Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6b4e3e0-7f8d-3ad2-bf50-c0e93092c60b.roa
File: d6b4e3e0-7f8d-3ad2-bf50-c0e93092c60b.roa (raw, json)
Hash identifier: 0e6KnuyYWhkepBSFO5Ed0z1i/Fs4vvug0YiTk80Q7Es=
Subject key identifier: F1:1C:34:8C:0B:F5:24:3E:73:B3:EC:76:4E:4C:97:AE:43:29:E2:7A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20FD9B65DEEC5770957660
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6b4e3e0-7f8d-3ad2-bf50-c0e93092c60b.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397215
IP address blocks: 156.154.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:fd:9b:65:de:ec:57:70:95:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=11afca26-202b-48b0-aba8-f062d2f6503b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:30:12:35:98:8c:98:bd:00:76:bb:ed:63:
44:32:e9:c5:bc:59:b1:e6:b0:e6:5e:98:e2:f8:0a:
81:8f:f0:7d:cc:90:64:8b:ee:14:1d:28:3d:0b:87:
c3:9f:6f:72:49:19:44:fa:c5:c6:64:9a:79:51:b9:
48:1b:39:65:11:f1:d5:83:27:72:0b:0d:1e:ad:40:
9d:4b:5d:b7:fa:2f:b0:b2:f7:e6:0b:f5:b0:c3:5c:
fd:a7:c1:ab:7d:24:5f:4f:58:69:5b:8e:75:32:d9:
35:f3:da:74:b9:9b:a9:9c:ca:a0:0c:ed:20:6f:9a:
4e:84:78:66:e8:3e:d6:da:23:85:ff:8b:44:e7:bf:
52:22:d3:93:bb:a5:02:45:22:36:42:6e:ad:24:ac:
4a:8b:f4:be:cf:5c:0e:d6:7d:45:1e:fc:85:74:57:
b8:7e:fd:c7:0c:58:47:16:cd:ef:00:84:ab:e9:9a:
0b:d8:1d:f0:76:4d:1c:98:02:0a:27:ed:9c:fc:99:
62:dc:6c:7c:1e:ad:32:e3:7b:5c:3a:80:22:1e:32:
56:38:67:59:0c:4f:be:40:2e:0b:15:e3:ae:58:49:
20:81:80:1b:65:e9:29:62:35:60:eb:30:b8:90:0d:
ca:3c:51:f4:7c:97:74:51:fa:4e:e2:f9:91:d2:c4:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:34:8C:0B:F5:24:3E:73:B3:EC:76:4E:4C:97:AE:43:29:E2:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6b4e3e0-7f8d-3ad2-bf50-c0e93092c60b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:bb:9d:78:7a:5f:1d:95:1d:0f:57:38:37:17:2b:47:51:fb:
3e:97:35:e5:60:ac:c0:e9:a4:82:f1:43:b7:21:0d:f5:79:6d:
56:44:25:14:f8:62:0d:58:c8:a2:a5:86:7b:49:0b:06:a0:27:
09:2a:77:2b:86:c3:0f:6d:58:a9:75:64:e6:0c:ca:c9:a0:ac:
84:cd:a4:29:a7:ad:f1:cc:e9:63:92:b0:70:6b:a3:de:c4:f3:
54:3a:17:c5:69:88:7f:23:ec:0c:29:f4:65:d1:31:ac:e0:b5:
73:2d:d9:a4:34:69:a2:62:18:5b:24:89:34:e8:5c:94:09:96:
8d:2d:f4:4e:23:58:4c:85:5b:24:1b:51:cf:fb:2f:aa:b0:5c:
01:c4:e0:1a:d5:cf:58:3d:fd:32:f1:71:c3:62:41:e8:ac:20:
23:16:8f:88:5c:31:c6:4e:f6:cd:fa:3b:4e:7c:b2:5b:f1:bb:
ec:df:98:35:db:6b:a6:e2:0b:f3:02:07:02:bb:c2:95:6d:48:
4d:70:ac:aa:15:97:00:38:16:d8:5b:b5:7a:18:e8:b6:28:77:
f7:f2:a0:54:ad:34:7f:9a:e1:40:ef:e0:90:ba:9f:a2:aa:70:
2f:db:cf:c1:50:82:76:60:4b:cf:84:bb:4d:10:3c:cb:bf:87:
b1:22:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:09 2025 by rpki-client