Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa
File: 7c8c7fde-4524-3c14-85af-3a61f46e100e.roa (raw, json)
Hash identifier: rusbjkw122BnX3DtEWkMW+bR/LZNgrW5PW8ZJ5aIvvE=
Subject key identifier: AF:91:74:29:BE:33:61:2B:83:BE:EA:39:95:95:B6:35:18:0D:A5:4E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB5CA25B5C58632AE619C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397230
IP address blocks: 156.154.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:5c:a2:5b:5c:58:63:2a:e6:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=41e4ad80-a6ce-4936-8a71-0e267e3b9b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:88:ca:59:2b:27:8a:ab:ab:31:86:94:c5:
c6:89:61:e9:50:f4:77:b5:d3:62:b6:27:d7:d6:42:
ce:1d:83:03:bf:99:46:d2:ae:fb:4a:62:75:b0:b5:
5d:fd:be:42:4f:7b:b4:7c:b3:56:15:56:f7:be:ce:
c1:a8:4f:49:d8:40:3c:6a:e7:c4:d9:c6:94:43:b2:
7a:ef:13:89:6c:a4:9f:64:65:68:52:33:8c:c3:77:
35:c4:59:21:8e:44:88:4d:59:9d:e0:84:1f:9c:1e:
0e:09:ec:f2:6e:4d:09:26:c0:47:72:dd:24:5a:b1:
09:fd:f2:91:96:72:25:28:11:11:bf:e0:d6:7a:14:
39:e3:92:97:c3:f2:ff:05:77:b5:9a:91:0d:ee:a6:
a1:06:77:72:1f:cf:1c:b3:bc:ec:53:a2:81:d5:35:
ca:53:23:f3:38:28:b8:8c:ad:2b:4e:eb:2f:7e:db:
1d:90:a2:0c:6d:a7:48:c0:b8:43:d4:01:b0:32:95:
34:91:a9:e8:86:0b:7b:0d:0d:d4:39:fe:73:0f:7c:
01:95:f0:fb:59:cc:81:b1:57:f9:da:68:9f:7e:c9:
7d:ec:dd:16:76:d2:f3:04:34:36:29:90:0c:40:ca:
0e:bd:18:c3:e8:0f:51:59:d1:ab:1d:03:de:19:a2:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:74:29:BE:33:61:2B:83:BE:EA:39:95:95:B6:35:18:0D:A5:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:4b:b5:36:0d:b7:e5:66:9a:d2:ce:84:ef:f4:d9:d2:fd:27:
5d:0c:c3:0d:96:ec:51:f4:de:05:62:3b:47:cb:2b:b9:e6:b2:
a2:97:eb:6f:5b:cf:67:bc:b8:45:df:22:17:82:94:92:2c:8d:
71:7e:ca:9c:25:9f:57:72:99:ad:2f:ae:c4:8b:10:10:f0:cb:
14:48:59:4f:fe:11:5b:af:36:ac:30:c3:df:0a:e6:da:e2:ac:
f7:a9:f6:5d:de:09:6f:55:f1:df:68:6a:47:2b:fe:61:b6:05:
0f:ec:50:77:c9:41:63:bd:27:bf:4b:f6:2b:33:b1:bc:99:d4:
79:e7:28:4e:a5:e6:af:5c:ef:32:5c:1f:a8:78:b4:69:8d:e5:
4d:2a:da:9a:0b:36:f9:3d:c5:40:15:b6:ed:c1:d3:40:0b:cc:
20:51:c1:f8:d9:c8:91:53:98:dd:bd:a1:e2:0d:af:a9:5b:49:
19:a3:f4:5d:cc:b2:8b:f6:85:14:34:c6:e9:aa:ba:4b:26:3f:
6b:ab:77:47:36:10:08:9f:1f:2a:d8:5c:16:7e:ee:be:59:8a:
3e:71:6d:06:97:de:91:ce:bb:72:a4:89:15:f3:02:c0:7b:d3:
51:47:a6:10:1f:14:47:34:4b:12:c7:0e:f0:9d:1b:d2:e7:50:
c5:f6:09:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:30:52 2025 by rpki-client