Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2f5863c-c6ff-37a5-99bd-cb7e1c884541.roa
File: d2f5863c-c6ff-37a5-99bd-cb7e1c884541.roa (raw, json)
Hash identifier: MmO7nURq+c/UrppMx/TAzW8jBHo8hl8qnIunbzW2cPg=
Subject key identifier: 9C:5F:C0:36:CA:80:BE:36:A2:28:C9:1E:D5:51:02:7B:29:CE:5F:5F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DB5EF1F7FC3C9D8ACF40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2f5863c-c6ff-37a5-99bd-cb7e1c884541.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397219
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:db:5e:f1:f7:fc:3c:9d:8a:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=418fa84d-e0d9-4a93-abf4-2ab4c1b35bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:21:46:bc:81:cb:3a:3b:f7:8a:da:02:7c:5c:
9d:32:ee:26:fd:7a:af:c6:20:97:57:fe:a8:4f:63:
30:06:81:fb:1d:a9:63:f5:e6:08:3a:b9:e5:2b:ec:
d7:b7:74:97:6d:41:45:6a:71:2a:1c:d5:f2:98:df:
1e:39:ef:55:d4:e4:41:eb:e7:e6:3d:77:86:2e:5f:
90:5d:0a:ca:38:15:7b:ed:e1:dc:b5:1c:6d:4d:fd:
c7:a8:57:59:de:02:d8:f1:44:ea:99:ba:df:1b:61:
b8:3d:ff:4c:5a:bc:cc:23:e9:c9:04:d4:fd:85:48:
56:5a:65:37:2c:9b:6d:bd:32:0c:77:1c:97:e3:10:
cf:78:b8:3e:75:a4:e9:c4:3d:29:30:b6:8b:4e:6e:
38:58:9c:e4:e3:25:7e:96:f6:a8:37:e5:0b:64:ef:
34:d8:12:8a:ba:fe:47:56:ca:78:65:80:13:3f:d7:
bd:f2:e7:d2:5a:0c:c1:58:ed:4c:2d:2f:71:2c:4e:
6c:ee:c2:19:1e:4d:06:b6:da:84:21:a1:6f:a1:81:
7e:45:93:9c:a2:09:6e:6d:7b:36:a9:ab:75:77:0b:
5a:2d:e3:27:5f:85:44:cc:8f:fe:9e:52:ac:82:61:
69:80:ce:26:b1:4c:c7:89:4b:26:d5:cc:6f:e6:9c:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5F:C0:36:CA:80:BE:36:A2:28:C9:1E:D5:51:02:7B:29:CE:5F:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2f5863c-c6ff-37a5-99bd-cb7e1c884541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:ff:38:55:2b:22:7c:db:d7:86:be:de:46:81:9a:96:1e:86:
2b:e9:50:32:04:92:df:3a:60:1a:36:34:b4:ee:de:15:ee:4f:
3d:50:9a:74:e9:52:25:0e:61:41:18:d7:cb:d5:a7:22:88:04:
04:c8:2e:f9:37:55:eb:4f:4a:a3:54:88:43:b1:d4:dd:cc:de:
48:9d:68:ab:11:c6:4d:0f:2e:ef:96:09:c5:3e:7a:a9:dc:43:
0f:21:fc:0c:7e:69:e8:f1:96:e0:b1:6e:1a:e8:62:66:b4:d1:
0f:f8:10:64:85:94:cd:e9:2d:df:cc:64:9c:b8:2e:71:95:a9:
80:95:24:cc:8d:16:ec:9b:33:3a:80:08:d0:60:3f:b0:7b:a4:
2f:10:a1:f9:fd:8b:35:2b:08:8a:34:e0:05:13:a8:67:a9:57:
70:88:a0:dd:4d:15:d0:29:db:24:27:19:42:9e:f4:6e:69:24:
af:40:c0:fc:02:0d:f5:a3:33:33:cc:74:bb:8e:20:e8:df:bb:
8a:79:15:9a:70:8f:29:d2:d9:c1:f9:be:8f:ed:0e:61:f6:1e:
61:53:1c:af:2e:b4:6c:7a:52:5f:ec:10:f1:9b:97:9e:91:88:
14:bf:9f:c9:7a:a5:ce:21:39:a4:87:3a:39:87:99:0a:c5:ff:
fa:42:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:52 2025 by rpki-client