Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa
File: fd434724-7632-35bf-832e-50b74b1f77f7.roa (raw, json)
Hash identifier: n1MLoGCBzkYYlSwK4mivstr+d273sOBXpHdV+ixn2/k=
Subject key identifier: 00:56:85:EC:C7:E4:6B:6B:BB:01:63:CA:43:3F:5E:C4:D9:59:CC:62
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F432858491941747CF9795019F5218C00
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 54535
IP address blocks: 156.53.200.0/24 maxlen: 24
156.53.201.0/24 maxlen: 24
156.53.232.0/23 maxlen: 23
156.53.240.0/24 maxlen: 24
156.53.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:74:7c:f9:79:50:19:f5:21:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=413ced72-faab-4017-b93b-149df81010d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:a7:88:b2:56:5d:5b:b4:e7:7c:3a:30:17:
27:90:09:4f:56:bf:8f:f7:d8:24:5c:b8:a1:86:16:
29:69:87:60:46:0b:ac:0d:6b:0e:79:bc:b7:19:b0:
56:8d:bb:62:6a:7b:19:cd:f4:e8:b3:e5:90:39:36:
b4:ee:c8:1a:41:d5:58:12:ac:a2:10:6b:5b:a1:6c:
75:67:e3:bf:11:ac:5f:e9:2e:c3:64:98:f0:03:56:
40:8b:db:c0:e1:42:86:c4:0a:2d:5d:10:93:04:6f:
34:3b:c4:83:7b:19:a9:48:a2:a4:60:29:a4:46:39:
16:1f:02:1c:6b:6f:17:d3:62:11:8b:b7:42:4f:a4:
b7:6d:fd:f5:78:a3:61:13:c6:6b:72:65:e6:af:be:
59:78:c1:6a:67:00:38:31:ed:74:1e:6d:6d:7e:27:
87:c3:99:d3:89:8c:86:93:74:cd:19:c6:72:5c:74:
85:df:63:e7:4e:63:f4:89:13:ac:59:42:69:64:50:
d9:96:24:74:25:1e:53:10:3d:4c:aa:d0:ff:eb:63:
f6:b2:09:7a:25:7c:37:8d:49:3a:43:d9:73:cc:3b:
b8:52:78:6f:a4:7b:d8:80:cb:6f:fc:a1:63:20:ca:
20:14:69:03:b2:9b:19:db:0f:8d:d2:dd:8c:b1:28:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:56:85:EC:C7:E4:6B:6B:BB:01:63:CA:43:3F:5E:C4:D9:59:CC:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.53.200.0/23
156.53.232.0/23
156.53.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:e1:ee:05:50:84:dc:d4:b2:87:4e:5c:56:10:f9:5b:1c:84:
1e:36:d1:2d:8b:bb:b3:79:b3:7b:2c:66:38:e0:93:3d:6f:40:
ed:9c:60:73:50:a4:11:5a:86:5e:4a:1c:8d:b1:ac:e0:db:15:
c1:c7:47:f4:0b:6c:ab:c3:46:30:4d:05:c4:c2:e9:86:b1:dd:
78:f1:0a:46:5d:2a:e4:7d:8a:76:e3:52:e2:41:0c:11:54:05:
12:f2:67:b0:c1:2e:b5:d2:b9:ba:d1:34:50:7f:09:bb:ea:f9:
b4:4e:d0:4c:9a:11:90:e9:6f:a9:70:39:70:c1:cc:73:77:3b:
8a:8a:0a:4f:ee:d5:99:7a:ec:e5:bc:a2:8d:15:47:c8:5b:b4:
68:cf:dc:3c:85:e3:0a:10:d9:46:e9:6f:da:85:bd:d7:7e:a3:
ea:9d:ad:71:3a:96:0f:e3:37:0f:26:ae:52:c1:cd:d7:6b:04:
9a:70:bc:cd:50:fc:04:2f:65:91:57:b3:8b:e4:67:93:d2:68:
b0:e2:8a:48:5a:f5:4f:0b:e8:fb:d4:48:52:d8:36:ac:03:35:
14:ee:52:ce:ad:8e:b3:7f:bd:68:85:40:c6:4a:a0:6d:cd:3b:
f9:37:4a:8d:a0:43:48:9a:c1:9e:46:c1:a7:9d:2b:4d:5c:69:
25:8c:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:02 2025 by rpki-client