Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d223d67-4ff6-3829-8e23-489d818f6110.roa
File: 5d223d67-4ff6-3829-8e23-489d818f6110.roa (raw, json)
Hash identifier: njVPMjTVquF8tLj8481XMUpJMVyoSvy1WqqdGGC5f2Q=
Subject key identifier: 68:21:BF:02:C4:B5:3F:29:F8:B6:95:17:27:FD:90:E9:18:AA:AA:3C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285849403976C731D90DD2B0597E00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d223d67-4ff6-3829-8e23-489d818f6110.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 12008
IP address blocks: 156.154.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:76:c7:31:d9:0d:d2:b0:59:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=ec6c0d91-9fa9-4320-bf28-a12be4cfbad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:91:b6:7e:b0:11:1f:5f:1d:ac:1b:75:31:
f9:53:86:4a:01:18:b1:39:a8:74:c9:93:88:00:68:
29:04:46:c8:e2:19:5c:e1:26:3f:fb:24:c4:a6:17:
b3:b1:54:87:81:79:ec:d8:20:ac:cc:b1:41:e8:9d:
d4:a5:f2:d3:e4:39:5e:69:04:d3:06:2f:9c:f1:b9:
5d:34:ea:f4:0e:d2:3d:88:e4:06:1e:9c:7e:3b:d4:
4c:b0:e1:59:90:a7:c3:c2:7b:71:bb:9e:3f:b2:e2:
79:6b:4a:1e:91:1c:ed:61:97:5e:e6:53:1e:03:26:
c4:da:02:fd:b5:fc:cc:d8:04:c4:09:85:6c:55:9c:
37:9b:89:c6:64:d6:7f:d3:b5:37:14:cf:f6:56:aa:
c9:71:f5:63:cd:f6:52:50:59:60:fc:d6:53:f4:02:
d4:01:4e:80:75:74:5a:88:a8:fa:6f:44:0a:ce:c5:
39:1c:31:8a:64:33:e6:3b:40:e1:05:4e:78:0d:fe:
71:32:a3:46:cb:35:b6:5f:79:2d:2b:eb:ac:87:d8:
36:db:5c:1d:7d:00:f5:ca:f9:b8:cc:d7:a1:18:bb:
10:67:74:e8:2a:4a:3c:17:14:27:7b:fb:5d:64:53:
d2:57:16:49:34:93:a8:bc:cb:2c:3e:1d:65:f0:ed:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:BF:02:C4:B5:3F:29:F8:B6:95:17:27:FD:90:E9:18:AA:AA:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d223d67-4ff6-3829-8e23-489d818f6110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ea:4a:b4:1a:26:17:35:37:bf:15:79:c4:cd:4b:9a:e9:fa:
87:a4:89:b6:46:8a:c5:5b:e3:c0:c4:fb:79:cc:96:25:5d:b5:
28:50:d9:dd:75:0e:b8:d5:2e:1e:13:b6:44:f9:88:18:2b:2f:
d5:fc:6e:05:b8:4e:b1:82:d5:2e:18:f3:66:d0:6f:29:00:47:
01:fb:e0:d0:4a:8c:25:68:fb:c4:04:6e:b1:2f:f5:d0:16:ee:
88:e5:7b:36:d8:46:fe:63:dd:69:85:c3:f8:28:2e:a5:eb:2c:
fe:dd:3d:e2:58:1c:1c:ca:e1:d5:82:f8:33:b4:05:b3:0b:e0:
18:4a:9b:2a:06:3b:e4:41:9d:aa:2f:19:21:3a:11:4d:57:9d:
d7:0a:8b:5c:7d:9b:a3:f7:9a:f0:2e:f8:7e:2d:56:95:0c:c0:
10:99:c3:fa:0a:82:26:01:05:7d:31:69:8c:ed:d9:e7:a0:21:
d5:8c:61:9a:a1:69:6d:6c:1a:31:45:99:35:3c:b1:a4:75:1c:
41:13:ea:11:b5:ef:6a:9b:7d:4c:b8:73:d9:09:1c:44:f7:1b:
45:4c:d2:dd:6e:87:2e:28:ae:3b:08:40:b5:1a:f0:c0:e2:84:
89:5c:66:81:24:09:f6:16:3a:00:bc:de:70:d7:44:de:e8:25:
08:59:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:28 2025 by rpki-client