Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52d2f7cb-e8d1-39dd-b1ce-fe4fa8819f7f.roa
File: 52d2f7cb-e8d1-39dd-b1ce-fe4fa8819f7f.roa (raw, json)
Hash identifier: Tef4x1QYuqz9mm39pyii+0mu713Vlqg9Lye49Q4bJyE=
Subject key identifier: 89:D6:61:D8:8F:16:62:77:5F:9A:46:08:00:F8:35:B2:FF:20:5D:45
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01160804523BFF8153E00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52d2f7cb-e8d1-39dd-b1ce-fe4fa8819f7f.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397221
IP address blocks: 156.154.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:11:60:80:45:23:bf:f8:15:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9e99c3ea-e4a5-40d3-8a7a-e642e1483a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:71:31:ee:99:95:91:05:77:34:e4:0e:b2:
20:46:a6:af:e6:62:e7:61:97:0d:3e:58:67:d1:f0:
08:cf:70:c4:0b:ed:e7:76:4c:40:0f:1f:46:f2:02:
81:0a:97:1d:2c:54:45:df:b4:47:f1:71:f1:72:4a:
8c:e5:62:1a:62:b0:99:3a:cc:9d:2c:34:e1:95:aa:
90:f7:f7:e5:dc:25:5c:a2:fd:37:43:08:51:fb:4c:
10:0b:0a:f2:14:96:cc:4a:80:04:d7:d4:24:0d:5f:
96:05:ec:0e:40:9a:0b:b4:27:d9:97:87:3d:e0:1b:
f5:a4:a6:1d:4e:4e:61:6c:a8:33:eb:71:ee:60:52:
71:53:ab:64:35:d3:6b:65:a1:38:f6:0f:c9:52:d1:
5c:25:27:c2:e9:47:8b:c7:75:2c:1a:8b:7a:15:83:
36:17:32:66:a3:cf:45:91:08:e7:e5:3b:ba:fc:3e:
c7:34:c8:71:2b:c7:86:c1:72:47:fa:55:fe:31:4c:
f4:f6:5d:5d:c8:31:5d:b3:24:e9:aa:25:df:8b:76:
fb:c1:58:55:f8:9a:6c:7e:48:ce:79:14:bb:e3:90:
41:36:17:8e:20:bf:f9:ae:65:6d:94:53:30:2b:df:
42:e1:54:3f:01:c8:f0:98:ce:3c:e6:5f:7e:9b:63:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D6:61:D8:8F:16:62:77:5F:9A:46:08:00:F8:35:B2:FF:20:5D:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/52d2f7cb-e8d1-39dd-b1ce-fe4fa8819f7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:d6:4c:7d:ed:d8:75:05:0a:27:51:e9:11:6f:63:db:e4:af:
39:29:b4:34:97:ab:09:24:04:20:cd:fd:a1:9e:be:5c:50:dc:
54:ab:5f:ca:3b:41:c1:6e:93:42:7f:4a:26:f4:45:ad:b8:3f:
09:38:b2:16:c9:00:a5:be:65:5c:1e:f7:0c:9f:53:9f:86:b0:
71:48:8e:70:7f:0f:6a:52:0a:96:ac:bb:5d:79:ff:0b:ca:20:
a5:b0:21:68:67:fc:4c:52:56:e4:f0:f3:38:88:4b:e6:9f:a6:
ca:00:f4:23:13:99:92:d4:0a:31:73:59:4f:8c:4b:4f:c9:66:
ff:91:da:8a:af:7c:65:3a:ae:f1:04:79:c9:04:af:35:5e:40:
01:cb:b5:9b:01:16:b0:65:ee:c0:92:0f:1c:f1:e9:d6:47:e2:
ea:c9:aa:19:71:57:15:d0:a1:bf:ec:2c:11:2d:c3:2e:1a:32:
d1:90:3a:28:5b:5a:2f:1e:d6:f0:fe:06:41:a8:1a:89:3c:57:
2c:99:e1:70:0c:d1:36:8e:50:4e:a9:ca:42:c3:c8:c2:16:c4:
5b:23:71:d8:98:85:fb:64:90:52:6d:4a:fa:aa:39:e2:1d:27:
31:40:88:96:2f:d9:2f:85:ac:88:88:8f:a5:ca:23:0c:3b:32:
bc:99:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:43:51 2025 by rpki-client