Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/913e2769-5140-36b7-bfe4-88068bee3359.roa
File: 913e2769-5140-36b7-bfe4-88068bee3359.roa (raw, json)
Hash identifier: 2X4eoEyfYSgIlVAlkl8DQv3U/Z6PuYBgD1WCbxLnjXU=
Subject key identifier: 4F:52:D7:74:A6:14:C5:33:97:C1:41:A0:1A:6D:49:61:A6:22:D8:E2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01753C967C20FF0405C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/913e2769-5140-36b7-bfe4-88068bee3359.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397230
IP address blocks: 156.154.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:17:53:c9:67:c2:0f:f0:40:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=1bc0052a-a4f3-4592-8078-0c7ae49b55c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:22:b3:e7:78:e1:d7:0a:60:fa:cf:ee:05:
c9:51:4f:0e:af:06:2b:6e:3e:42:a0:c5:f5:ae:b3:
7e:cf:2f:ef:c7:a7:fc:6b:de:7b:8f:49:29:4e:9f:
85:68:82:30:ad:b0:ad:b0:81:db:b4:a6:c0:5e:7c:
5e:66:48:36:7b:21:57:c0:aa:4c:f0:94:b7:35:bf:
13:e6:4a:89:66:d3:9e:7c:91:90:dc:8a:e3:ea:0d:
64:c8:b7:d9:40:7a:eb:29:34:82:25:b3:d0:f8:05:
71:1d:5c:1c:e2:f5:d1:da:6d:02:04:ed:22:1a:80:
c6:85:f9:89:4c:ec:de:f8:e1:ee:66:98:70:fb:d6:
38:a5:4e:72:22:42:9b:aa:27:be:e1:a6:c9:da:79:
ed:7f:a7:81:50:16:26:36:84:ee:79:5c:ba:8c:0f:
e8:5b:d3:c8:ef:b5:df:62:82:9d:e4:2c:3e:6e:d9:
0e:3e:3a:62:09:35:c1:83:2a:29:ad:a1:bc:50:f5:
64:a3:a4:17:b9:eb:44:c1:a5:ad:e1:e1:61:2d:4f:
6b:c8:14:71:4d:e7:c3:49:45:a0:36:70:b4:37:23:
92:64:ef:44:6b:f8:a6:87:0e:de:3c:1f:3e:e0:d6:
e3:6d:1d:93:b3:78:20:df:5c:c0:1b:20:2a:93:b3:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:52:D7:74:A6:14:C5:33:97:C1:41:A0:1A:6D:49:61:A6:22:D8:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/913e2769-5140-36b7-bfe4-88068bee3359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:21:82:04:9d:29:89:88:a6:b0:eb:ce:81:ca:8f:27:47:d5:
f2:61:1d:80:dc:1e:c2:58:63:b7:e1:0c:6e:99:a9:20:0d:e1:
a5:b9:d9:38:12:6c:f4:bd:d2:22:8e:7e:8b:8a:cf:c5:9d:65:
6f:eb:d2:39:3d:0c:47:a7:41:66:c2:20:3d:09:3b:d7:e7:fa:
ad:02:5e:aa:6a:ff:67:4c:e7:94:4f:55:ce:95:de:0a:ee:38:
c4:41:c2:21:a2:3b:2f:20:9e:bf:e2:f0:f0:c0:24:72:8c:e5:
7b:a1:ad:2d:1b:23:59:5d:29:af:b8:f1:40:93:dc:63:2a:46:
ea:1b:99:18:58:8c:91:9d:a6:a5:33:3e:53:43:2a:52:73:e9:
7a:52:3b:e8:49:0a:f2:3a:ec:45:1f:25:11:7e:e6:26:75:60:
a5:a0:b9:4a:98:ee:39:d1:77:86:d0:26:18:f2:f7:85:2f:95:
9c:a7:31:5a:26:68:18:58:f2:6b:52:89:30:5a:b6:52:7e:54:
4e:15:6a:5f:44:d4:31:9e:f5:8b:ef:21:1f:f7:85:1b:1d:b6:
b5:42:34:c7:fe:0d:5c:84:4e:95:5c:30:15:3a:c1:89:14:ef:
26:a5:f7:15:90:b5:63:ce:03:ed:c7:a2:37:45:d4:c6:29:27:
29:cd:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:38:55 2025 by rpki-client