Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c218a9-c77f-3ea9-bfcc-606292d0c00b.roa
File: b4c218a9-c77f-3ea9-bfcc-606292d0c00b.roa (raw, json)
Hash identifier: OHel6HNLNi8kvPJgTTlUcFGwoWwiHfX9iv7FIeaDEtM=
Subject key identifier: 2D:AC:8A:E8:B0:B0:77:2E:1A:3D:EC:71:E1:3C:18:9F:22:65:92:5A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2106F804930BFE80864094
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c218a9-c77f-3ea9-bfcc-606292d0c00b.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397239
IP address blocks: 156.154.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:06:f8:04:93:0b:fe:80:86:40:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=c34ef062-5436-455d-beab-e9e5086df10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:32:29:d2:80:51:7e:a9:d3:98:3c:36:49:7b:
f3:77:45:a1:5e:07:dd:24:65:a1:4f:98:79:70:1c:
a0:1f:2e:27:3b:c5:27:fd:a3:37:c3:ba:2a:7d:e6:
4a:5e:4d:84:6a:34:5e:ff:47:4c:88:84:f5:0b:98:
96:98:23:f5:69:6b:86:21:7b:e8:a2:50:66:53:05:
1e:d0:3d:11:ce:7e:9b:9b:9e:12:12:be:59:24:8f:
bb:c4:f8:f9:ce:81:e2:e8:fe:3f:74:4d:8c:8b:fb:
eb:69:2b:3f:43:da:b0:92:2d:be:41:a7:11:24:ae:
97:f9:6f:63:c2:08:13:87:f2:09:88:f1:f1:fd:b7:
3c:2c:67:0b:32:7c:6b:c5:f9:c0:e9:2e:7f:c0:0e:
ca:87:81:01:26:2e:10:cb:51:9e:85:d9:c4:46:6c:
4f:7d:2e:f0:14:fa:dc:c7:05:a3:a0:6b:a8:6a:c1:
be:86:21:00:14:21:c7:f4:32:d4:11:4a:c0:5d:41:
f7:ba:7d:e8:c2:f9:39:8c:90:73:fd:96:ef:58:15:
72:de:25:82:df:72:d9:b7:0c:ee:ce:cc:0a:e3:f2:
1d:d7:7d:fd:94:1f:8f:e7:57:7b:0e:6b:91:d3:c7:
56:aa:fc:05:87:36:39:19:bb:3b:81:48:76:5d:16:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:8A:E8:B0:B0:77:2E:1A:3D:EC:71:E1:3C:18:9F:22:65:92:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c218a9-c77f-3ea9-bfcc-606292d0c00b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:03:c9:af:51:5c:ef:4d:43:cc:7c:0d:09:c2:66:4e:2c:ef:
f6:9c:83:85:03:e4:a9:25:59:24:13:cb:68:ff:b1:2e:2e:37:
21:3a:cc:42:5b:67:1f:f3:9f:dd:4e:dc:b8:bb:05:27:f8:b9:
4f:0c:7c:b7:72:85:56:7d:e9:b5:a5:62:e3:77:e7:e5:7a:3a:
9d:0a:30:c2:d0:3a:e3:b0:7f:7d:c4:f8:d0:dc:38:8b:c5:bb:
11:4e:ca:8a:70:97:8c:c5:61:0c:ac:29:dd:05:15:91:8b:1a:
64:2e:6b:c3:60:3a:77:8a:d5:74:e8:24:84:03:b2:7e:40:02:
ea:96:92:b7:a9:f5:1e:95:ef:94:c4:5d:55:67:96:e8:f8:e3:
e3:3e:c9:de:60:be:74:83:a0:d4:9e:99:cb:28:bd:1b:62:2e:
4b:89:e8:9e:05:7f:45:b7:c2:01:9d:4e:ea:78:92:17:18:24:
c7:c5:69:4c:d0:95:83:34:33:70:9f:c2:3c:81:72:c2:49:76:
ed:83:d7:43:4e:0f:00:82:07:37:37:fb:3e:7a:ac:4d:55:00:
d3:0f:1a:ff:8b:ae:58:f8:87:88:85:24:51:4a:2c:fa:76:01:
dd:92:39:a2:f3:36:da:27:a3:51:77:94:e6:01:1d:9d:73:a7:
b0:33:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:26 2025 by rpki-client