Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2cf300a-ebc5-36f5-9098-f2abd0455ba7.roa
File: b2cf300a-ebc5-36f5-9098-f2abd0455ba7.roa (raw, json)
Hash identifier: 1KfyKii1DccCrGcIY/YZIAew+LMARNHh0AKdduYZ9iM=
Subject key identifier: E1:D9:F9:69:B1:AD:A6:B9:02:C5:73:D4:CF:D9:16:F3:60:DB:4F:36
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00539F18FEBBE7A586F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2cf300a-ebc5-36f5-9098-f2abd0455ba7.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397240
IP address blocks: 156.154.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:05:39:f1:8f:eb:be:7a:58:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=099f4c21-71d3-42ac-ace6-7c5de3023c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:ad:b9:67:95:ee:ad:b0:ca:be:60:32:ef:
35:16:84:bb:96:b2:b9:b3:19:5a:f1:46:62:83:c0:
26:5b:0d:f9:a3:d3:47:f2:9f:71:15:01:12:ca:ef:
f2:40:10:4a:13:89:f2:4e:fa:78:7f:12:e9:6a:63:
89:b0:c7:72:df:c0:94:0f:42:2d:56:7f:81:2f:06:
95:51:28:a9:f1:51:be:57:73:20:b0:e7:0c:ef:11:
e0:2b:f9:7d:77:82:67:25:62:62:fb:70:a9:8a:72:
50:64:07:f2:f3:57:0a:09:c7:39:43:b1:5e:1f:8c:
75:94:72:d8:3a:1d:bf:4c:3d:4d:92:66:5e:d6:87:
8a:c0:d4:48:cb:7a:8f:6c:3a:f9:f7:1d:41:20:4e:
7c:33:4f:6f:1d:f5:e2:ec:4f:61:cf:24:04:e7:61:
91:c9:bb:58:e0:d1:62:30:95:fc:b3:70:63:47:33:
03:1b:73:1a:73:c5:69:ff:e2:90:79:f7:76:ba:0b:
34:99:d2:e8:26:20:69:83:43:6a:4f:08:c5:ee:b8:
32:da:0d:61:8f:11:8a:71:7d:02:41:42:e2:20:2c:
c9:2b:95:2c:f6:6d:2a:79:69:68:56:d6:57:2e:5b:
49:8e:2a:10:5e:77:d4:ce:8a:41:f8:bd:5e:86:de:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D9:F9:69:B1:AD:A6:B9:02:C5:73:D4:CF:D9:16:F3:60:DB:4F:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2cf300a-ebc5-36f5-9098-f2abd0455ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:82:3a:37:7f:95:e5:05:95:7a:c4:de:48:3e:82:f3:55:82:
88:cb:75:3a:a6:07:7e:03:bd:6e:70:0a:b1:27:6a:6b:70:a2:
01:f4:1a:df:83:b2:c8:d7:f3:d8:69:b9:dc:5a:c2:6a:e4:e0:
ae:a7:7a:40:5e:ee:d6:e0:33:a5:84:81:97:b9:a8:49:c4:6d:
f9:a7:bb:e8:5e:6a:19:db:89:7a:56:c6:4f:ab:1f:15:72:92:
3e:b0:ad:a7:ee:ae:9a:a4:a2:44:70:08:ea:e5:7e:f8:c6:6f:
cb:4e:33:f3:36:21:62:85:c3:c0:9d:8f:79:ce:78:0d:ff:15:
74:4b:22:ec:fd:de:a1:7c:da:c5:cd:8d:6c:e7:4e:1c:dc:41:
0e:df:f0:3e:b1:94:02:f6:83:89:22:59:a3:d2:b8:97:d7:f3:
f4:46:24:51:3e:bc:77:a8:e8:b7:7f:ed:3b:6e:6d:e2:bf:76:
64:13:81:d1:e8:cf:10:f5:d3:4c:a3:78:3c:88:a1:4d:c7:61:
21:0e:a1:36:ab:8c:cf:8c:46:b4:95:c0:18:29:26:c6:9c:de:
b5:87:29:34:a1:3e:bc:6b:56:5a:08:34:14:8e:b4:6a:b5:e7:
19:69:7e:9b:f9:ac:81:de:fc:20:b9:a9:e9:9a:53:38:1a:f1:
af:d5:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:43:26 2025 by rpki-client