Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b26088f6-70fb-3b5b-9c15-a14eadfc0a2b.roa
File: b26088f6-70fb-3b5b-9c15-a14eadfc0a2b.roa (raw, json)
Hash identifier: A2lEUNAQGlYHVtgjFHyAyeBnClhzYyMZBCZ5EmQF5Bw=
Subject key identifier: 73:61:1A:C5:C5:FA:8B:DF:F6:CE:0B:0B:0D:EF:5E:04:EB:C5:BF:58
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01103CD642BBC7BEA30C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b26088f6-70fb-3b5b-9c15-a14eadfc0a2b.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397215
IP address blocks: 156.154.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:11:03:cd:64:2b:bc:7b:ea:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=d8edb09c-5fbe-4865-8128-b3d09d7e29b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:d2:fc:9b:7b:e3:91:a7:25:78:ea:be:47:
7b:bf:33:39:fc:1b:96:cf:40:83:76:f5:3d:db:9f:
9a:7b:d7:64:6e:51:26:31:c0:ec:62:18:e0:c7:eb:
e3:15:40:1c:e3:d4:6c:ab:81:1c:02:c2:e3:cf:74:
3e:a3:cd:f8:f3:83:d8:e5:33:c4:c2:c2:88:92:79:
8b:90:a5:09:60:26:bf:66:ee:3b:ba:8a:03:06:77:
4c:90:26:09:59:69:94:4f:03:da:46:48:52:27:7f:
02:30:e3:3e:49:ac:72:9f:0e:2b:4f:97:5e:81:ad:
82:7e:15:f2:04:70:50:88:60:47:c5:30:53:b4:cb:
0f:df:f3:ff:d5:77:0c:e9:b9:53:ea:6a:12:00:c7:
c9:56:87:1d:40:4f:06:36:86:0e:ce:19:c3:78:07:
e5:88:c7:17:de:db:2d:ac:43:58:8e:e5:b1:72:37:
76:b9:c0:1d:44:92:e0:04:a3:06:44:e1:09:57:45:
c1:14:f2:00:83:3f:56:0b:f0:b0:b3:64:6f:ef:af:
5a:29:9d:b8:c8:ad:4c:a4:35:bd:77:3e:1c:9f:f3:
63:73:56:c5:be:6b:d9:24:e0:b6:f1:c0:70:da:af:
21:93:69:da:17:c4:fe:c6:e5:fc:6e:4a:82:9d:37:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:1A:C5:C5:FA:8B:DF:F6:CE:0B:0B:0D:EF:5E:04:EB:C5:BF:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b26088f6-70fb-3b5b-9c15-a14eadfc0a2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:69:5c:51:cb:08:bd:e1:89:b9:a5:b3:b8:02:69:2a:26:62:
2d:49:ff:08:3b:ce:88:52:af:07:d7:6e:73:72:d0:2c:90:87:
8d:a1:b5:47:8f:b9:0b:f8:6d:ab:cc:4a:9f:58:90:d8:00:5b:
93:ef:fa:15:19:2f:71:60:27:4c:58:f4:c7:e3:4f:e3:6c:cd:
70:5c:8e:35:64:4c:03:ce:bf:b4:2f:05:a1:2f:e5:77:6b:04:
70:10:d9:54:85:6a:12:43:f5:f3:e2:63:81:15:b7:cf:bc:3b:
31:6c:fe:4f:c9:cd:32:e1:fc:2e:41:7f:b9:38:4a:17:bc:6f:
27:95:d4:e2:72:40:0b:22:54:97:38:0b:5b:9b:dd:e7:e7:fa:
3e:c2:ef:db:8f:44:ad:f8:db:f5:f6:b6:8b:69:7d:7b:b9:66:
49:32:ed:06:65:7d:3c:09:3e:1a:03:bc:e6:49:12:02:6f:53:
ab:de:1e:ee:39:52:1b:65:35:71:c5:dc:ed:5a:c6:34:a3:e0:
7e:f9:84:12:fb:24:2d:58:8a:df:e6:c4:2b:f4:35:9d:9d:85:
38:db:34:f6:59:c7:b2:6b:59:a6:03:7d:3c:96:c5:eb:1c:83:
6b:a7:d4:e4:0e:81:69:74:69:fe:4a:1f:7c:1f:19:4b:b8:e8:
c1:0b:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:37 2025 by rpki-client