Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/61fd165d-07b9-3dc3-a0a6-6b8b13e2ec82.roa
File: 61fd165d-07b9-3dc3-a0a6-6b8b13e2ec82.roa (raw, json)
Hash identifier: Sa7dL+vCVSK+4k6I2kLuH4VyVkRzF9T5vuIyNd6VIw8=
Subject key identifier: 39:5C:BF:14:02:12:42:53:2E:99:85:90:34:2F:16:02:CE:89:EE:3A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00A33566B2A3D8DFA7A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/61fd165d-07b9-3dc3-a0a6-6b8b13e2ec82.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397228
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0a:33:56:6b:2a:3d:8d:fa:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=51410801-6d82-4b53-96be-359bd8b2c4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:3b:f6:3e:f8:1a:85:f7:de:cd:02:77:e9:
f0:10:19:45:d3:d2:d9:0f:35:c5:a5:e3:32:9f:88:
48:61:63:ea:4e:33:b3:3c:3b:17:46:e5:f6:c5:9c:
f6:f7:04:8f:cb:84:6f:27:3e:65:cc:3e:1a:cd:dd:
f0:cc:03:75:08:eb:88:d6:17:b5:61:9d:2a:a9:b4:
ef:0d:c3:62:2e:1b:95:06:15:b7:a5:a0:d8:7f:98:
35:ab:be:44:72:4d:0c:78:f0:fc:e3:a9:c5:1e:b7:
1f:ae:aa:d8:89:65:1f:23:aa:f7:a3:a8:25:31:55:
6e:f9:64:94:d1:7f:eb:b8:2f:eb:e6:9d:f3:26:26:
b2:9c:b5:67:14:5b:8b:17:bd:60:73:03:ff:27:af:
04:38:11:ef:7d:fb:2d:c6:57:1a:47:ca:c6:79:2d:
09:ac:db:33:d2:5c:0f:c6:b9:b0:64:49:c8:20:b8:
4d:9c:df:60:e8:6c:c0:23:09:f2:a2:9c:01:58:be:
cd:63:e1:2b:63:f3:88:fa:b5:29:5d:41:00:03:87:
85:03:72:ab:47:ae:0e:64:c6:36:31:a8:5d:3e:c4:
fa:96:f9:ad:4f:43:07:d1:d4:0b:ed:83:57:13:bf:
12:cf:2d:dd:e0:3d:5a:f2:27:f6:ed:ca:f8:dc:c1:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:BF:14:02:12:42:53:2E:99:85:90:34:2F:16:02:CE:89:EE:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/61fd165d-07b9-3dc3-a0a6-6b8b13e2ec82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:92:04:9b:d2:ef:12:a1:b7:e0:c2:a3:fa:5e:4a:7e:75:2c:
f1:b8:b1:fd:92:10:40:86:86:07:55:8f:dc:b3:ac:1f:8e:40:
d0:a3:35:e1:2a:c8:03:6d:00:50:ed:42:10:d8:5d:3a:0b:62:
c7:46:0a:38:62:4b:03:fa:50:04:1c:2c:b2:06:23:82:fc:16:
a6:c0:d0:62:d7:b8:4d:b5:da:9a:e6:0a:b2:e2:a2:08:70:28:
e5:21:78:08:8c:74:fc:f0:7c:60:e9:5e:eb:0a:c5:37:73:d3:
e1:64:de:96:24:e2:d1:9b:6c:30:5c:8a:38:23:6e:9f:a1:d8:
92:6c:27:5f:7d:2f:a2:06:56:68:36:40:36:2c:d0:17:11:20:
e8:72:c6:90:11:da:0a:d0:dc:a8:d4:c5:b7:6e:c7:94:7b:26:
b3:01:57:af:f0:d5:4c:a1:46:00:09:84:d7:27:90:27:e2:1b:
ed:ad:c3:52:d9:af:86:89:7d:23:74:f7:e9:65:5b:08:42:9d:
9c:a1:d1:84:f5:0f:48:d1:64:a5:3e:1a:29:ee:86:25:b4:17:
4a:13:3d:87:9b:dc:14:07:1c:7a:ce:ea:c2:53:5e:45:cc:1b:
62:3f:01:c5:9f:f7:6e:fe:8b:e4:b2:b4:43:a2:75:65:73:1f:
33:77:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:45:48 2025 by rpki-client