Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6ee18cac-eed5-36aa-be5e-e9b88016c7f0.roa
File: 6ee18cac-eed5-36aa-be5e-e9b88016c7f0.roa (raw, json)
Hash identifier: GtSgmfuQCjm7CKBLxwwHv5D3M5W5GJsEBS3FOjF16Bc=
Subject key identifier: D1:D4:0E:33:E8:93:B9:B0:43:C3:D8:51:5B:89:8D:36:F2:02:16:11
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00C3DE1B3445B91ACE610
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6ee18cac-eed5-36aa-be5e-e9b88016c7f0.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397229
IP address blocks: 156.154.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0c:3d:e1:b3:44:5b:91:ac:e6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=2da64bef-c6d1-4a98-8d15-54e3b16f4592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:97:ee:e2:92:60:09:f5:cb:20:49:27:ed:
15:13:a1:6b:d0:1d:c7:bd:41:1f:fa:ca:de:b9:cf:
ed:84:fe:4f:a9:51:48:4c:c0:78:48:55:52:54:4b:
e7:5a:bb:ea:8f:75:6d:4c:6d:22:9f:4b:52:40:cb:
a0:ec:0a:08:34:a0:d2:7d:4b:c1:3a:0b:b3:c4:7b:
f6:7d:1b:62:89:eb:a9:1f:7b:47:36:0b:cc:82:1f:
1f:59:0c:9d:a2:86:d1:cd:4c:42:09:60:f1:ad:d9:
5e:91:c7:04:38:69:68:be:35:3a:cd:9b:0d:ac:a8:
0d:4e:1b:92:42:c8:33:93:3c:e2:5c:53:68:79:b6:
49:82:5c:17:20:54:12:4a:7a:95:ae:a7:4f:38:5a:
04:88:c8:22:a3:73:96:3d:a5:35:d0:44:b1:f0:1f:
c5:57:f8:84:3f:2b:af:b1:77:41:0e:72:02:0f:0c:
1b:26:32:9e:e3:66:59:e1:75:d0:09:13:e0:6b:bc:
8c:92:88:8e:df:3a:f5:23:4c:c7:dc:1a:36:b4:b7:
e0:34:6f:07:e9:ac:8e:39:b4:81:66:65:d1:c6:3b:
cd:44:57:05:3f:e6:6b:34:35:6f:63:f0:67:cc:ab:
a1:1e:75:81:59:7d:b1:29:61:71:5d:18:ac:4a:6d:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:0E:33:E8:93:B9:B0:43:C3:D8:51:5B:89:8D:36:F2:02:16:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6ee18cac-eed5-36aa-be5e-e9b88016c7f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:d5:ef:61:16:a8:2c:17:09:3e:ae:0c:ad:fd:d5:a8:db:49:
ec:7d:cd:4b:b3:3d:f8:1f:9a:86:6d:60:76:7a:f4:9c:0b:62:
22:49:95:21:64:ed:78:c3:ab:8f:62:b8:01:e2:58:ef:9d:32:
63:9a:8a:83:51:a9:f1:03:1f:2e:6b:62:80:41:2d:50:e5:a3:
06:fa:84:8d:59:9f:73:2f:d6:a3:94:02:a7:be:45:7a:b0:2d:
ab:67:26:04:cb:70:f1:60:a9:e4:fc:79:1b:a3:11:7a:3c:c0:
97:a5:ea:b0:85:3c:19:87:ab:73:05:a2:29:77:59:0d:a2:c7:
db:0f:bf:fc:43:4c:0e:4c:14:a9:5b:9d:31:05:54:b3:0d:a2:
9c:26:4d:2c:f5:72:23:af:5c:82:1c:f3:71:53:f1:aa:15:d2:
9f:c2:83:d5:2c:64:ab:d2:65:4b:8a:1d:62:4e:f4:c4:da:58:
e6:71:14:6b:eb:9a:71:ac:71:af:76:db:ae:af:f9:54:78:0b:
2b:38:64:6e:58:79:19:4e:66:d0:a7:79:f2:9b:38:58:88:64:
b7:08:b4:42:f6:44:d8:c9:6c:bf:db:14:41:da:4a:39:58:14:
80:87:e4:3a:88:80:83:2c:a9:9a:89:9a:69:0e:58:dc:c0:d1:
17:0e:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:43:35 2025 by rpki-client