Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/669de6e1-e13e-3ccd-9b2d-a37a6b7028c2.roa
File: 669de6e1-e13e-3ccd-9b2d-a37a6b7028c2.roa (raw, json)
Hash identifier: frNiwxelD3LB5VmgKpV7EzyIlGWwscmfIbXEQ+kAFZg=
Subject key identifier: A3:C3:0A:79:7D:FF:F0:E4:E4:A9:DF:1F:71:D5:96:79:52:0C:81:44
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DE3F225F730F39164B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/669de6e1-e13e-3ccd-9b2d-a37a6b7028c2.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397240
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:de:3f:22:5f:73:0f:39:16:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=00c6fd8c-a950-49e4-8226-aee3c2e774d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:ce:9a:00:2c:1d:5b:51:4b:06:f5:51:bb:
0a:e6:de:8d:6d:db:f2:0d:73:1f:3b:7f:4e:00:27:
1a:93:d4:72:f2:fb:d9:a5:63:59:d6:74:ab:28:91:
87:23:94:f4:5b:69:d1:5b:80:3a:72:b6:ce:76:9a:
d8:8d:c5:d4:1b:14:1b:62:7c:f4:36:a4:40:28:da:
80:3a:59:80:d2:ff:fc:1d:93:5b:4b:0d:11:68:f2:
13:74:43:f1:a2:04:a4:9a:e2:f9:a6:f7:67:79:5f:
ba:55:ec:7e:78:b7:95:d7:56:07:52:35:ac:f6:20:
13:36:9a:a3:15:fb:80:6e:44:29:31:7f:49:3d:7a:
8d:06:22:2c:1b:04:1c:97:82:b1:7d:c3:c5:64:ab:
ff:0a:f2:21:bb:e6:85:56:43:cf:ca:f2:e8:05:32:
13:81:63:e9:1f:d2:a0:e3:58:b9:04:58:96:41:4c:
dc:d0:99:bf:87:1d:46:d4:cf:9f:4e:df:c0:71:b8:
04:e3:fd:21:1c:d9:93:0f:69:95:95:df:80:8c:7b:
56:2c:7a:9b:30:df:1e:be:80:d8:30:32:f3:32:cd:
6f:34:47:6a:ae:55:cf:c8:fa:bd:f0:da:ff:e1:ca:
b1:6a:7d:38:0a:df:95:3f:f2:6b:b1:6f:09:0d:43:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C3:0A:79:7D:FF:F0:E4:E4:A9:DF:1F:71:D5:96:79:52:0C:81:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/669de6e1-e13e-3ccd-9b2d-a37a6b7028c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:a7:f9:c9:85:34:02:8b:91:ff:f1:32:85:72:c3:e2:89:8c:
78:73:56:02:e0:b2:bf:89:03:77:08:a3:de:f0:32:24:0f:1f:
a5:17:d0:f5:fb:82:34:8f:e6:91:1e:a1:e9:79:c2:fc:18:3b:
77:e3:c6:f7:b7:e9:e3:71:4c:e6:b4:e1:6d:b0:2c:51:73:0a:
24:6e:ee:c1:3d:35:a0:5a:3a:4a:a9:68:90:a5:de:37:4a:73:
b9:27:bc:55:3d:de:45:90:d3:78:d1:b6:de:62:63:3b:b7:3f:
98:f2:97:6b:98:b0:82:09:8d:9b:e1:30:a2:f7:96:83:2d:c9:
cd:7f:ef:f4:e8:7e:1d:3b:1f:44:45:44:81:2f:83:2d:5c:3f:
7a:04:3c:a7:09:1c:65:38:42:2b:ac:4c:5a:e7:cf:c0:30:68:
e4:ef:77:22:de:34:f9:c9:8d:74:c1:05:9d:70:7b:06:8d:a6:
04:40:68:4d:f9:0d:26:e8:57:8c:99:18:ba:f9:b0:40:e5:34:
4c:12:39:0d:c7:eb:31:64:c1:cf:16:a8:da:c9:bb:80:d9:8b:
30:4b:a7:9c:7b:21:67:9e:cf:39:0b:06:b0:54:5e:61:76:49:
8c:ed:4f:37:36:24:f7:2f:2d:04:c1:9e:e5:ea:e7:7b:e0:9c:
ec:79:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:45 2025 by rpki-client