Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b16d3b4-7a65-3de5-a663-1528b7b67d68.roa
File: 8b16d3b4-7a65-3de5-a663-1528b7b67d68.roa (raw, json)
Hash identifier: 6/+Q1Uw8jf6OfSQ1JfJ8N+jeETOQrDwWWQzkNtooFbA=
Subject key identifier: 96:FC:3A:E2:74:91:A5:A7:8A:0D:DF:7C:E9:EF:EF:21:55:62:A0:F0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00B69F2A5B731EE173000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b16d3b4-7a65-3de5-a663-1528b7b67d68.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397215
IP address blocks: 156.154.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0b:69:f2:a5:b7:31:ee:17:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=d49db37e-931c-4192-a4a1-e6c17da3b39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:1d:47:f2:b5:ea:9c:75:4b:ac:88:3d:60:
c1:5f:b0:1a:9f:af:29:87:5b:28:f2:a3:a4:1e:9f:
c6:3d:64:0d:c7:88:8a:fa:4a:d8:e5:20:34:d5:fc:
22:d9:d3:db:95:ca:09:9a:ab:8b:54:c6:01:4b:cd:
6e:24:3b:0e:45:40:69:0f:cf:bf:dc:85:62:95:d2:
f4:48:d7:fa:bf:44:0b:b3:04:fd:ff:b8:b1:84:be:
46:c4:dd:ec:df:a1:ce:a7:54:cc:4a:bd:7d:a4:75:
88:7a:7e:4b:15:9a:1f:24:e9:91:a4:97:40:31:ea:
74:81:be:f3:96:f5:c7:d4:fd:ce:e9:2c:c3:47:3a:
c1:da:5f:21:42:bb:84:b4:63:b9:19:74:8c:ff:73:
42:39:6f:62:62:6e:80:17:0d:f9:9b:3b:2a:69:7f:
45:13:67:03:c4:4b:14:4c:36:5d:d3:c5:a5:4e:94:
fb:49:7a:30:92:03:9b:13:7b:6c:7e:8e:f3:df:03:
d7:85:01:a7:5d:ef:ff:a1:2e:93:0e:36:93:5e:4d:
de:da:ee:6f:0d:5d:ae:fd:c0:1d:f9:63:b6:82:d3:
47:9b:ea:1a:76:b2:90:66:4d:de:d9:d6:82:09:ca:
3c:d5:49:ba:29:e0:f8:88:07:91:f2:25:65:56:2c:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FC:3A:E2:74:91:A5:A7:8A:0D:DF:7C:E9:EF:EF:21:55:62:A0:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b16d3b4-7a65-3de5-a663-1528b7b67d68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:27:0c:65:c2:0f:d4:8e:1c:b2:f7:8a:b8:ea:f4:82:82:58:
7d:e9:b9:dd:ba:a9:67:5e:20:25:bd:be:b7:95:68:fa:75:79:
27:24:06:6f:a9:82:ce:7f:d5:b7:11:c1:c2:a6:f7:22:74:4f:
01:4b:55:45:80:95:1d:ec:c9:2a:5e:a6:4b:95:f0:2e:84:e8:
c5:e9:54:ff:14:2e:fb:75:0e:01:c6:82:5d:02:1f:1a:ae:54:
5f:dc:50:a6:37:ad:85:2a:4c:93:1d:ca:7d:57:3a:d0:e4:ee:
ce:ba:3b:1a:6c:cc:d7:3b:16:1c:30:91:7c:a3:44:81:dd:07:
81:cb:47:54:f2:4f:6c:2d:b5:d6:ef:83:79:1d:82:39:ca:c3:
14:ff:57:e2:a0:fd:03:2a:1b:ba:de:51:02:37:01:27:1e:bb:
f7:3b:2e:ea:e3:6f:76:b7:8e:44:ee:a4:32:75:08:16:35:9f:
ba:35:ec:e0:d1:ae:77:8b:27:c9:ed:94:35:82:68:dc:da:9b:
18:43:29:9a:27:c2:c9:26:73:60:2c:45:1b:7b:91:2d:4d:7a:
fd:1a:86:27:35:77:52:94:22:9d:10:2e:9f:7d:26:a0:95:5a:
f3:3a:fe:bb:ae:df:66:86:dd:41:eb:0f:98:85:a4:44:61:db:
95:84:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:29 2025 by rpki-client