Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83dbafa4-0ba8-34fd-b941-e170cb669ea4.roa
File: 83dbafa4-0ba8-34fd-b941-e170cb669ea4.roa (raw, json)
Hash identifier: XKKxyg+bMbWcTotBZv6Nf93ZfYc3+A03vQx2mFgNu74=
Subject key identifier: 74:B9:32:2F:2F:2B:AF:48:4E:A5:D9:C5:89:96:84:9A:62:24:72:B0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9963F1FC97ADB7546C9B580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83dbafa4-0ba8-34fd-b941-e170cb669ea4.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397243
IP address blocks: 156.154.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:3f:1f:c9:7a:db:75:46:c9:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=3e8419cc-d6a4-4de5-81f6-b4ca35b1551a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:33:28:90:ce:d4:20:e2:28:81:6b:24:74:
50:ad:16:33:2d:e7:6a:37:e9:c6:fa:21:8e:fc:ff:
a9:dc:f3:d8:6d:3f:b1:1e:06:33:75:fb:68:86:10:
52:6a:f5:b3:e0:06:e4:52:aa:ca:0c:6d:a8:48:e9:
65:bf:ef:ed:f5:59:ac:16:2f:11:19:bb:e2:09:b9:
27:5e:41:71:64:32:25:70:13:56:e5:d4:a8:c8:ce:
4f:70:d5:c2:e8:da:1c:e8:7c:c1:9c:78:43:3a:08:
f8:a1:9a:0f:99:14:2c:9b:00:5a:d3:c6:1e:3a:02:
dd:8b:be:c7:44:db:ac:bf:9e:5a:83:4a:af:47:f1:
5b:50:c1:d8:24:c9:a4:66:f0:c8:88:88:11:eb:a1:
5c:3f:a6:57:0f:4a:b2:df:d4:87:0b:48:7f:55:ff:
d4:1e:ee:44:cd:2b:0b:0d:ca:1f:86:38:38:45:04:
66:dc:ca:93:8f:fc:c4:8d:b0:0e:01:7e:51:c8:73:
f3:84:a1:ca:f8:8f:60:2f:dc:81:a3:86:ea:48:54:
44:0e:91:f2:0d:23:37:9f:6d:24:51:9d:1c:9f:a2:
b5:ad:5a:b7:de:0e:e0:b3:b5:ab:09:2a:68:ec:a3:
36:63:fd:48:dc:e3:a5:ad:80:8b:cc:ae:58:91:f7:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B9:32:2F:2F:2B:AF:48:4E:A5:D9:C5:89:96:84:9A:62:24:72:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83dbafa4-0ba8-34fd-b941-e170cb669ea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:d1:41:eb:d8:21:87:4a:e8:18:f1:34:ba:b9:66:6e:5a:57:
23:e0:0f:d6:8c:58:bb:d1:11:46:e1:3b:1c:50:17:30:38:fe:
49:5e:86:12:5d:52:a6:15:55:8f:9f:de:a5:09:bb:a1:b8:5f:
ae:a5:2f:6f:d9:55:53:bd:b8:d0:ac:c1:34:47:62:a8:dc:10:
af:22:f5:80:15:f6:77:ca:34:42:6a:61:95:36:12:50:9f:02:
55:1d:fc:1b:7f:d2:30:18:9c:02:c8:76:e9:14:5d:5d:cb:d4:
3c:73:04:18:53:b2:c2:78:96:16:9d:d6:b6:e9:51:58:ef:5a:
22:6d:d5:48:87:1c:9d:94:42:59:e5:b0:e1:18:23:81:bb:bb:
02:3a:da:58:e0:01:03:85:bd:27:3e:2e:90:7f:af:8d:f2:53:
c5:66:c3:d3:f0:ec:91:34:73:a9:fc:00:73:a1:25:9c:d3:e5:
df:b0:ca:37:30:c3:2d:25:d7:67:d4:3e:40:45:28:22:b6:dc:
64:ff:94:ec:4d:fc:db:87:76:2b:be:76:72:91:d1:20:4d:a9:
77:12:11:d7:a9:f5:72:e8:12:1c:61:fb:85:a1:48:4a:78:9c:
15:b4:98:7e:69:ad:93:4a:59:d4:78:97:19:13:77:25:c9:b6:
bc:8d:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:36 2025 by rpki-client