Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/740cac85-c418-39da-9fd2-41e77ee91e2c.roa
File: 740cac85-c418-39da-9fd2-41e77ee91e2c.roa (raw, json)
Hash identifier: atrMWVm8qhtCE64gJFRL4hBvUsuTEk75pRUYl9ygKKE=
Subject key identifier: F1:00:34:EA:72:0D:3C:34:AC:0A:66:EF:74:B9:6A:D1:19:9F:B9:BE
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB6B2D86964E94D64E0B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/740cac85-c418-39da-9fd2-41e77ee91e2c.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397224
IP address blocks: 156.154.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:6b:2d:86:96:4e:94:d6:4e:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=678d74d4-e4be-4f9a-8df7-11f1440a5e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:7d:87:8b:82:b5:34:f9:07:6f:d6:f9:f6:
3b:ea:55:49:c6:9d:68:8c:c6:99:39:ab:e9:aa:b8:
a0:af:11:4c:b8:54:77:9e:41:7f:68:75:bd:96:46:
dd:58:78:70:b7:02:c9:66:39:82:89:a9:e1:30:c2:
14:05:19:fe:e8:cd:39:c8:3f:b1:62:c0:fe:cc:b8:
21:7c:de:a6:ee:4a:6a:f7:5f:cf:b8:e3:52:2a:22:
9f:e8:a3:84:cd:7c:f9:0e:1c:62:96:de:cf:b2:31:
88:3d:7b:fc:c0:7e:4e:b2:15:b9:e1:46:5d:79:da:
92:1e:3f:8d:46:c1:9e:06:b1:fa:f1:fa:04:3e:a6:
4e:96:49:b8:31:74:9a:af:7f:51:d0:e1:b6:aa:68:
db:ef:b9:a8:f6:2c:82:bb:cb:6f:9a:93:c0:00:77:
a6:55:21:24:8d:22:36:c0:19:06:bb:54:a1:05:7e:
67:b3:86:f4:70:cc:36:4b:04:1f:d6:5c:f9:d7:b4:
3e:f4:ac:87:f3:af:4f:f3:f0:5b:8c:72:1d:09:2f:
87:79:90:3a:9f:09:67:4d:f4:5d:40:0a:5a:f7:fb:
e5:4e:90:74:c1:73:b0:5e:47:6c:48:e6:f2:eb:cf:
14:38:c0:b6:9d:0c:e6:0f:3a:89:ca:ab:fc:4d:fe:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:00:34:EA:72:0D:3C:34:AC:0A:66:EF:74:B9:6A:D1:19:9F:B9:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/740cac85-c418-39da-9fd2-41e77ee91e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f9:4d:3d:79:b4:70:58:9d:45:d5:ff:97:12:2b:eb:c3:d1:
b8:d9:85:f0:7c:e9:2d:30:b4:ae:61:73:a0:d2:3d:3b:29:59:
bd:40:27:3c:34:bb:65:fc:d8:e9:c1:3a:f5:62:c7:39:71:18:
04:e3:e6:f2:d2:32:79:54:75:43:c7:da:83:17:c9:43:de:c4:
be:a2:fa:8c:ab:a3:6e:96:d5:a2:26:d3:4f:18:f1:bc:5a:2d:
3c:30:4a:a6:c7:53:fc:1f:27:a0:f1:1a:fc:7d:67:41:d6:dc:
46:c2:d2:b0:78:b4:78:ee:c5:46:6c:09:c9:33:76:d4:2b:9c:
24:17:8c:ce:d2:cc:22:a0:8e:48:85:f7:d0:a8:90:26:69:e9:
d3:94:63:2e:a2:33:88:d2:3b:95:4a:7c:c0:20:f6:bf:a8:c7:
da:53:9f:c0:b7:31:a3:2d:b4:fc:bf:f6:ec:f2:ac:a0:2a:78:
f5:59:71:54:76:b1:e9:45:3b:c0:a1:9c:74:9d:ef:1d:bb:55:
7e:e6:a3:d7:f5:17:18:e3:9f:57:1f:fe:a4:8c:d4:5f:3d:5a:
bd:cf:f0:6a:fe:a2:a9:d5:d3:7e:68:30:48:16:21:7d:7c:ea:
59:77:3b:8b:a4:a8:a9:c5:29:cb:0e:e4:ed:d4:7d:53:ec:2f:
66:51:8c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:44:59 2025 by rpki-client