Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/baa26dfb-9b49-3aec-8eb9-0f9b25c38749.roa
File: baa26dfb-9b49-3aec-8eb9-0f9b25c38749.roa (raw, json)
Hash identifier: J2tFStwNFun+Y75KIwk+KctKYz7kuOhsREuZxH2aNXM=
Subject key identifier: 4A:71:16:24:34:67:7F:E1:8F:7E:B6:4C:7E:2F:33:73:26:EB:83:C3
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20EABB1A9BB68C8CFB9770
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/baa26dfb-9b49-3aec-8eb9-0f9b25c38749.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397237
IP address blocks: 156.154.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ea:bb:1a:9b:b6:8c:8c:fb:97:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=f5b05697-9bc5-4e1d-878f-5b0200f3852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:48:8d:24:b4:ca:9a:05:9d:88:33:76:df:
af:60:97:e3:60:1e:21:47:b6:33:9b:b7:3c:cc:e7:
8a:0a:54:4c:95:a7:f2:93:e5:a0:64:7c:c4:50:4e:
86:ce:c3:73:27:d4:6c:01:38:ae:24:ef:0e:6a:f2:
83:20:54:e7:0c:79:e2:e0:bc:4a:e2:91:03:95:b7:
75:a9:0d:00:c5:16:63:c1:bf:eb:47:05:ec:65:aa:
7e:4f:3f:8b:09:cb:67:b7:55:bd:57:65:38:d8:7c:
01:c7:fc:10:9f:15:6f:28:00:38:6b:d7:2b:45:95:
52:3a:c2:20:2e:ce:46:a4:f5:b4:91:dd:21:3d:38:
26:4f:dc:14:d7:38:f3:b5:e8:1c:f3:94:f9:c0:68:
85:b2:7f:23:0c:f7:f8:55:db:4f:09:06:10:f0:e8:
dd:00:e3:49:c0:89:c0:44:b1:a9:15:17:b3:bf:4f:
01:56:2c:69:9d:9e:5e:58:f3:9b:9f:d0:e4:e6:4f:
49:72:a8:ce:1c:ca:ef:db:31:0a:1f:ff:f1:a4:a5:
93:95:ac:df:d5:65:b1:4a:3d:a5:a5:91:62:93:d2:
03:cf:eb:19:0f:fd:f8:c1:82:40:2f:26:1a:6d:09:
82:37:67:63:41:17:55:31:23:dc:04:00:bf:0b:91:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:16:24:34:67:7F:E1:8F:7E:B6:4C:7E:2F:33:73:26:EB:83:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/baa26dfb-9b49-3aec-8eb9-0f9b25c38749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:2a:2d:4e:53:0d:e2:42:09:fc:88:12:45:97:c5:fe:24:7c:
b4:94:62:fd:76:de:6d:28:e0:ea:df:d6:23:be:50:6d:8a:38:
3e:c2:5a:60:3f:fd:e5:d2:88:bc:b1:44:05:ef:86:a5:1e:17:
56:12:8b:39:cd:ec:6f:aa:71:d7:38:d2:f8:3c:ab:91:aa:c7:
93:b7:c1:ee:dc:0d:a4:86:e4:b4:4c:0e:8c:c7:17:83:ec:a8:
60:1c:be:ac:23:36:bb:16:fd:bf:f6:cb:32:1f:cc:d9:6d:3a:
20:1e:18:ba:64:8b:00:26:fd:8b:80:6b:b9:61:07:04:ca:3a:
e9:7c:e0:b7:0a:fb:85:62:6b:40:f5:3c:c4:53:7e:00:70:06:
78:9a:2e:01:55:cf:03:46:97:07:f8:bb:33:5f:f4:2b:bc:3a:
f6:58:b8:c2:29:b7:5e:6b:97:17:b3:f0:98:ff:ce:ca:c4:77:
d4:24:eb:a9:b1:85:86:60:95:47:dc:a0:49:23:38:03:02:23:
63:84:e8:62:ca:ff:51:18:9b:7c:d2:e8:35:81:bb:a8:0d:b2:
f6:ce:d6:ff:35:90:96:77:e6:d1:bb:f1:7b:38:b7:0d:a3:70:
3b:61:c9:d8:4d:77:92:b0:fc:97:18:a3:69:1e:ca:e4:44:02:
43:a1:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:53 2025 by rpki-client