Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/433f79f2-8c8e-33d1-ab8c-cf828037bcb0.roa
File: 433f79f2-8c8e-33d1-ab8c-cf828037bcb0.roa (raw, json)
Hash identifier: Q5DmsR+a6/K1+35M8HlZLuTgig4aWHu7fuL4Nw6hnKI=
Subject key identifier: BD:90:C7:28:D1:66:32:E2:76:E2:08:B0:5F:F3:1F:86:F2:BF:08:FA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F018FAA44B133D2CBC6B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/433f79f2-8c8e-33d1-ab8c-cf828037bcb0.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397228
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:18:fa:a4:4b:13:3d:2c:bc:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=d4155a4b-b0d0-4652-b79f-549951662d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:fd:13:b4:d5:89:24:8a:9d:96:5a:57:3a:
c6:b8:3b:53:d2:99:14:1e:02:4b:09:e9:83:78:b9:
8c:db:29:90:e2:a5:59:e8:28:ac:e4:01:86:b2:b6:
3d:9b:d4:de:c9:4f:0d:1b:59:2c:12:3b:9f:07:49:
42:91:0d:7e:36:e8:bf:90:ff:6c:bd:d8:71:30:6c:
b0:7f:47:4a:64:62:0b:25:fc:17:76:1d:e9:27:09:
71:81:2d:a1:c5:b7:ef:1c:f7:a1:2f:61:ef:4d:4f:
6a:95:46:48:5c:08:ec:63:76:21:14:95:af:1a:9f:
c9:71:25:a9:1e:d0:21:01:ed:92:a9:28:40:9c:f1:
bf:6e:af:10:0d:26:a3:2f:03:3d:9a:4e:ba:a6:9c:
2a:64:a0:4a:2f:18:fa:de:c3:b9:a5:ab:be:5a:92:
0e:3d:ac:32:82:df:83:03:9b:fa:0d:8a:94:00:b0:
0b:d2:d4:64:c1:7c:99:0e:4d:36:ea:b9:48:b6:5b:
94:73:f6:fa:27:d7:0a:b9:ed:a4:46:4c:9c:6a:ff:
fc:98:59:b4:e6:b8:1c:d3:4c:9f:d2:57:e2:bc:cc:
e5:7f:85:10:41:66:32:44:e0:a3:46:aa:5c:9d:22:
f4:4f:7b:f1:f2:1c:34:3e:5a:48:4e:eb:32:6d:1c:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:C7:28:D1:66:32:E2:76:E2:08:B0:5F:F3:1F:86:F2:BF:08:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/433f79f2-8c8e-33d1-ab8c-cf828037bcb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:72:3f:df:a0:ac:45:f5:3b:63:1e:1f:12:0c:06:54:d5:6d:
0e:9c:93:7e:7c:dd:d9:a4:ba:25:3a:81:f1:fe:5a:a0:cc:ae:
79:b9:61:f6:a5:fe:39:fe:18:9a:38:df:bf:b9:1d:38:bb:b4:
db:b0:8f:e9:1e:76:98:35:c3:4a:aa:35:e0:6a:13:32:22:0b:
73:cc:1e:9c:b7:6b:9d:1d:39:6f:7c:58:30:b0:ce:60:69:d4:
d8:73:64:c0:72:45:84:52:bf:a5:db:03:0c:c9:8f:33:51:9c:
30:00:0b:ff:b7:4b:ea:8f:df:8e:bc:3f:01:57:f9:99:19:ad:
47:ed:46:38:24:2a:4d:0a:3c:07:22:17:46:87:7c:97:ae:26:
75:3e:4e:91:c4:27:12:0e:69:63:f5:80:0b:33:45:53:91:87:
23:99:2f:2e:6b:6c:49:2d:0c:04:85:c7:1c:a7:b7:ab:6b:b4:
37:b7:2e:ee:15:4c:e9:be:4f:ff:6b:fa:2d:a2:10:6e:30:c6:
6d:cf:b7:22:55:63:f2:b3:40:a8:d3:ec:4f:8e:d3:bb:10:5c:
3b:16:fb:d8:4e:63:41:08:e0:a4:c1:e7:46:42:68:3f:61:39:
4d:56:28:d5:95:83:cb:38:7d:15:83:c3:7d:8d:71:86:18:04:
80:1d:1b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:43:48 2025 by rpki-client