Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa
File: 457189b9-d3a9-3217-8a43-0445470cc4ed.roa (raw, json)
Hash identifier: 05FeGBHgGZFeqi1fyrJ2IT4NEdeQ/cyj5HMzAR/+eTk=
Subject key identifier: 34:FA:7A:3E:A6:FE:EE:6D:A9:51:B7:94:33:8F:24:80:A1:53:9B:E7
Certificate issuer: /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Certificate serial: 010D0C9F4328584949FE93F738B565992DC41E20
Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 271
IP address blocks: 192.146.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:93:f7:38:b5:65:99:2d:c4:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=00143944-fce4-41c9-9ee3-5b302d290b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:22:11:fc:be:15:6a:84:5b:2a:db:b4:af:
62:3f:08:00:37:f3:cd:da:ad:c6:98:d1:e3:71:3b:
07:7c:c6:57:60:bb:3f:d2:c4:6a:3f:dc:05:f8:89:
75:b0:1a:28:c4:ec:30:bd:0a:fe:49:f7:43:60:29:
91:92:9d:c8:ab:40:2a:f6:32:87:54:9c:05:19:a7:
e6:76:34:65:06:35:b1:15:3e:9a:d4:e6:c7:be:28:
a3:10:9c:b8:59:0b:9c:1b:4d:41:c1:fa:c4:57:5e:
b8:02:53:02:c0:e8:d3:61:53:33:16:f5:66:d5:47:
26:65:6d:0c:35:20:f5:60:23:ff:cb:98:eb:ec:d5:
c1:6c:6c:f6:4c:7c:aa:cc:88:bf:b2:c3:bd:73:ef:
3f:ff:de:b9:38:eb:67:d4:7f:89:54:49:62:34:2b:
27:37:f1:8e:ba:ad:96:31:15:19:af:1d:ca:b8:4c:
b6:b5:70:ea:83:a3:68:75:b0:71:d3:1a:0a:d6:fa:
b2:1c:c3:f7:66:4a:72:69:0a:ca:a7:d5:66:25:60:
48:6c:73:07:f9:51:3e:4d:57:7c:44:dd:a2:ec:0e:
06:a0:6e:83:be:ae:46:7e:b2:4b:74:6a:26:30:5d:
27:0f:ca:0f:53:61:2d:1c:a8:32:69:f2:d7:23:d1:
ba:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:7A:3E:A6:FE:EE:6D:A9:51:B7:94:33:8F:24:80:A1:53:9B:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl
X509v3 Authority Key Identifier:
keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
sbgp-ipAddrBlock: critical
IPv4:
192.146.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:95:d8:71:f2:2f:34:6b:76:cc:a0:c7:54:68:05:7c:b1:ab:
2f:6a:2f:a1:a3:fd:40:dd:2f:b5:9e:1e:c7:fa:09:fb:2c:ba:
18:75:d3:36:4b:1e:32:00:05:32:b6:f0:76:f8:8b:1a:fc:59:
00:d1:84:23:73:fc:41:f3:f4:2a:c6:5c:39:90:e4:a5:09:32:
42:d3:36:c5:7a:1a:e4:5a:7b:46:32:09:d3:56:f8:59:a9:12:
34:49:c8:15:05:e3:e6:82:ea:9a:fe:3d:5a:01:b7:f5:2d:4a:
9b:38:8c:24:83:84:e1:ef:4f:2e:78:2b:8d:96:70:3f:d8:84:
ca:bb:8b:41:53:3d:91:a7:82:be:58:4f:f8:14:3a:ac:8b:0e:
87:e2:31:99:ef:50:46:07:fe:fe:e8:40:8a:74:60:3a:ce:25:
b1:b8:5a:28:c3:3e:a2:b0:ca:a9:30:0f:18:45:a9:2a:1c:8b:
42:40:4c:8d:8a:68:04:76:26:75:36:10:29:0c:5e:fd:3a:87:
69:6a:e4:20:5a:7f:ec:ce:b5:af:b1:e6:9b:2f:0c:d2:12:14:
a0:4e:37:f8:f7:41:72:ff:c0:3d:20:13:3a:bf:0f:1c:61:27:
e5:aa:75:4c:76:6a:34:aa:6b:42:9f:46:63:2e:6a:fe:0d:ba:
f4:d3:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:59 2025 by rpki-client