Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa
File: afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa (raw, json)
Hash identifier: vL0KFJ/9tiILgDc92xrU+jY6D6NscA8GkzpGpuzQe+k=
Subject key identifier: 43:FA:9C:1C:3E:AF:52:EF:8F:E8:77:CD:31:66:34:0D:44:72:F3:0B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F008FFED64F2F23D2BC8A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397240
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:08:ff:ed:64:f2:f2:3d:2b:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=d06a0632-a6a5-4f0a-8622-bda9ab75bf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:2b:d5:6b:23:1a:f6:f1:98:27:2d:65:87:
b2:2f:94:ab:98:6e:69:bc:1d:60:0d:fe:1b:95:af:
e7:56:2e:9c:eb:82:03:c8:57:da:9b:ad:09:7a:db:
46:55:32:0d:e5:b3:64:15:3b:76:d1:6b:47:58:d7:
5a:af:16:0b:6e:3e:0c:6d:6a:96:8a:83:e6:72:4c:
0a:e4:88:cb:df:e9:de:89:19:55:da:18:a8:06:0f:
b3:85:c8:96:25:a3:be:6a:24:69:9b:b9:3b:bb:69:
14:60:5a:71:de:47:c1:56:65:ee:7a:de:e9:2d:50:
72:a7:4f:85:5a:1a:d8:33:b8:55:94:73:10:69:b1:
c2:f3:21:86:f9:e3:8a:bb:74:d6:1b:2b:21:1e:89:
1f:17:d6:94:24:2e:4f:05:23:ac:52:2f:63:85:26:
6a:0e:f0:9d:74:02:73:e5:bc:c4:a3:ae:0f:9b:44:
63:b5:f2:19:bd:0d:94:ac:0a:f7:7c:69:dd:30:63:
b4:8a:59:bf:b6:12:b1:3a:ea:e3:e5:c2:e3:47:3b:
ce:17:1b:a8:aa:7b:97:99:5f:0a:30:c8:33:59:5e:
4e:eb:2a:a1:9a:de:67:46:50:66:08:c5:72:f8:f5:
33:fe:d7:e7:a8:46:cb:cc:4d:af:7e:a8:86:a5:eb:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FA:9C:1C:3E:AF:52:EF:8F:E8:77:CD:31:66:34:0D:44:72:F3:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:4c:4e:24:b7:b9:bc:b0:be:1a:42:a8:88:de:d2:c1:05:a3:
33:a7:c4:71:09:fb:93:52:73:45:77:ff:cb:cf:7c:b9:9b:5b:
e4:d4:f6:07:6d:68:59:bf:c5:3b:c7:0c:7d:0d:98:c4:70:44:
8c:91:4b:da:65:e9:26:72:fc:fc:1d:c8:2e:03:4c:e9:6b:f9:
f7:54:b0:fd:66:92:3e:88:af:ed:2f:eb:aa:af:dd:fb:88:10:
b2:49:fc:37:a5:7e:0f:7c:fd:ae:06:45:a5:6e:5c:c1:8f:7a:
79:60:9b:21:51:ce:b1:ba:74:64:ff:00:4c:49:db:33:79:04:
c9:a5:61:fb:5b:68:63:d1:f7:31:1a:45:30:3d:c3:bb:e1:30:
58:39:6f:92:7a:36:1b:aa:83:63:3c:e7:a9:87:8d:90:d1:24:
dc:c3:94:25:7a:47:c7:f9:04:e6:2b:ab:12:10:0c:d3:4a:d6:
b1:7e:77:dc:9b:0f:76:dd:72:2a:48:4a:ba:05:58:76:cc:84:
b6:8c:4d:a4:fc:6f:c9:bf:3d:c5:3c:5e:5c:23:4d:49:f5:43:
68:ee:92:99:bd:6f:8e:54:1d:db:4b:08:93:e0:7a:f9:fe:d2:
56:3e:25:ef:b3:45:a0:09:6e:b5:4a:80:9f:ab:23:05:ec:14:
fb:1a:a6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:04:47 2025 by rpki-client