Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f779d3f-23ae-3fd3-847c-34fc5dee3cfa.roa
File: 8f779d3f-23ae-3fd3-847c-34fc5dee3cfa.roa (raw, json)
Hash identifier: u2Nu2tY1+LO8YyldR6NF9suet7OimtmauTTLGyCNZUs=
Subject key identifier: 85:2E:A9:2F:BA:C7:C9:21:FD:8E:90:19:D1:0F:91:8E:3D:D0:41:D3
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD21065C75D4730BC0F1AB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f779d3f-23ae-3fd3-847c-34fc5dee3cfa.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397228
IP address blocks: 156.154.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:06:5c:75:d4:73:0b:c0:f1:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=492a18c9-8225-4c81-bb19-764b2b44b63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:a8:24:13:5e:4c:82:7a:e3:c5:6f:76:9d:
ce:73:26:b4:ef:43:fe:dc:1b:c6:b0:8b:36:79:18:
5f:e7:7c:7b:6f:64:5a:a4:03:7a:01:56:2e:77:31:
69:09:5c:86:f9:4c:51:a9:ee:ef:f7:df:4a:70:78:
36:de:1b:fd:cb:75:f6:61:30:1f:47:28:96:c9:06:
8d:75:c7:1a:6b:f1:ec:d8:5e:fc:f5:f1:7f:ab:7b:
44:21:21:22:ac:da:67:03:4c:ce:01:61:88:c8:54:
67:10:9b:98:80:e0:80:25:d8:0a:45:c2:9f:65:d3:
3a:0a:53:54:05:6b:47:55:ac:6a:36:2f:b8:07:eb:
28:64:f9:13:41:dc:e5:02:5a:10:2c:16:b9:f3:b5:
06:c0:ea:ad:50:46:8b:7a:d9:17:61:ce:26:3b:bf:
19:b6:3f:e7:fd:dc:56:8a:ae:16:df:12:53:85:78:
af:77:ab:1f:65:7a:d4:3c:61:53:93:09:3c:96:bb:
ed:28:c7:f9:94:f1:42:f6:c3:2f:22:95:85:f8:1d:
5d:21:dd:a6:1e:92:a9:4f:1f:b9:0f:f9:c5:f0:1d:
03:2c:ea:5c:2d:27:9d:1f:9b:90:81:86:7f:9f:6c:
27:ae:25:84:42:2d:63:46:be:00:43:97:38:bd:96:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2E:A9:2F:BA:C7:C9:21:FD:8E:90:19:D1:0F:91:8E:3D:D0:41:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f779d3f-23ae-3fd3-847c-34fc5dee3cfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:1a:b9:c5:4c:e5:fb:b7:67:28:6a:7d:63:7f:48:47:ad:61:
48:71:f7:69:c3:d8:33:c1:f6:7a:16:71:d0:ac:30:7d:f4:e9:
64:a8:41:0e:5d:13:38:24:4c:a8:03:89:d2:b8:d2:78:c4:01:
f6:2b:f9:a3:66:22:f6:73:12:25:7d:ce:44:0d:07:00:3f:70:
f7:96:4f:6d:c0:7e:f7:35:d5:06:77:df:c7:21:a5:37:6b:15:
d7:7f:f7:63:40:61:75:1a:42:e5:c5:88:2b:6f:92:9a:b9:8d:
f2:56:b3:85:6c:c1:42:b4:7b:86:3c:f2:12:8e:9f:73:d9:43:
5f:d0:74:d5:6d:4b:54:ae:39:9d:89:1b:53:43:a3:ae:08:da:
28:9e:c3:f2:a4:49:d0:49:9b:cc:26:59:25:0c:4f:f3:12:eb:
d3:9b:6c:8b:94:99:4d:ad:ee:33:d5:6d:e8:22:32:05:4c:db:
4d:94:47:5e:60:24:f1:8b:7c:e6:20:bb:c8:03:b1:ca:74:7f:
e3:63:ad:dd:28:30:20:3d:51:da:14:9b:19:6d:11:15:19:c0:
83:66:33:b5:bd:e6:bc:b8:3e:25:03:ae:5c:d9:36:de:b9:cf:
33:90:9e:f3:b4:f7:19:20:e5:ba:22:40:14:33:63:ed:ef:54:
8d:9b:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:03 2025 by rpki-client