Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0fa2fae6-6186-3319-b62b-1a8caae944d0.roa
File: 0fa2fae6-6186-3319-b62b-1a8caae944d0.roa (raw, json)
Hash identifier: ZJbk80Uz5Y9cr5MIgosJp2H7Kqs1i6+KFBsuMA8NWkE=
Subject key identifier: 0B:75:AB:65:02:88:4F:C1:5E:DB:66:2D:39:92:21:05:B9:3E:1B:CB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0182E44EF0687041F6180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0fa2fae6-6186-3319-b62b-1a8caae944d0.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 19905
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:18:2e:44:ef:06:87:04:1f:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=18fd6e8d-2403-4e9e-918e-f222542e76ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:45:d7:49:f2:5d:bf:29:c4:39:45:44:78:
71:99:32:92:c3:db:ac:40:e1:5a:25:3b:cd:db:8c:
4a:38:cb:03:c4:4f:00:f3:3b:a1:4a:56:b8:ac:7b:
ec:57:81:9b:81:7b:15:92:90:eb:82:04:95:e1:e5:
4b:2c:4c:e9:3b:2c:0a:00:c9:a8:eb:34:37:b9:a3:
21:75:d5:7b:85:e6:f6:44:0d:90:08:dc:18:f3:69:
1a:ce:9d:54:3c:b2:9d:d3:27:2c:b6:50:8a:61:85:
8c:ca:b3:b3:35:08:4a:1c:ca:a9:cc:70:57:d7:15:
8e:56:cf:29:4f:d1:52:08:58:e5:b6:5c:3f:e9:c6:
e0:e9:5b:ac:ef:96:9e:eb:85:4e:a7:c6:9a:b3:0b:
df:ad:a9:94:19:71:27:c8:5c:1a:3d:58:59:de:4a:
43:03:e7:2e:e5:7f:21:dc:f4:69:d3:15:7b:1c:65:
75:d5:05:bb:76:86:bd:4b:c3:3e:8f:f8:e5:0c:87:
f9:8b:c0:0d:74:6c:3b:35:25:6c:5f:ed:8c:71:f0:
2a:07:84:37:60:ee:ea:9b:30:a6:ee:a0:24:0e:5a:
17:75:b2:c1:a8:28:38:b7:2b:86:93:80:88:ab:06:
d7:f3:b0:e6:6d:28:7c:74:ad:04:87:24:b4:ec:e2:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:75:AB:65:02:88:4F:C1:5E:DB:66:2D:39:92:21:05:B9:3E:1B:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0fa2fae6-6186-3319-b62b-1a8caae944d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:03:5c:8b:2b:53:da:7e:1e:02:fa:fd:8d:bb:66:21:e6:9a:
a4:5d:d1:25:db:c1:46:a6:d7:bc:57:2f:4a:22:d0:fa:f2:ce:
be:58:8a:4e:9c:54:68:4e:0b:ef:d6:7a:bc:15:5b:ef:b7:be:
f1:15:59:0f:db:96:97:b2:b5:c0:50:3d:6f:df:5a:0a:cd:f1:
1d:27:b9:20:17:e2:f4:8c:35:8a:2f:0e:0b:d7:82:e8:dc:bc:
75:e7:7f:bc:ac:66:a1:47:c8:dc:4e:ba:63:8c:40:92:a4:53:
1f:dd:b8:09:b6:b4:0a:b5:ca:8a:3a:5a:2d:20:72:26:4c:e6:
4a:e7:75:2f:10:13:07:27:d8:30:60:85:37:0a:f6:19:d6:18:
7d:58:dc:5b:b9:70:42:6a:f2:09:a9:4c:22:0b:f8:60:49:b4:
07:ba:ea:d5:e9:cd:0d:dc:8b:ed:82:85:49:d1:8b:0e:3c:84:
24:7c:e1:60:bb:dd:1f:7e:a0:a1:39:e2:b8:00:c5:43:40:c2:
2d:2c:55:a2:87:20:13:d8:14:50:41:ff:a0:fb:ad:0d:b0:17:
35:0f:86:b1:34:da:75:0d:7c:5a:b5:77:33:f3:b1:99:dc:1c:
d5:ca:70:3e:68:d8:75:c5:6d:f4:fe:39:09:ae:99:e4:c3:51:
d5:99:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:45 2025 by rpki-client