8c:c5:8d:04:8f:f0:5f:ae:e2:86:
d4:c2:17:03:e1:d1:11:4d:0a:98:a6:c3:7b:3d:5a:
da:34:77:26:88:4b:4a:82:b7:4d:9c:c5:7a:42:dc:
11:ae:8a:23:44:12:f6:e6:1e:9a:1d:49:8d:7c:d6:
b3:78:18:b9:67:82:72:20:3f:94:f3:46:c8:ec:b2:
58:c1:8f:96:30:4d:83:5e:39:9d:91:56:ef:92:2b:
d7:10:61:f9:4f:5d:c6:6b:f8:35:f4:46:06:cd:14:
72:a2:b5:c5:a2:e8:4b:38:19:50:c9:4f:c3:81:26:
4b:ae:64:6e:40:bc:e6:25:de:e2:c3:50:59:e3:c6:
2e:54:05:07:5f:dd:0e:54:5a:82:b2:ba:2d:cc:71:
6b:c2:11:5a:38:f0:28:f6:3e:cc:c1:4b:62:72:c1:
9c:85:22:e2:58:03:a5:3d:cf:e0:bb:d5:95:a7:f8:
ac:7e:e4:84:41:9f:88:37:19:cc:c9:b7:94:22:89:
54:1b:fc:f5:e5:a3:54:1f:e6:46:29:7f:ce:e3:da:
a6:a4:03:ee:76:40:e7:ac:8b:62:c9:fa:50:c5:8f:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:28:78:CE:A4:62:CF:2B:A4:1F:1E:7C:8B:0B:A8:5F:A9:8F:F4:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/590f9370-7c9d-388b-9cf7-cf1a9a24edb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:6f:43:2f:b2:3a:d1:fc:5d:67:32:ab:59:5c:3e:9c:df:63:
99:13:da:58:be:2f:c1:c5:48:31:63:a6:b1:9a:9a:85:fb:75:
17:90:5d:94:48:77:a3:16:fa:2c:46:59:67:c6:8e:07:33:b8:
1f:d2:0d:b7:dd:24:61:9a:a2:0d:0a:52:73:9e:54:7c:2a:6e:
4e:55:c1:c5:97:24:60:09:9b:83:7a:64:3d:2b:de:69:f4:00:
03:f6:71:39:aa:79:4f:ca:6f:dc:e3:14:81:78:8d:28:67:7e:
de:90:12:00:29:0b:42:34:f6:c6:44:ea:dd:98:83:df:cb:9b:
71:a6:b8:2e:4d:bd:fc:dd:97:9a:68:1f:50:83:16:eb:87:12:
62:39:4c:9d:66:4c:6a:7d:12:ca:cf:90:c5:f5:16:14:f0:58:
17:b7:87:d6:1b:51:5a:75:98:a5:57:43:77:70:4f:5e:db:d7:
16:a3:88:87:00:47:42:b9:bc:e5:ce:a2:b6:e2:58:9e:58:3b:
64:57:2c:98:e8:4a:8c:ec:92:d2:fe:fd:46:17:8c:50:78:4d:
75:10:d4:2c:e0:2d:32:d2:b5:77:56:f6:9b:22:6a:7d:bd:cc:
12:95:bb:04:6a:90:ce:d7:6a:f5:8f:e0:70:bd:62:c8:d4:fb:
b5:e8:e3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:47 2025 by rpki-client