Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85f39f23-5bb4-3406-88b1-ce4d6102b2f6.roa
File: 85f39f23-5bb4-3406-88b1-ce4d6102b2f6.roa (raw, json)
Hash identifier: k6pS+JNPBLm/TsJriGbIbBdzwPJU+fzAKCSFeh/2Qxk=
Subject key identifier: A8:BD:3B:F1:16:15:ED:6E:5B:32:6D:2A:5A:A9:89:A2:E5:97:3B:C4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20FF894730D71FD3F37900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85f39f23-5bb4-3406-88b1-ce4d6102b2f6.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397243
IP address blocks: 156.154.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ff:89:47:30:d7:1f:d3:f3:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=c4fc8343-514a-4321-b0ba-f4a7c2e49421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:4b:2a:63:bc:78:31:a9:75:1a:6f:f1:46:
f1:b9:d7:a6:17:82:de:12:1e:b4:0f:2e:1b:4a:ca:
67:f0:00:9b:e1:d4:92:3e:d5:63:9c:13:f6:8c:f4:
73:9b:58:81:85:be:67:c2:2a:78:8e:07:50:b1:56:
ed:ab:18:6f:8a:1c:7a:8b:bb:6a:05:b5:6d:bb:74:
53:8b:1d:de:36:83:00:ac:6d:e2:7f:b8:f5:ac:0c:
5b:95:2e:da:5c:3e:5b:4f:24:c7:c1:9f:47:38:2d:
66:f1:5e:84:f3:de:a9:d3:18:81:b4:57:92:d8:03:
7c:e4:9a:1c:72:89:54:7d:c5:c0:29:89:d5:2d:f0:
ed:5b:7d:d3:d8:14:e1:80:6d:b4:6a:6e:68:cb:48:
de:11:5c:b9:b1:e1:e3:6f:80:da:c4:d2:99:4f:8b:
05:98:82:7a:c4:3e:2c:a8:7e:dd:9f:05:4d:15:f0:
ce:51:ee:13:4f:b3:7d:32:07:22:b7:9e:dd:9f:8c:
59:6b:3c:cc:4f:b8:43:65:18:6e:42:29:6a:a5:fa:
09:09:30:d7:1b:85:17:b8:8c:39:35:89:7a:b9:6f:
49:5c:d8:f8:54:1e:5c:33:de:b9:a1:ed:5b:76:49:
14:c1:6c:09:2b:0d:ef:1f:bb:63:99:24:c2:e9:26:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BD:3B:F1:16:15:ED:6E:5B:32:6D:2A:5A:A9:89:A2:E5:97:3B:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85f39f23-5bb4-3406-88b1-ce4d6102b2f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a9:73:e4:79:c8:ee:37:d8:03:41:89:b1:ee:8e:e4:bf:10:
05:33:1e:c9:d8:74:d8:de:13:9b:86:8b:d5:9e:f8:8c:73:59:
67:f3:da:cd:0d:04:87:89:40:5b:8e:9e:01:52:cd:44:21:b7:
d7:e2:16:1f:c5:de:c5:b8:76:ce:b4:cb:7e:e5:1e:08:5a:61:
8b:b0:15:40:27:e3:d2:c6:78:33:cf:fe:af:3f:84:6e:03:fb:
e4:25:d3:3a:36:42:2a:a9:16:48:9d:7b:34:0b:db:e0:03:99:
76:90:a8:2d:bb:21:d5:42:38:c4:a9:c6:24:70:8d:c8:f9:2f:
73:fe:d8:75:ee:3a:c8:5f:52:1a:17:68:94:d8:50:58:7a:a3:
10:f2:fc:5d:a1:50:b8:97:27:9c:a4:18:8d:44:0e:7d:c0:df:
af:ed:f4:f7:5a:cf:a4:12:29:22:5a:03:7e:02:22:de:74:95:
db:27:ba:df:a2:b4:a4:45:9e:cc:11:4b:31:9a:a4:6b:f7:97:
d4:5f:94:2f:01:17:5f:ea:11:2b:d5:97:35:40:75:52:3d:c0:
aa:0e:cf:89:e2:9f:4a:25:b1:e1:79:b9:e2:7d:31:80:5c:38:
e3:ec:0b:ee:99:af:7b:9e:07:e1:e1:28:f6:ca:0d:a3:b5:bd:
f5:1e:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:35 2025 by rpki-client