Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/09f85e44-24b5-3af2-a056-e05892dee15f.roa
File: 09f85e44-24b5-3af2-a056-e05892dee15f.roa (raw, json)
Hash identifier: HmhNTeULnoeCnKJm10udVmomfoRjPAQbVmgFYQmGGxc=
Subject key identifier: 07:5B:BF:A0:31:15:7F:D4:FD:2A:C3:C7:B1:AC:A1:C8:EA:56:D1:04
Certificate issuer: /CN=ab991ee4-f5ad-4c54-a01e-156f24bac9fb
Certificate serial: 010D0C9F43285848A7D3E971C570DEC9B1F2CE00
Authority key identifier: E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/09f85e44-24b5-3af2-a056-e05892dee15f.roa
Signing time: Fri 24 Jan 2025 22:53:51 +0000
ROA not before: Fri 24 Jan 2025 22:53:51 +0000
ROA not after: Thu 24 Apr 2025 21:53:51 +0000
asID: 7018
IP address blocks: 156.2.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a7:d3:e9:71:c5:70:de:c9:b1:f2:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab991ee4-f5ad-4c54-a01e-156f24bac9fb
Validity
Not Before: Jan 24 22:53:51 2025 GMT
Not After : Apr 24 21:53:51 2025 GMT
Subject: CN=5242b047-a51e-4789-8910-699e8eb447a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:e6:02:57:d1:aa:6b:f9:25:9a:3b:c2:b7:
2f:56:3f:ab:b7:5c:48:32:d0:71:2f:ac:1c:40:43:
90:74:d0:a6:7c:cd:dc:ff:58:2e:45:38:f5:58:28:
bd:3b:76:eb:15:ae:db:f2:90:e5:0a:1f:94:68:a9:
68:59:6e:d2:33:f4:8a:b8:e5:12:46:ef:db:55:4a:
0c:1a:e6:28:92:7d:03:e5:8d:d2:2f:b5:73:eb:4d:
47:9b:30:f1:95:6f:17:fa:fb:a6:ba:91:9a:77:78:
b9:58:a2:80:cd:51:db:b6:c6:c0:32:3b:38:d0:35:
39:ea:b7:07:31:4b:d4:72:15:9d:26:66:b5:d6:fe:
7e:ca:7a:c7:43:5a:ba:63:8e:77:77:70:60:fa:5f:
32:b8:a7:48:ff:c1:e5:27:29:1c:53:99:fa:4f:e3:
16:54:f9:21:0e:56:3e:27:83:21:fe:96:50:72:83:
29:f7:94:c4:c6:a7:d9:25:b4:ab:69:53:a4:dd:b6:
4a:84:82:58:88:5a:f1:8f:bb:b3:c9:61:65:5c:49:
6f:a7:28:32:37:1a:00:00:d5:12:81:80:11:42:0c:
ac:c1:f0:7c:f5:1b:f7:66:ed:f6:4a:a3:d8:39:91:
9d:ed:81:5e:e9:0b:8d:39:31:fe:24:e1:b5:9a:b5:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:BF:A0:31:15:7F:D4:FD:2A:C3:C7:B1:AC:A1:C8:EA:56:D1:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/09f85e44-24b5-3af2-a056-e05892dee15f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.crl
X509v3 Authority Key Identifier:
keyid:E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer
sbgp-ipAddrBlock: critical
IPv4:
156.2.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b5:c4:21:07:e9:98:52:65:59:23:11:bb:b7:4f:5f:61:58:
2e:1f:6e:13:40:c5:74:b6:a1:57:91:61:81:2a:c8:83:16:5a:
f4:9d:9c:45:1d:e7:05:12:9b:d6:fb:82:e9:04:34:d9:02:cb:
4a:1a:e5:d0:41:c6:e1:0b:29:2b:65:3c:6d:f7:42:31:bd:63:
9c:28:8b:89:80:12:b9:17:94:83:70:55:42:4a:42:ec:25:f4:
d4:41:c0:58:6a:58:4a:11:8e:c2:94:35:1b:d6:23:75:38:0e:
1f:01:0e:dc:2f:61:25:d9:b7:83:72:b1:1b:5c:b6:e8:3c:1c:
43:ee:5e:22:de:b1:c4:14:f4:76:b9:cf:eb:fa:7d:21:98:25:
b6:6d:51:a2:08:8e:f1:30:ca:d1:31:cc:57:76:05:fd:1e:18:
4f:30:f7:c9:a9:1a:c4:7c:74:b1:c8:13:08:2f:6a:96:11:ed:
0f:28:11:ad:82:08:6a:b6:d3:40:56:0e:b4:5e:53:1d:fc:10:
3e:88:0e:6f:f4:e3:88:e6:54:2a:c3:e7:38:4d:d1:07:c2:3f:
23:fa:b6:a2:61:40:d2:a2:14:23:b2:64:db:ee:0e:59:49:8d:
0a:6b:67:50:37:6c:3a:cf:e4:ff:99:a5:4a:97:dd:1c:95:3a:
a2:84:1b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:01:29 2025 by rpki-client