Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa
File: cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa (raw, json)
Hash identifier: L57OsbsBp3UvjLOyuvKQnxb3WtGLhF5/f83He0l+MD8=
Subject key identifier: 5A:50:DD:39:AC:93:44:6A:AD:AF:88:65:F4:21:D1:69:88:79:9B:A6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A996403F1C027D73F7B70900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397230
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:40:3f:1c:02:7d:73:f7:b7:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=ed26f8a8-8ac8-41ce-9342-086f9469e9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:4b:4a:26:cd:a5:23:29:d1:ee:d3:be:f0:
a8:47:3f:dd:1f:2f:ed:05:54:36:66:6a:4b:9f:f1:
f8:6a:25:ba:47:f0:73:7d:11:d6:63:78:08:fa:ec:
7f:2f:0c:31:42:7a:10:17:17:a6:3d:d5:c2:36:4d:
ca:f8:64:b6:01:9b:1e:83:d7:53:41:65:bb:52:63:
07:4f:f9:f0:89:8f:df:db:0e:6f:cf:c6:2c:44:0d:
10:f8:42:97:e6:4d:dc:e6:b2:7b:9d:ea:1a:3a:06:
3e:c8:12:32:e1:07:b3:4a:a5:22:5e:96:f2:c8:1d:
6d:e9:e7:8f:af:c0:b2:cb:ef:4a:9d:12:81:7a:6e:
bc:4a:17:69:0b:a0:e5:82:7d:ad:3e:9a:26:c6:6b:
1e:91:82:19:1c:b8:78:29:69:fb:78:01:49:92:43:
d9:72:5c:6a:da:6a:c6:2b:17:af:e8:0c:99:12:46:
a0:cb:2a:1a:93:48:4c:86:c3:e9:f1:e0:24:23:34:
a2:e1:1a:d3:fe:e5:a5:2b:c7:53:3f:22:9b:2d:84:
d0:b6:90:c0:65:82:e5:e5:1a:da:44:c7:7a:34:ad:
a5:ac:02:31:31:27:52:84:59:a0:35:45:32:d7:79:
e9:b4:f7:9a:34:76:f9:a4:d2:08:ff:70:df:a3:93:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:50:DD:39:AC:93:44:6A:AD:AF:88:65:F4:21:D1:69:88:79:9B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:a9:2c:b6:8a:40:66:21:b0:b4:68:2a:39:10:5d:c0:5f:1e:
7c:d1:dc:dc:1d:9a:69:d2:61:3a:97:91:04:d9:52:1f:cd:5d:
8e:51:fb:c3:c5:a8:b9:0f:f1:72:91:47:ae:77:72:cf:e8:a4:
fc:e2:81:92:12:0e:8b:5a:13:f5:38:a9:dd:19:60:70:48:ea:
e4:ff:5a:b3:76:b7:7d:c1:ed:8a:91:3d:a6:e3:ae:69:ed:3b:
57:1c:a7:63:02:53:2d:ca:40:e9:0c:b5:fe:df:cb:0c:e4:ce:
5a:04:16:c6:e2:51:81:01:f9:d9:b7:fd:6c:34:bf:77:90:3f:
1e:9e:1b:9e:44:57:27:13:fb:4b:d3:c8:94:5f:2c:3e:fb:0c:
c9:7e:33:f9:48:ad:eb:58:89:92:10:e5:a9:45:f1:2a:b6:96:
dc:a8:b4:3f:a6:70:cb:91:16:75:92:a8:9a:f7:9a:9b:df:9a:
ec:b6:ef:a9:29:c4:16:5f:77:ec:07:13:0f:76:9c:ed:69:f2:
5b:2f:07:af:fe:09:6a:d9:84:12:7d:08:a2:92:8c:0b:e0:71:
c0:a9:af:81:17:c3:f5:eb:6e:76:d2:06:06:b6:b5:81:be:e2:
08:bf:06:34:5d:ba:78:94:c2:28:5b:53:e2:0f:8d:10:90:0f:
7c:30:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:59:01 2025 by rpki-client