Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd3a2664-bb5b-3007-8634-8c608830f126.roa
File: cd3a2664-bb5b-3007-8634-8c608830f126.roa (raw, json)
Hash identifier: gRu4Z1ZXf+1h4f0SNktLKq3LC1aCJbgFDzuLLKWfGko=
Subject key identifier: 0D:86:29:1C:1D:59:16:4B:10:13:8F:08:4F:61:BA:DC:F6:B8:45:72
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20ECBD0AB71031B7861900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd3a2664-bb5b-3007-8634-8c608830f126.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397236
IP address blocks: 156.154.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ec:bd:0a:b7:10:31:b7:86:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=bd874f0c-e3b5-46bb-b77f-85fc639e46f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:f3:89:ee:7e:74:65:f3:07:00:3d:01:16:
b2:65:5f:3d:3a:7f:75:8c:a3:92:93:f8:bd:bf:d0:
fe:88:d7:f3:cd:fc:7d:07:c3:99:a4:7b:96:3e:90:
ba:1c:b1:2d:37:61:dc:a9:c5:1a:ec:2e:f6:5e:ac:
df:6e:8d:0b:85:ef:dc:f0:86:d3:7f:98:b0:9e:4c:
79:92:1f:11:a3:b1:4e:cd:c2:7d:5b:6d:7b:88:20:
08:1d:99:32:1e:b7:16:94:ee:aa:55:95:7b:f0:af:
17:1d:ce:1b:f4:a3:87:e2:17:09:ea:5e:c7:49:0b:
e5:c6:a7:94:2b:78:bc:66:70:58:2d:62:0c:e3:3f:
ab:97:a0:be:aa:70:89:50:70:a1:df:a7:d2:00:39:
37:4e:76:9a:6c:7f:0d:a1:6e:ad:c0:16:b6:be:e1:
f5:a4:84:72:95:67:dc:87:6d:5f:bd:5e:e4:3d:8f:
25:b1:e0:77:f6:e1:c7:bb:dd:fd:06:ed:a3:8e:6f:
21:7f:14:95:ca:9f:49:89:de:9d:e0:62:23:b4:54:
05:35:49:f7:55:0d:7a:80:3e:8a:9c:9d:2e:fb:f7:
7f:6c:f2:22:d1:f0:2a:56:cf:e8:0e:45:47:7a:c0:
6f:8d:86:a8:4d:32:3d:be:a6:ba:5c:1f:03:7c:76:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:86:29:1C:1D:59:16:4B:10:13:8F:08:4F:61:BA:DC:F6:B8:45:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd3a2664-bb5b-3007-8634-8c608830f126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e2:6f:8f:41:ac:8d:7a:24:37:2b:94:fe:01:0b:65:e6:69:
47:33:0b:fb:f8:e6:5b:43:4a:03:85:66:21:30:da:63:7a:f0:
c8:fe:1b:19:97:86:3b:0f:7c:77:ac:71:8b:07:fd:0b:43:94:
0b:71:95:7a:02:21:1c:02:8b:2d:68:8d:8d:22:c0:44:41:89:
cd:57:6c:89:d5:e3:d9:29:05:bb:0a:6b:b4:80:b0:46:d7:37:
87:26:86:3f:d7:37:da:56:3d:7a:6b:41:e1:07:ac:9b:62:d9:
33:5f:c4:56:37:83:07:8e:bf:02:c8:d2:82:81:21:3a:f1:c2:
f3:96:50:de:c6:99:b7:0d:3f:38:f8:3f:ae:e0:48:8e:66:b7:
d5:03:c5:d2:4c:46:cd:3e:cd:9e:0d:e8:12:8b:a8:5f:92:ec:
ac:55:a0:b1:c6:da:2e:a0:c4:0c:1e:fc:98:12:b1:52:22:54:
81:c7:cd:5d:e9:ee:a3:b6:ec:96:43:73:ba:d3:7b:57:26:8e:
63:6f:c5:05:42:d2:a4:39:a2:7f:3c:e6:2d:ea:55:78:95:58:
da:f5:6c:45:05:f2:36:dc:b0:c4:b5:0d:d9:d8:4d:68:bd:48:
f0:8a:21:fc:e2:b2:12:2b:5d:04:89:c7:12:24:cc:79:5d:81:
53:fc:4f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:32 2025 by rpki-client