Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/ac33e81c-e21e-307e-8679-630443462c2f.roa
File: ac33e81c-e21e-307e-8679-630443462c2f.roa (raw, json)
Hash identifier: 0bu7nZlxvhgS2mIgLlc2SDCflWt7vKYefIDYRUQJcW0=
Subject key identifier: E5:42:A9:79:A6:A8:C9:92:28:60:D5:CC:56:3F:7D:C7:C6:0D:E7:8F
Certificate issuer: /CN=dfbd5b0f-e06b-409d-a492-aff81175f2cd
Certificate serial: 010D0C9F4328584875F05AEAABDB4BFC03E99AF0
Authority key identifier: 8B:F2:33:5D:44:8C:B4:0E:A9:0C:C9:AE:02:A2:0D:59:19:25:69:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/ac33e81c-e21e-307e-8679-630443462c2f.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 36081
IP address blocks: 156.108.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:5a:ea:ab:db:4b:fc:03:e9:9a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfbd5b0f-e06b-409d-a492-aff81175f2cd
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=b3d1a8d0-b883-4e5f-94c2-ffd0b31c8260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:4f:8a:13:7d:0f:a5:07:d9:50:26:14:dd:
1c:a0:9c:5f:03:9f:1a:c4:66:c4:a2:6a:e5:ed:56:
74:c3:2d:5f:d7:a3:23:28:7a:ad:bf:13:24:16:a1:
c8:e6:7c:a3:cd:47:c6:0f:78:8c:5a:c0:97:fa:db:
b3:31:de:2d:28:e7:f8:ed:d8:8b:ac:7f:24:83:5a:
be:08:02:7e:bb:d2:c8:0d:7c:74:cd:bc:c6:44:36:
b4:23:78:af:53:fc:c3:3a:f7:33:d9:0a:46:ca:05:
e9:e3:65:c7:d6:e1:6d:b4:af:11:9e:99:3c:53:47:
52:e1:c6:86:12:4e:73:2c:91:07:3d:25:4c:ab:7c:
0e:bd:44:b8:ea:63:fe:62:13:ec:5a:e4:41:06:d0:
96:c3:80:ab:6d:1a:bd:cf:54:ce:87:a4:51:5b:91:
41:3d:1e:29:4d:d1:c7:b6:e9:eb:b6:49:fe:da:c6:
41:38:84:be:37:24:82:36:03:21:2c:57:80:e8:72:
e7:42:ef:0b:b7:de:14:21:21:77:34:07:3b:42:93:
6a:94:a2:94:98:4a:02:28:ca:b5:6e:1f:13:22:3f:
92:50:c1:25:d5:76:c9:04:00:c4:c4:e0:c4:03:61:
d6:f6:d9:bc:04:5b:33:7c:aa:3b:93:f4:20:51:d8:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:42:A9:79:A6:A8:C9:92:28:60:D5:CC:56:3F:7D:C7:C6:0D:E7:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/ac33e81c-e21e-307e-8679-630443462c2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/dfbd5b0f-e06b-409d-a492-aff81175f2cd.crl
X509v3 Authority Key Identifier:
keyid:8B:F2:33:5D:44:8C:B4:0E:A9:0C:C9:AE:02:A2:0D:59:19:25:69:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd.cer
sbgp-ipAddrBlock: critical
IPv4:
156.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:6b:14:4f:10:4f:cc:b8:cd:40:3d:3e:2d:07:14:9f:5f:a7:
58:10:60:46:a4:12:51:aa:87:2a:57:42:5a:dc:08:8c:cd:0d:
5d:67:5c:57:5b:82:9a:33:85:ce:92:da:6e:de:9f:2c:2c:aa:
0f:40:fe:d0:08:52:52:f5:ed:77:e4:51:6c:1e:6a:62:5f:42:
f0:ab:ba:4c:6c:84:eb:f1:19:da:5d:0a:a9:6b:d1:6a:18:f2:
ab:bc:33:04:9b:64:39:aa:8a:3b:f0:f6:aa:d4:14:7a:e1:5b:
53:f0:f6:21:92:f5:e1:1e:a3:c6:72:69:4a:75:a6:67:55:bf:
82:58:a1:69:da:6d:c7:b8:e8:0b:1e:19:06:0e:14:2e:c8:63:
6a:eb:b5:6a:8f:d1:2a:2a:fa:e4:38:e0:e9:57:57:89:c9:aa:
fc:c6:24:57:5f:16:f6:2b:c7:0a:5c:0c:96:49:99:73:e9:a0:
52:4a:72:3f:75:c4:c0:72:8a:f9:0a:66:86:1c:0f:d3:9a:f3:
04:e8:8d:ed:a9:e6:33:c7:71:50:67:a3:49:87:83:92:fd:b7:
15:95:1e:a8:5c:a4:60:c3:3d:05:4a:cb:87:a5:63:a3:52:51:
46:3c:7c:a2:04:6e:2b:94:53:12:03:c4:2a:63:10:e7:59:77:
df:ff:b1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:58:19 2025 by rpki-client