Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc8880dd-58e3-3de9-bec8-1f10587e2d01.roa
File: dc8880dd-58e3-3de9-bec8-1f10587e2d01.roa (raw, json)
Hash identifier: X/wOnRfVuxTKgOGw3GPbSsb1ys3msXGZMx9zJKJRBlw=
Subject key identifier: 83:8B:72:54:5C:FE:3F:3F:B8:C5:86:F3:53:CF:3B:E4:92:DE:1D:6E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99641071CD32964548BD5C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc8880dd-58e3-3de9-bec8-1f10587e2d01.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397243
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:41:07:1c:d3:29:64:54:8b:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=38ba41be-0b4c-4a46-8ca9-e0b2b905a25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:ea:de:35:6e:fc:f5:7f:d9:9f:8b:ab:88:
52:73:bd:65:fa:a1:6e:73:c1:f5:fe:5b:b6:ab:4e:
6f:c4:a3:71:7a:bb:d7:56:d2:a1:15:46:c5:cb:bc:
5f:39:ce:f4:c4:11:f0:76:06:26:d8:7e:88:60:46:
e2:3c:eb:6c:65:a0:cf:79:97:5a:4d:e4:16:47:26:
0c:4c:96:51:19:9f:62:50:10:42:d4:3d:6e:c6:5c:
f0:0e:9f:db:51:6c:67:c5:e1:90:8e:bb:c2:2d:2b:
36:74:c9:68:d8:2a:64:10:e9:4e:96:e7:80:c5:af:
d7:8b:3d:f9:85:f9:92:90:fa:38:3f:cf:5b:f3:0c:
89:da:09:74:d3:da:df:a8:15:b3:ff:88:9d:9d:34:
1b:1b:4e:8a:e4:f3:5f:1a:97:ee:96:f8:1e:6a:7b:
20:e5:5d:84:3e:0b:b4:40:d3:8d:d5:73:ef:29:01:
f6:b7:fa:a3:14:f7:1b:ee:3a:0e:70:82:e4:22:bd:
24:d2:b1:2c:f2:47:f8:33:6a:05:5c:10:ed:4e:91:
01:32:99:c2:d1:31:2e:eb:0f:6d:3e:70:98:27:43:
f5:d2:9b:5b:d8:bc:92:13:bf:87:4b:d4:01:99:cb:
72:ea:1f:7c:36:ef:eb:73:cd:65:3e:3b:54:68:c2:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8B:72:54:5C:FE:3F:3F:B8:C5:86:F3:53:CF:3B:E4:92:DE:1D:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc8880dd-58e3-3de9-bec8-1f10587e2d01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:74:22:7c:9d:6e:ba:7a:98:42:01:9a:3e:39:7a:42:7a:4f:
71:f6:3f:06:1d:a3:b7:76:cc:f7:36:41:dd:bc:00:4c:32:9f:
da:8c:76:6b:1a:92:49:2f:6e:8e:72:c9:aa:23:0c:9a:e1:52:
a9:51:64:dd:68:e5:c7:f0:50:10:54:ec:2a:41:47:d9:ff:79:
ed:5d:77:7b:26:64:b3:63:6a:02:a2:80:52:f1:38:2a:23:b2:
c1:06:3c:fd:85:83:6a:1a:d0:2e:21:c3:ff:e6:c1:ea:6b:5c:
d7:92:55:7b:1c:f5:dc:e4:35:6a:b8:7d:53:0f:2f:1d:63:92:
3a:85:a2:66:f4:41:e1:95:bf:ab:6d:a2:41:29:e0:e0:4f:29:
bc:1b:cd:d6:20:20:5c:6e:0d:70:df:47:52:1a:48:34:44:6d:
6b:67:69:fa:89:d4:03:a7:64:71:59:8b:d0:13:95:bb:5e:62:
02:a2:b8:2c:86:35:34:ad:ab:ce:0f:0c:8e:df:b0:fe:02:73:
e4:e9:66:7f:2d:55:94:35:7b:56:ef:88:60:4e:9f:fa:f9:fb:
a5:58:bb:70:0c:6d:9d:ed:d5:cb:66:7b:86:03:d1:a3:35:80:
39:4a:8a:22:88:2b:79:19:33:47:43:a7:7c:a2:19:37:ba:18:
ac:cd:84:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:35 2025 by rpki-client