Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cfe6b9e-8067-3914-aa6e-08ea05cf49f0.roa
File: 7cfe6b9e-8067-3914-aa6e-08ea05cf49f0.roa (raw, json)
Hash identifier: N7mI4UQVmVcgbJ6MkqCKnmKY34pHrcQIGw+z34hUCkU=
Subject key identifier: 76:53:A3:F8:9C:4E:0F:71:C9:4B:E3:DD:7F:56:D9:89:8A:63:29:AF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964E198397198215559D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cfe6b9e-8067-3914-aa6e-08ea05cf49f0.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397219
IP address blocks: 156.154.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:4e:19:83:97:19:82:15:55:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=2ae1e65f-ae41-496c-9018-bfff7938be28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:f9:11:cf:cd:d3:e2:7a:9b:15:0b:7c:e7:
19:55:8f:33:08:7f:8f:22:b6:0c:2b:f7:94:ff:d8:
9d:3a:82:37:b2:d4:42:18:f3:29:2d:8b:39:08:3f:
bd:c6:e7:b8:70:19:1a:98:a0:d3:fc:68:7d:07:c2:
64:10:34:8f:56:34:49:6c:f8:8d:da:d9:2c:88:b5:
32:77:47:82:95:1c:9e:e7:70:4c:0a:ba:65:84:46:
6e:63:46:a8:1e:55:5f:76:e2:55:e7:fc:5c:eb:f9:
8a:1c:c6:68:04:29:f0:ee:c2:e1:1f:b3:cc:be:de:
92:16:0f:4d:39:18:ce:91:5d:c2:8c:c7:01:0f:16:
c8:59:84:a0:6b:0d:f9:95:7e:33:ac:9e:b0:b2:a3:
39:f2:cb:55:d7:0a:3b:cb:fa:80:9d:7a:18:5e:1c:
1f:9b:cd:a9:c3:b2:9b:dd:9b:6b:cd:49:c4:e1:01:
2d:7c:35:1a:72:df:0f:23:50:8f:d3:74:bd:1e:7e:
b4:e4:85:ba:08:5c:4a:5e:e5:96:ff:f0:55:c8:3f:
1e:8b:42:cd:e7:a5:40:a7:e1:8e:20:b5:40:61:11:
bf:6f:10:36:c0:7f:6e:a8:ab:d1:be:41:a6:52:0b:
70:79:6b:8c:66:27:2d:9a:b4:50:39:fc:72:ab:68:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:53:A3:F8:9C:4E:0F:71:C9:4B:E3:DD:7F:56:D9:89:8A:63:29:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cfe6b9e-8067-3914-aa6e-08ea05cf49f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:bc:8a:37:95:41:aa:93:6a:01:f9:46:b3:bf:fb:28:1a:33:
d9:2c:4f:09:73:a2:26:3d:ba:45:0d:f3:ea:ee:f8:cf:bd:f8:
19:f4:a8:69:fb:56:aa:21:de:1c:2b:ca:80:01:0d:e0:4b:61:
67:aa:ca:ef:1d:13:07:0b:a6:02:85:ff:d0:52:b7:3c:de:84:
24:b8:16:8a:4a:3c:a8:0e:02:c1:86:7c:71:72:b1:c2:84:e7:
07:79:5e:8f:c1:c8:d7:c3:3f:ce:cc:27:a1:1b:01:e9:fe:f1:
b2:5e:68:f8:05:8b:6b:2f:00:73:04:cd:e6:f1:50:f1:c2:85:
67:a0:d2:d8:81:4a:e8:6a:eb:ec:ae:a0:44:39:9b:e3:9d:b0:
ee:c2:cf:23:a2:0c:43:f7:dc:7c:ec:af:74:67:85:c0:c2:52:
3e:1c:f1:42:c5:5f:75:58:de:2c:18:e1:b1:76:9d:eb:88:36:
ae:0d:fd:53:7b:3d:87:fa:08:a1:d4:de:2c:50:5a:1a:fb:1a:
79:64:b9:14:ee:e7:8b:6a:83:c1:7b:a3:37:9b:95:3f:db:3a:
be:0c:a2:de:b7:85:ac:b1:d7:c4:8a:90:7b:8a:5c:df:64:15:
17:8c:27:d0:f6:a1:b3:bf:f6:64:15:38:48:52:0d:04:9c:33:
75:67:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:56 2025 by rpki-client