Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0b7b1eae-0618-3759-9ea9-52d3abbd5c2d.roa
File: 0b7b1eae-0618-3759-9ea9-52d3abbd5c2d.roa (raw, json)
Hash identifier: NYINWPKvtruApAX/DvEmcIhSeIvkSrNQO6wdHgE4Ovo=
Subject key identifier: F1:B2:B0:CB:46:0D:0D:DB:75:0D:63:00:CE:23:C6:A1:D6:36:A2:73
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00A405246278033280CC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0b7b1eae-0618-3759-9ea9-52d3abbd5c2d.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397229
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0a:40:52:46:27:80:33:28:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9d5509cd-1bea-43fd-93bb-0382859693b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:9d:7e:b6:7b:d4:e1:dc:08:56:9f:94:28:
11:8d:fa:8a:92:c8:3b:84:66:c2:c5:77:3d:c8:e5:
ba:1d:b3:ce:d3:8e:a2:76:04:33:54:3c:ac:f1:e4:
5f:56:42:c6:27:30:2b:51:48:f5:36:95:2d:5b:c4:
0e:e6:58:f3:34:e7:3d:8b:d4:be:6e:54:69:a4:8e:
10:7e:0c:31:6f:62:06:ef:31:25:cf:ed:c5:62:62:
49:d0:6d:29:2e:b7:f4:6e:93:f5:5a:da:1d:53:bf:
b8:d2:1d:fb:cf:46:64:1d:f1:bb:bb:c7:7a:75:2c:
91:69:bd:7a:c6:64:ff:b3:f5:c8:35:7f:89:25:9a:
cf:35:44:71:22:9d:35:bc:77:df:1a:d6:f8:23:2c:
37:07:ee:49:df:07:32:ea:74:e1:ab:b6:6b:f7:cc:
c4:0b:49:d9:af:07:c7:a8:4c:ce:68:eb:6c:98:56:
af:84:4e:21:2c:e7:9f:42:ae:a1:1d:b9:a5:e3:d2:
78:44:0e:f9:dc:c6:26:b4:8c:bb:64:e9:7a:19:ad:
96:62:bb:aa:65:70:c0:4a:e0:ba:48:99:e0:d4:6a:
32:24:38:bf:13:ab:49:5e:4f:85:89:06:f6:73:57:
e6:05:e2:a9:82:e4:66:9c:67:1a:2f:1a:55:3f:69:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B2:B0:CB:46:0D:0D:DB:75:0D:63:00:CE:23:C6:A1:D6:36:A2:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0b7b1eae-0618-3759-9ea9-52d3abbd5c2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:71:07:39:8a:21:cf:9b:a1:e8:04:aa:40:ad:66:c7:bf:cc:
44:73:68:d8:f0:a7:b7:eb:b9:d6:7a:e0:8d:1b:7d:e0:f7:8c:
ab:d9:f9:de:75:48:e9:dc:7b:3b:ac:92:de:c4:67:d1:07:c9:
78:9f:13:97:60:01:6d:bb:44:3e:6f:8f:ef:39:e8:f9:9b:83:
87:fe:1d:d3:09:8b:28:e0:dc:77:4c:3e:07:66:8d:7b:ff:8d:
d0:03:b3:1d:c3:2e:0a:e8:c3:8b:77:4d:74:2e:52:08:a6:98:
c4:61:46:6c:0e:e9:a0:62:c5:3a:68:40:f0:70:2f:42:14:dd:
7d:54:f4:e0:53:33:b1:f1:68:23:ff:ef:4f:e2:a8:58:65:11:
04:da:a8:f2:66:c7:36:e1:9c:d1:6b:9f:4d:95:5a:7d:fc:01:
c4:67:8d:ca:6d:bd:76:ed:71:60:43:57:f2:7d:72:b5:98:50:
99:db:af:75:33:b2:63:4b:62:1f:84:1e:c7:fb:40:af:85:0d:
7a:be:b7:a8:ad:ba:1b:94:3e:72:f0:05:f8:59:d0:e9:ee:79:
d9:dc:c4:17:ae:5e:dd:7a:50:6d:ef:0c:8d:a5:19:89:46:7a:
b1:23:33:a6:3f:77:3a:0c:22:0c:a2:a0:08:c8:58:e7:2d:10:
e6:4f:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:01:11 2025 by rpki-client