Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d058b605-b9b5-3284-abd9-3d71cb3a7135.roa
File: d058b605-b9b5-3284-abd9-3d71cb3a7135.roa (raw, json)
Hash identifier: 01Mp4j2Vv9U2Fpie7iluVZhd/V+Vzjq2OwksINpwqj0=
Subject key identifier: 1B:84:41:80:E2:B4:9E:85:E0:D1:F0:76:61:56:17:F8:4A:AA:67:F1
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B642567F2E9C82356BF3BC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d058b605-b9b5-3284-abd9-3d71cb3a7135.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397217
IP address blocks: 156.154.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:25:67:f2:e9:c8:23:56:bf:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=2862e8c1-7450-497c-a5b1-2c2d13550ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:04:1f:c1:a9:65:b9:95:d1:02:63:b1:d8:
03:20:0e:d1:e5:ad:84:8d:3f:45:70:48:c7:30:ac:
c3:c4:ae:8a:ca:0f:d9:36:a7:8a:31:76:36:84:7e:
2e:c9:16:2f:e6:6f:45:2a:b2:8e:1c:cc:9b:c8:4e:
2c:db:e7:ed:af:ca:88:f9:56:54:32:b8:60:a5:2e:
7c:11:37:b7:7d:46:36:ed:39:d9:e0:39:1e:c2:f8:
92:4f:6a:01:dc:5a:68:b5:5e:4a:c7:77:c2:dd:6d:
d2:ea:2e:4f:36:08:2c:fb:8a:14:ef:b4:e3:7e:99:
23:1f:c4:04:07:a8:79:d6:f7:9f:12:c5:9c:f2:70:
1f:ec:5c:44:c3:51:a0:20:da:4c:02:ac:a3:fd:8e:
e3:c2:f1:ac:f5:6c:7e:ce:72:96:de:f5:54:4d:8f:
81:90:65:e2:24:0a:6c:75:e4:68:9f:11:eb:f1:ab:
b9:fd:25:9a:fe:b7:60:fc:ee:be:4d:cb:b1:05:b0:
2e:a5:82:db:a7:cf:6f:19:1b:b7:29:15:b9:dd:02:
ef:5c:9e:75:7d:48:02:25:89:21:33:3d:7a:f9:3f:
ee:7f:ec:fd:af:84:ee:8e:82:9c:8c:7a:ea:f4:61:
19:b4:68:41:9b:2c:a4:33:e4:ab:8b:0c:4a:5f:57:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:41:80:E2:B4:9E:85:E0:D1:F0:76:61:56:17:F8:4A:AA:67:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d058b605-b9b5-3284-abd9-3d71cb3a7135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:5e:d1:eb:e3:f1:40:fa:cc:69:48:0e:62:ac:d8:a3:c8:fa:
88:18:18:b5:fc:25:1e:22:1d:cf:ea:00:b4:a5:2a:2b:51:c9:
bd:35:55:66:26:86:24:3c:a7:89:7a:d7:10:eb:39:33:d4:6e:
8d:f6:a6:38:45:2b:e2:9c:41:60:d3:f0:ca:da:83:0c:3a:16:
37:b3:1b:c5:3d:f9:4b:5a:16:28:25:ef:20:fb:60:36:af:e2:
36:ad:5d:a5:4f:d6:1a:eb:f7:0a:94:fb:a3:be:6e:3b:47:e4:
10:af:ec:e3:16:71:50:65:9f:ea:7d:05:5e:04:c0:ae:98:c2:
a3:de:5a:e1:6f:3e:39:6b:4b:df:39:39:00:a5:bf:15:da:b9:
76:e9:f0:32:b3:e0:5c:1e:7c:4e:92:e5:18:3d:11:8b:78:20:
06:4b:81:d4:a8:f3:d9:61:38:83:41:11:12:06:59:4f:c9:89:
78:88:50:6e:b7:ec:c2:96:ff:04:03:90:57:db:f0:77:db:81:
c7:44:b1:11:c5:70:56:00:28:99:01:79:ff:ba:5a:98:c4:85:
85:62:5f:e6:ba:54:35:9a:d6:9b:5a:07:f5:20:1e:d3:a3:b6:
9c:b1:16:fd:51:aa:86:35:f2:df:b4:b1:5a:1c:eb:57:86:31:
58:c5:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:37 2025 by rpki-client