Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/1fb0c957-556e-38f3-8579-4803b9813b18.roa
File: 1fb0c957-556e-38f3-8579-4803b9813b18.roa (raw, json)
Hash identifier: J22M/a24qAbRBoHNC5YSX/2b4bWa9S/aT9XtF64bmzw=
Subject key identifier: 20:AD:3C:0E:09:50:A0:8D:93:E7:95:F7:37:90:97:2F:FC:53:8D:5C
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584836A7B01FF6AE107681EFCF80
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/1fb0c957-556e-38f3-8579-4803b9813b18.roa
Signing time: Sun 15 Dec 2024 09:58:25 +0000
ROA not before: Sun 15 Dec 2024 09:58:25 +0000
ROA not after: Sat 15 Mar 2025 08:58:25 +0000
asID: 54535
IP address blocks: 156.53.198.0/24 maxlen: 24
156.53.199.0/24 maxlen: 24
156.53.224.0/23 maxlen: 23
156.53.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:36:a7:b0:1f:f6:ae:10:76:81:ef:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 15 09:58:25 2024 GMT
Not After : Mar 15 08:58:25 2025 GMT
Subject: CN=17fb823e-5b51-47e4-8f99-826bd0bebc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:67:6f:5a:eb:a5:c2:bd:0b:3b:95:a0:d1:
d7:36:e4:c1:24:7e:33:8f:4d:2d:6b:56:40:97:a4:
1e:06:05:d7:59:17:5b:68:6a:15:02:21:22:bd:66:
ad:e3:24:ef:b3:e9:0d:7a:48:a8:9d:47:04:1c:e6:
03:8e:ea:b8:fd:5b:44:75:71:3d:ed:c0:02:e0:45:
c4:8c:ce:b7:5d:8a:5f:a5:53:1d:7e:e7:44:08:ee:
e8:be:1a:36:d9:7b:61:ed:f3:15:77:27:12:07:aa:
5e:d4:ab:d7:8c:cc:6a:f8:ac:9e:39:6c:40:a0:33:
a5:f8:53:51:f6:57:65:2c:38:40:01:42:d5:54:dd:
c8:65:f8:fb:5a:2d:33:a1:a9:d9:ed:0d:c5:70:7b:
32:ea:69:31:fc:48:0c:a9:c8:5e:e2:82:35:81:b0:
f0:93:5c:1f:69:44:a0:cc:a6:7a:f7:ed:37:f9:1f:
26:49:22:5c:4c:84:2e:da:d4:08:7a:40:18:2f:04:
82:52:c5:42:b1:b3:bc:04:a3:7a:62:ba:15:7e:5a:
64:3e:57:b8:dd:35:8a:ac:a3:3b:a9:e0:11:c2:dd:
0e:41:9e:71:47:e6:43:00:5e:a3:35:2e:2e:75:1b:
99:5e:12:88:07:dd:35:2f:ed:77:2e:8a:58:a8:10:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:3C:0E:09:50:A0:8D:93:E7:95:F7:37:90:97:2F:FC:53:8D:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/1fb0c957-556e-38f3-8579-4803b9813b18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.53.198.0/23
156.53.224.0/23
156.53.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:50:c5:da:46:30:c9:f5:54:74:be:c6:13:c0:b9:1d:85:4e:
d7:ad:e4:02:49:a7:59:c4:1e:c0:a4:17:06:30:ce:06:9c:66:
1e:8e:84:93:36:65:ef:3e:1b:90:ac:7d:6c:37:52:c9:15:0d:
5a:1b:06:63:a1:d2:ef:20:1d:62:02:91:6b:6b:1b:a5:3c:b5:
f9:6f:c7:d4:7e:32:04:fe:ff:64:d3:03:22:f7:25:26:44:88:
f7:b9:7b:9b:f9:f4:c5:5a:15:75:74:a1:3b:86:ec:2c:e5:18:
c6:5e:f4:17:8b:7d:b2:c2:13:38:e4:1e:08:6c:e5:9e:36:38:
5d:d4:78:2b:12:17:2a:f3:01:cd:49:49:a1:64:f8:96:e0:ad:
0e:93:d7:90:34:be:5e:e8:45:eb:01:4f:b3:8a:cb:89:7d:a1:
7e:b3:6a:46:79:bc:c0:52:d3:c2:97:b8:f4:43:9c:02:26:40:
ad:8e:75:76:cd:30:97:e9:a4:21:36:23:67:4d:9f:98:5f:56:
0c:e8:96:d8:f0:0d:8d:02:1b:95:bd:97:e4:8c:a5:42:aa:15:
95:65:a6:69:f1:db:9b:13:de:b9:c5:24:17:b9:cf:25:82:5e:
58:74:5a:cd:64:fc:35:f7:34:4b:6d:0b:c6:e3:a6:ec:27:3f:
fb:cb:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:20 2025 by rpki-client