Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f709cff-1636-3383-868d-85240b9b89e7.roa
File: 0f709cff-1636-3383-868d-85240b9b89e7.roa (raw, json)
Hash identifier: G95KgaecjE2nsI2HJtNM9FJEcO5cnbScoR6w/+w0vfM=
Subject key identifier: 8A:60:C5:67:21:9F:AF:8C:52:A9:CB:CB:32:10:A4:8A:C1:C6:73:16
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00BB4C476D112BABA3300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f709cff-1636-3383-868d-85240b9b89e7.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397220
IP address blocks: 156.154.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0b:b4:c4:76:d1:12:ba:ba:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=8e9588da-34a2-42be-bf3a-be589a4f8632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:0f:93:fe:ef:a3:90:b4:0d:90:68:67:a8:
6f:43:91:95:cc:0d:51:b2:aa:e4:fd:57:ed:78:27:
43:fd:23:3d:c2:dd:08:ad:b7:6d:c2:f3:1c:15:fd:
dc:26:db:dd:84:06:fb:99:e6:ee:af:60:d8:83:76:
b5:b2:61:64:73:79:c3:6d:45:e7:43:74:9b:ec:2a:
e6:4b:9b:c9:bc:26:f7:ca:c0:cb:c9:e6:da:17:1c:
e9:a5:a6:a4:3b:32:2e:c2:fc:d1:83:57:89:8a:03:
d1:c4:c0:f8:73:d0:8c:81:99:f3:9f:31:88:cc:c3:
df:dd:2d:ca:9f:ef:9a:78:9d:a0:f2:ec:ea:53:08:
37:1c:f9:0b:51:78:94:80:1d:9e:cc:84:5e:21:73:
7a:28:e2:74:43:03:f4:36:6a:cc:c6:24:21:27:2c:
0b:27:d0:05:23:33:d8:9b:a8:60:80:c0:75:0e:4c:
78:e2:4e:99:00:4b:d1:45:50:bc:1a:68:30:f1:e0:
76:4b:0c:86:07:3d:0e:75:eb:82:99:a5:f9:99:89:
80:16:e9:c8:ee:05:41:79:aa:b4:07:7e:94:72:f8:
37:b7:eb:07:b6:ad:93:97:16:65:a7:08:85:95:25:
84:c7:cf:70:80:c0:c5:0c:74:dc:75:64:fc:67:99:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:C5:67:21:9F:AF:8C:52:A9:CB:CB:32:10:A4:8A:C1:C6:73:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f709cff-1636-3383-868d-85240b9b89e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:9e:03:a1:5f:07:b1:35:f2:09:16:5b:92:45:98:76:73:24:
a5:90:2a:dc:9c:2d:a9:26:36:d8:64:3c:88:9d:42:8d:30:8f:
76:2e:10:4a:33:35:79:89:2b:a8:0b:bc:97:b7:c7:f7:61:a0:
7d:58:47:55:06:94:ab:d8:40:95:89:63:f2:40:8e:b5:ab:d2:
fa:3d:4c:ed:df:fa:ff:34:7c:34:0e:fd:18:5f:35:8c:29:78:
de:6e:cd:7f:01:d9:02:27:0e:22:f7:d8:02:fc:94:e3:5f:7a:
5e:f1:f2:f7:6f:b5:e2:23:af:ec:69:56:e6:1c:2d:a5:ec:7a:
cb:dd:0f:cd:33:fd:3c:da:3a:1c:99:42:b7:6b:2e:70:d5:a9:
8c:4c:a7:70:b8:de:b8:63:26:5e:ea:b0:ff:ee:a1:d7:5e:f6:
e8:2e:17:f0:90:03:c3:1a:64:af:60:b8:79:c3:fe:66:31:55:
15:af:05:64:af:e8:7c:64:d4:e1:36:c2:74:f9:c7:7f:4f:44:
2b:99:0d:ec:b3:54:89:24:dc:ac:a5:95:26:eb:82:15:99:f5:
61:97:c6:56:62:e6:eb:f9:35:0e:b6:ef:d4:bb:18:dd:b5:2f:
d9:ea:9e:1d:15:a8:3a:7d:4d:ce:36:ac:d3:bc:3a:06:59:0d:
ab:b6:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:56:13 2025 by rpki-client