Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89b531f9-927e-37af-bc31-c0af64aedc22.roa
File: 89b531f9-927e-37af-bc31-c0af64aedc22.roa (raw, json)
Hash identifier: onDn4nQ3E9s32eZrb11MgbZaHyUlJJ0/UTrXYzqaDSk=
Subject key identifier: E3:F4:71:6F:4D:49:2E:9D:13:6E:06:13:58:00:3B:D6:F7:D8:6F:18
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2110190C25C6C832ECD080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89b531f9-927e-37af-bc31-c0af64aedc22.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397235
IP address blocks: 156.154.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:10:19:0c:25:c6:c8:32:ec:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=71268d41-9f65-4a86-95d6-33df994af449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:7d:f2:7d:4f:3d:40:af:0e:da:7d:0b:4a:
68:26:a8:a6:b6:fc:10:ba:ed:a0:82:51:c8:f1:ec:
86:58:d3:3f:0e:75:c2:c8:4b:03:91:88:dc:f8:9f:
62:c1:9a:34:44:00:73:e2:22:19:ed:55:2f:71:cb:
1a:3a:96:f7:b2:70:ec:fa:1d:c5:04:e4:0e:fe:c4:
73:64:1d:04:4c:6e:68:4c:3e:d1:9e:34:73:1c:6b:
db:ab:ce:f8:61:58:90:9a:4c:8f:10:73:ed:2d:96:
a6:f3:c6:a8:f0:45:37:dc:49:10:19:d6:8a:a1:7a:
cb:ea:70:85:3b:9b:b9:9d:4f:04:f2:ee:c2:24:5e:
ee:2c:5e:fa:af:fa:66:04:3c:98:bc:4a:e4:25:4e:
db:73:e7:57:76:f0:19:d8:57:2f:b8:9f:91:2e:03:
8d:24:cc:f2:c8:68:a4:d0:ea:1a:a8:39:ae:91:9b:
0a:7b:b1:bb:b2:47:06:98:f9:6d:42:f8:16:27:9b:
8b:a7:f7:ab:d5:a3:74:35:42:4d:8c:07:1d:78:4e:
1a:84:e8:4e:3f:2d:6a:a0:c2:a9:92:f8:84:b5:3a:
76:98:57:eb:cd:b6:78:9e:e4:a9:68:f6:1a:a1:92:
d2:29:d4:3f:21:7e:e8:e9:fb:04:f7:22:ba:27:85:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F4:71:6F:4D:49:2E:9D:13:6E:06:13:58:00:3B:D6:F7:D8:6F:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89b531f9-927e-37af-bc31-c0af64aedc22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:72:b6:cd:39:bf:d3:3a:c8:0e:9f:a5:2b:e3:43:14:0f:7d:
8e:44:d7:66:1c:01:50:6f:79:59:3e:76:a1:52:9e:ae:18:49:
ed:6b:66:79:fc:2b:6a:d0:1a:97:5e:a3:8a:d4:43:2f:7a:de:
3e:25:6a:3d:ea:d2:b8:fa:a9:f4:5e:67:22:e5:32:36:2e:92:
96:97:2b:7e:67:13:83:43:9a:84:48:c1:fe:ef:51:ed:5c:5d:
eb:91:30:73:7a:ca:73:5f:8c:5e:c4:4c:a3:26:5f:cd:b3:df:
db:bd:70:44:fd:eb:fa:af:e7:dd:fc:ed:82:21:28:da:4c:63:
9d:96:1e:98:d1:33:fe:cc:8b:31:73:9c:9b:e6:1c:e2:20:74:
47:5c:15:41:2e:ad:f9:28:70:fd:4f:87:4d:d2:64:c1:bc:c3:
21:5b:20:f5:dd:51:d9:91:c6:a2:c0:6a:13:c8:e3:62:1b:74:
7e:86:0f:56:6b:31:b9:82:1c:00:e0:1e:70:4d:ce:b1:c8:dd:
89:98:76:dd:b4:e9:4e:eb:b1:31:3f:69:f5:a9:b6:e5:63:32:
7f:05:8d:bf:ed:f0:70:97:20:29:31:56:25:39:44:37:05:8b:
e1:4c:7a:80:49:7a:e0:44:b8:36:87:c5:d2:dd:1e:ae:a3:62:
69:1d:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:46 2025 by rpki-client