Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5ba2aca6-dd05-3219-ba77-de778705e957.roa
File: 5ba2aca6-dd05-3219-ba77-de778705e957.roa (raw, json)
Hash identifier: hUnK4wOwBcWUtfWBVcFHIDzVA1edy0lJqQmkHERBpcM=
Subject key identifier: 73:9B:B5:66:C5:3E:32:62:B4:C2:C8:25:4C:81:A5:D9:68:F8:85:26
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9963B0F81E35A3C7A056000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5ba2aca6-dd05-3219-ba77-de778705e957.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397238
IP address blocks: 156.154.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:3b:0f:81:e3:5a:3c:7a:05:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=c1e5e55d-375d-4b91-b989-f81a261bb749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:02:8a:2e:ea:93:4c:31:08:ae:39:6d:46:
45:cc:b0:63:5e:f7:2a:13:56:ff:a1:93:04:84:ae:
10:fd:91:ea:76:68:b0:dd:ca:85:3e:c6:98:c9:b8:
ea:41:c5:28:98:0c:ea:61:bd:38:78:df:18:6d:94:
84:4d:e9:91:c6:7b:4e:be:a2:da:06:88:a7:16:69:
c4:28:ca:1b:f7:ce:56:0f:fc:90:8c:d1:47:54:d5:
43:c7:e1:de:8d:9a:3e:2c:0a:d6:ac:f4:31:52:ac:
43:67:eb:de:b1:43:0a:5c:8b:b2:b0:5b:4f:d2:fd:
a8:d9:ce:95:4f:b1:17:f0:4a:36:1e:07:d0:a5:1e:
6a:16:0d:21:8f:06:f0:39:ce:f8:fc:e1:81:d0:64:
8c:78:12:df:44:aa:94:ad:41:d0:99:11:e6:c4:45:
44:0f:31:e0:e5:bd:00:ca:85:81:d7:23:d3:63:5b:
7c:47:fa:b5:8c:14:fb:52:ca:5b:36:75:45:97:d6:
94:10:41:62:ab:3c:bc:9f:09:d9:b3:40:8d:cf:53:
00:b9:c7:81:77:36:bc:a2:43:39:fc:ff:30:d7:c9:
61:1b:87:43:be:53:3d:97:0c:7c:47:be:9a:37:26:
4d:f2:25:e5:cf:18:f1:9c:1f:a5:de:57:5f:e0:48:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:B5:66:C5:3E:32:62:B4:C2:C8:25:4C:81:A5:D9:68:F8:85:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5ba2aca6-dd05-3219-ba77-de778705e957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:5d:c1:ad:79:e8:8b:bb:00:ae:47:cf:a0:6c:1b:62:46:ec:
0a:eb:59:6e:83:e9:e2:8f:c6:8c:8f:68:1c:e7:8c:b6:fb:71:
14:ef:3f:e2:50:4a:60:ca:f5:1c:fa:9a:2c:7e:fb:0d:3f:f9:
c0:0d:32:81:df:7f:9d:14:0e:32:a8:9b:15:09:44:a0:6b:d1:
e1:a1:d4:5f:62:16:22:9b:ba:89:98:e8:70:8c:75:7e:1d:ee:
e6:3f:f5:0c:94:3b:a7:f3:c4:1c:dd:5c:d5:2b:44:ff:06:5d:
f2:a4:13:36:69:9d:96:26:fe:3d:d4:bf:d1:0d:b8:79:f3:e9:
2b:5d:dd:57:a8:3d:07:5b:95:f2:3d:87:4e:a8:4b:d3:b0:de:
d0:ad:c4:b1:84:b3:f2:b1:c7:1f:da:9b:ce:1e:1e:33:ad:25:
c3:11:1b:d6:13:73:fe:52:6c:6f:22:d6:88:f0:35:4f:88:10:
6a:f7:94:a5:95:88:de:35:77:4d:26:58:90:af:26:ab:74:6b:
68:11:06:64:01:a7:0d:b5:df:79:75:25:ac:47:93:3a:c7:7b:
34:9d:ca:a2:72:1c:7c:14:6b:22:89:75:32:ce:1b:3e:b9:f7:
b9:fe:04:9c:26:91:97:af:c8:d3:6a:d2:2c:8c:9f:1e:0b:9a:
a5:51:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:38 2025 by rpki-client