Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4fb7375-3186-39e6-86fa-92ebc5b6f9e4.roa
File: a4fb7375-3186-39e6-86fa-92ebc5b6f9e4.roa (raw, json)
Hash identifier: m5PvuXoYs14ks95/dkXKNTQW6U4/AEzv7bFlW1p7/I4=
Subject key identifier: 88:25:77:9C:2B:AF:2A:2E:F3:65:F4:E8:C6:39:34:C7:FF:62:96:A9
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210DE42D9E6B85BAEFE880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4fb7375-3186-39e6-86fa-92ebc5b6f9e4.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397228
IP address blocks: 156.154.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0d:e4:2d:9e:6b:85:ba:ef:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=5ecc1c36-f9ef-41cc-b4e4-99623e5030e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:4a:f0:80:86:df:cb:ab:00:f7:06:3f:fa:
f8:a9:7e:9f:22:45:0b:ad:5b:61:0a:2f:0e:c7:96:
b2:b4:aa:52:5f:cd:7e:31:96:59:df:b4:e7:a3:e4:
3b:7e:f2:d8:91:99:1b:83:f9:ad:ee:9a:9f:38:3c:
63:d2:ab:2f:a9:6d:c6:ff:49:f1:27:47:d8:27:64:
fb:e9:cc:31:34:5e:84:80:6f:42:4a:c4:ee:f8:9c:
e1:a4:0d:53:1d:7e:f7:00:ce:78:e5:80:33:ee:7e:
8a:c2:84:bb:03:85:de:cd:df:c7:28:5c:50:56:f8:
74:db:7a:ff:08:55:96:18:89:db:8b:ab:53:54:5f:
64:47:50:48:d2:16:62:66:3d:54:f0:a6:15:1f:a8:
fe:1c:20:6d:f9:bb:68:3d:46:17:5d:bd:06:d7:3e:
df:16:d6:e8:0a:95:1a:2f:f3:26:42:c4:6d:00:d9:
9e:ab:0d:9d:c2:e8:f5:7e:5d:20:d9:d4:cf:78:3d:
72:4f:d1:54:23:05:13:77:80:5b:61:a4:73:95:bc:
7f:db:1e:7a:d3:f8:1f:94:10:f1:6b:74:bd:10:2d:
7c:67:59:5e:f7:f1:3a:a5:dd:9d:87:3e:a6:19:b8:
c1:60:3d:87:a4:d1:81:ed:a0:c2:30:10:7d:de:6c:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:77:9C:2B:AF:2A:2E:F3:65:F4:E8:C6:39:34:C7:FF:62:96:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4fb7375-3186-39e6-86fa-92ebc5b6f9e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:31:ee:21:80:fd:58:8f:61:5b:7a:d1:90:ee:46:68:c3:59:
b5:6f:52:91:10:1d:e2:90:bf:26:54:86:0a:15:9b:0a:51:ec:
4c:01:05:ff:13:6c:da:79:97:af:08:1d:fe:d2:5e:15:fd:91:
14:c5:46:8c:69:24:20:21:79:b7:49:f3:bf:3b:07:75:10:b9:
d5:3b:e7:ad:bf:15:14:1a:59:ee:d5:d1:ae:7b:ca:0a:68:84:
87:30:fc:cb:b6:a0:fb:13:e8:fd:c4:a2:a6:ab:a3:e8:2e:1d:
07:ba:36:5d:12:60:5f:af:92:85:3f:7b:e3:19:b8:b7:90:08:
01:e9:28:78:1e:99:57:9d:2f:21:b6:8f:08:26:96:e9:47:7c:
f3:d6:7b:4a:77:93:a2:56:9f:0d:79:06:8b:1c:1f:20:d0:69:
e1:1b:83:37:86:89:dc:2b:b6:d9:79:cf:6e:c9:bc:57:13:6f:
94:3c:65:86:d0:a2:87:3e:ba:80:c4:9b:73:07:a7:8c:ec:60:
66:8c:ea:57:53:ca:85:66:f2:7a:8f:63:d3:30:d3:3e:cc:4f:
ee:88:b2:81:aa:2f:3b:59:36:8e:b3:49:53:e3:19:01:74:07:
da:9e:ef:db:5f:7e:48:8c:0e:b3:7f:54:fc:a9:33:97:51:bb:
49:20:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:46:00 2025 by rpki-client