Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/734b32df-f21b-3ffb-8cfc-4d80ae68f217.roa
File: 734b32df-f21b-3ffb-8cfc-4d80ae68f217.roa (raw, json)
Hash identifier: j1I99MKwmoEBSUWWlSLi+VyamvBn5GyBoZUV2JgQmq4=
Subject key identifier: 1D:D7:40:B8:5B:18:6D:E2:80:CC:ED:46:2B:74:1B:42:6C:D5:32:06
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965B3630745C5F04EEA580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/734b32df-f21b-3ffb-8cfc-4d80ae68f217.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397227
IP address blocks: 156.154.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5b:36:30:74:5c:5f:04:ee:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=28ff3245-b5d1-4896-839c-a01dea085dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:c0:e5:62:4c:15:9b:34:86:50:dc:36:90:
24:4d:c9:e7:6d:03:80:11:f6:c1:c8:68:95:7c:08:
2f:5b:55:e3:86:03:fc:52:b2:f3:76:a2:96:52:22:
df:2f:18:70:d8:9f:f7:76:43:8e:6f:d6:29:9b:f4:
2e:28:2f:c1:a2:11:e3:b1:9b:7c:6c:db:6b:f6:87:
6b:79:f1:7f:53:89:1b:7a:b3:a7:48:af:48:88:92:
c3:bc:bc:a7:eb:d3:dc:cb:16:6d:04:16:ac:95:f1:
1b:72:f7:89:e8:76:e7:ff:03:ad:00:cf:4c:0d:2d:
47:cc:e6:31:cd:96:1e:e5:c2:02:c7:21:ed:9e:e5:
35:bf:29:03:cb:aa:41:02:a6:f5:22:07:84:95:e2:
91:02:29:eb:8a:a6:e2:bf:b5:f2:01:78:40:a0:39:
af:7a:09:ac:1a:2e:64:04:18:09:25:c0:a2:d4:20:
51:f7:38:a7:bb:0a:cf:72:0c:a0:89:2b:95:09:b6:
60:bd:40:51:16:aa:4f:82:63:1f:03:59:9c:1e:aa:
83:d6:7c:fe:12:8b:c1:4c:56:54:b7:bc:23:13:86:
c8:9e:9b:1c:81:41:6b:a7:c9:20:0b:b6:86:fd:c6:
58:39:19:20:6a:9b:8d:9b:1a:03:66:1c:99:0c:cd:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:40:B8:5B:18:6D:E2:80:CC:ED:46:2B:74:1B:42:6C:D5:32:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/734b32df-f21b-3ffb-8cfc-4d80ae68f217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f1:f3:25:82:69:5a:de:8f:f0:90:37:e0:87:22:2f:51:55:
8b:a9:d6:75:73:ca:13:2d:4e:5e:f4:31:99:45:39:1c:e3:5c:
c0:df:fc:ad:d0:f5:72:07:9b:a8:44:1c:79:4b:e0:50:46:47:
e6:c4:08:69:cd:e6:66:14:df:0a:7a:9d:44:c7:f9:b7:82:e1:
30:76:ad:b7:cd:0a:69:6a:c7:29:2d:87:ab:9f:d0:62:57:a6:
17:59:a5:ea:a5:f9:68:45:af:55:30:cf:d3:06:77:34:21:81:
09:d9:a8:0c:da:de:21:18:6b:89:1d:f0:db:cb:74:0d:62:48:
12:6b:34:26:b2:82:c9:a4:50:1d:bc:32:22:32:41:38:fd:d2:
aa:72:7d:2f:74:2b:78:53:d2:a7:3a:70:d6:b6:1e:4f:91:38:
b5:87:c3:09:29:d7:39:9b:fe:8d:ba:dd:69:b1:a2:e8:71:bd:
40:13:c3:84:6a:04:17:24:86:92:05:32:e8:18:a2:03:76:f4:
1c:81:44:fe:09:77:f4:96:b5:f7:e7:f6:55:fa:de:3f:fa:45:
86:2e:e4:30:c3:ec:48:80:06:2d:cd:04:36:8c:ed:a7:9f:95:
4e:f9:eb:5f:2e:db:2c:03:e8:5f:ac:e1:e8:8d:33:f7:58:eb:
35:ff:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:43 2025 by rpki-client