Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c06fe94e-4979-3f30-960b-cedc6b933f17.roa
File: c06fe94e-4979-3f30-960b-cedc6b933f17.roa (raw, json)
Hash identifier: vVd9CJQMskqfxExtsu8jN02DidisOUHeY8RW+wNdwXo=
Subject key identifier: F3:11:85:2D:6E:B1:2E:B3:C1:72:86:9D:6E:35:2D:70:1E:99:7E:99
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246EC468D581DDED7E14180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c06fe94e-4979-3f30-960b-cedc6b933f17.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397229
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ec:46:8d:58:1d:de:d7:e1:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=179a4ed2-9ce0-4253-9abb-e4f40d812cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:11:17:b9:68:89:ac:cb:16:c1:65:8d:9c:
16:99:f1:fb:52:ce:c8:fa:66:1f:1b:ba:d9:8a:04:
3f:b5:b9:f5:5e:d2:39:64:8c:aa:09:8d:8c:e8:13:
5b:ec:8d:89:ce:c7:9f:9a:e0:c5:fc:b9:2e:cb:21:
f9:a1:fd:37:a8:5c:f8:84:13:d0:c3:7e:a2:da:45:
0c:94:4f:f3:9e:9b:45:1a:f8:7e:57:43:44:f8:7f:
f9:27:08:ca:cd:c2:d3:5f:75:97:26:f1:ce:e3:68:
42:e9:77:e8:81:61:47:de:de:3e:8d:0d:bf:21:06:
65:2c:f9:d1:ff:90:3d:ef:d1:93:fa:aa:58:f2:ea:
71:af:3d:41:2f:42:de:db:e5:0b:04:76:62:0f:9e:
ca:b2:0a:4f:08:ae:d8:56:63:ea:3e:d6:a9:3d:3d:
cc:ed:4f:ab:ec:60:69:58:d4:46:af:3c:17:97:ff:
9f:9b:08:23:46:bc:5a:f3:c0:e5:7e:6f:90:e2:3f:
04:d6:94:e3:e2:fb:19:29:f9:b3:cf:6c:e2:13:7d:
61:04:e1:9a:ba:e8:85:72:fb:32:94:fc:15:0e:0d:
07:8b:56:21:10:31:a7:ff:4b:51:1f:58:ac:3e:de:
6f:2b:0c:c2:3a:39:eb:b0:cb:d0:2b:c9:cb:b8:6b:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:85:2D:6E:B1:2E:B3:C1:72:86:9D:6E:35:2D:70:1E:99:7E:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c06fe94e-4979-3f30-960b-cedc6b933f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:88:21:62:06:7f:db:60:75:59:79:36:9f:b5:66:93:a8:39:
9d:82:fc:6d:17:27:92:de:b4:00:f2:a4:30:8f:e6:6d:0f:f8:
09:6d:d7:31:1a:49:91:6a:fd:22:10:50:a2:90:41:c3:07:bd:
6e:18:85:23:8c:40:40:b2:88:d8:f3:8d:3c:85:dd:0c:12:74:
f8:6a:c6:07:bb:0c:eb:7a:6f:6d:1e:ec:5e:70:d5:2e:95:c4:
95:87:8b:64:be:68:2b:03:2c:05:77:57:d5:7a:0d:4f:2a:e2:
05:7e:29:1b:68:70:98:de:2e:e7:28:e3:67:c8:a4:85:f4:19:
d7:b5:66:cf:61:0f:98:e3:7d:e8:e4:b9:e7:8b:c5:5f:8b:19:
07:e7:2f:d0:d0:5a:15:fe:4f:93:c4:99:57:a5:f2:ff:ee:9e:
c7:15:34:a6:85:b1:09:04:4c:31:39:b1:cc:47:5a:10:37:31:
be:df:2a:f9:62:6a:50:c2:1d:fe:b7:3d:25:b4:f6:83:fd:5c:
3a:8a:fd:47:38:a2:7e:6c:4a:b1:fc:a2:16:da:2d:23:b0:81:
18:ac:c6:73:da:bd:9c:68:78:65:85:51:0c:e2:1b:8f:43:b0:
49:c2:ec:9a:61:5a:51:20:d8:56:ee:40:e0:0c:24:93:57:e8:
30:17:2d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:34:24 2025 by rpki-client