Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8fb80061-b6db-35b1-8bba-ce0ee758f56c.roa
File: 8fb80061-b6db-35b1-8bba-ce0ee758f56c.roa (raw, json)
Hash identifier: TlxLXO1xjY1jCRF6yQmAouR4SCzvzNs0WznCw4MJgJo=
Subject key identifier: DD:04:03:86:B9:13:74:B4:CF:73:19:26:61:DA:56:4D:28:C8:55:38
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9963E2C5FBF9F1256D48780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8fb80061-b6db-35b1-8bba-ce0ee758f56c.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397228
IP address blocks: 156.154.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:3e:2c:5f:bf:9f:12:56:d4:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=5fe20be4-a7d1-4fa6-bc34-9248b4730360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:99:fe:f2:4f:b2:9e:13:f5:5f:e2:a3:c0:
1e:7d:d5:93:61:ec:95:d6:56:94:df:e1:b0:9c:95:
e0:26:4f:7c:b5:0b:c5:45:e7:19:e7:78:ab:e9:36:
cf:36:30:1c:f6:d7:ec:2b:6c:76:8f:66:f4:81:e9:
68:c5:c6:c7:bf:e7:c8:fd:5b:22:d5:68:10:d1:c9:
3d:5e:03:b8:26:b2:cc:ad:71:41:2b:ba:5f:7c:a2:
70:00:62:0f:13:2c:96:96:a1:ec:71:a6:3b:c7:b1:
b4:5a:d7:d4:67:85:42:c7:88:33:2a:54:3b:46:79:
0d:f2:49:08:31:c0:b7:91:fe:7d:48:ff:02:bf:5c:
ba:5b:de:d0:b7:5b:5d:ae:77:2d:80:97:75:cc:2f:
23:66:c9:64:fd:d6:fe:c9:57:39:f0:f0:09:ac:c9:
f8:96:e7:e0:17:47:85:11:1a:2f:e0:cf:b1:17:78:
8b:3b:90:3a:03:e1:17:d4:db:3b:b1:84:2f:58:d8:
96:2b:3a:72:32:96:a0:4c:b8:19:f8:3f:26:56:8f:
95:46:3d:10:d1:28:4f:c3:2a:c4:c6:9b:40:f6:ab:
1d:04:1e:29:4b:ca:e6:eb:8a:57:8d:2c:fa:16:41:
73:73:8d:3d:75:4e:88:88:3f:79:f3:33:20:69:17:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:03:86:B9:13:74:B4:CF:73:19:26:61:DA:56:4D:28:C8:55:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8fb80061-b6db-35b1-8bba-ce0ee758f56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:eb:c9:a0:39:ff:b1:14:ef:06:eb:21:e2:e4:bd:cc:4a:0d:
3a:5d:7d:e8:db:35:b7:96:48:19:69:ee:d0:06:33:bf:81:01:
d6:7d:f6:d3:d1:81:90:c7:28:b5:90:0e:dd:ac:8e:8b:56:25:
95:a4:94:13:f9:07:f4:e5:c3:d4:89:55:c8:83:3f:49:5b:3a:
25:ca:fb:9d:8d:61:05:88:32:43:2f:a2:d4:1e:5c:62:07:46:
e3:b8:b1:0e:7f:21:5b:a3:fd:b5:46:bf:ac:f6:b9:39:a1:b4:
61:b8:e0:90:b7:4d:de:a0:e7:d5:f2:47:fd:3e:5c:a1:c4:a0:
7e:45:48:72:9e:6f:2a:8f:92:35:b6:c1:f7:88:e3:c1:b6:e4:
78:95:ad:62:8c:78:40:37:e3:67:5f:b5:18:02:d3:0f:6e:b7:
a0:17:d1:01:d8:bb:d5:ee:41:07:d6:ae:ac:df:24:e3:5a:84:
d8:4b:38:f9:b2:bb:06:a1:79:be:8e:b2:92:62:1d:af:01:6a:
16:3e:4b:3a:70:f3:0f:9e:c2:7a:47:88:f8:10:f8:cb:37:8c:
a0:6c:0c:80:9b:59:7c:39:69:1a:86:ab:95:77:f3:c3:88:8a:
9a:ad:bc:3a:72:03:d2:87:f6:43:84:4b:48:0e:26:28:f4:da:
4c:5c:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:35:05 2025 by rpki-client