Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2d6e8a2-a408-3309-a61c-93cfc546f810.roa
File: d2d6e8a2-a408-3309-a61c-93cfc546f810.roa (raw, json)
Hash identifier: AbGgOC7a3eEMAlY/JAhva9aWxRdRh9O9uxZKqTYI0Os=
Subject key identifier: 23:46:94:3A:C8:7A:15:21:17:F6:0D:7A:D3:7C:9F:2A:B4:06:C2:ED
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E4270308DA6AE0592E30
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2d6e8a2-a408-3309-a61c-93cfc546f810.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 19905
IP address blocks: 156.154.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e4:27:03:08:da:6a:e0:59:2e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=f89b8f5c-c6ae-4ca3-ab32-d80c0b258e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:46:cd:a3:d4:75:fb:ab:75:ad:7c:66:10:
6d:dc:ef:73:ea:f5:90:dc:0d:d9:1a:f1:23:16:64:
4d:f7:e1:03:0c:0a:d5:20:30:4d:5a:04:e4:dc:3d:
79:9e:ea:11:64:71:e0:3f:d4:e3:07:a1:e4:14:4d:
8f:c9:1e:d6:2e:c7:58:75:1b:7e:18:3a:db:73:8b:
72:c9:97:ad:8d:36:d4:55:9a:33:b5:90:95:08:f8:
56:cc:f0:0f:c9:f3:9d:cb:b6:67:88:e6:a4:21:65:
84:b9:64:ac:1a:71:ca:7b:6b:54:8e:84:b0:ff:ae:
a7:73:c3:a0:c3:6d:f5:b7:2d:ae:06:17:86:04:63:
e4:77:73:3f:a7:2a:6c:d5:be:d4:77:55:81:fa:05:
52:c3:7b:96:6d:eb:80:3c:ec:b2:ca:0e:89:14:71:
60:ae:97:cc:d2:64:f0:66:91:d4:27:95:c1:ce:30:
f8:a2:bf:c9:97:cf:ee:26:3c:1a:5b:e2:7f:99:70:
e1:71:a8:80:9d:72:56:f3:75:4c:77:32:b0:8e:5c:
c5:05:7a:21:04:a8:e4:8e:0e:d4:78:29:93:99:a3:
90:7f:3e:62:14:7a:c4:7a:2c:60:d3:37:ce:6e:54:
1b:a9:b8:bc:5e:6e:e4:b7:b6:c5:43:e6:22:15:2f:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:46:94:3A:C8:7A:15:21:17:F6:0D:7A:D3:7C:9F:2A:B4:06:C2:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2d6e8a2-a408-3309-a61c-93cfc546f810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:14:19:a0:e0:48:5e:68:2f:45:3e:60:76:39:f7:22:a9:6a:
ef:54:03:a5:6b:b7:63:e3:56:6c:37:b3:ec:00:02:55:69:2e:
8f:dc:67:5c:c7:d2:5a:56:2f:12:b1:2f:aa:4a:28:17:34:cd:
fa:14:6f:79:8f:25:f6:ab:3f:50:84:31:52:1b:a9:84:7d:75:
aa:32:9d:5d:e3:d2:39:07:8e:9e:1d:7d:14:a0:b4:4a:7a:19:
1b:bf:8a:99:fd:9d:7e:db:0d:4f:1c:29:bb:4e:7e:70:16:09:
0b:13:9a:f3:51:bd:b1:e6:5b:8e:ea:4d:19:87:c8:2d:4d:47:
85:22:8f:76:06:f4:a4:59:5d:00:f5:79:60:19:78:e6:eb:c5:
7c:be:f9:2b:1c:f1:5b:b9:0c:3b:3a:65:02:48:89:9f:60:5f:
f4:1b:50:2a:8a:30:d8:0e:74:c7:d9:a7:a3:6e:a1:a9:42:e1:
42:3b:14:8f:45:84:46:3f:da:79:6e:e4:e3:37:f5:be:05:2f:
18:ac:42:52:93:14:2a:64:7e:3b:43:5c:9e:46:06:4a:dd:9d:
b9:f8:21:13:7c:10:dd:14:fc:5e:4d:1a:b7:c8:90:07:c5:f0:
d7:fe:04:b3:30:75:75:ef:c4:8b:98:f2:45:1d:c2:2a:14:02:
1f:38:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:55 2025 by rpki-client