Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d189bdd4-3c26-3da6-b512-16b10f0614f1.roa
File: d189bdd4-3c26-3da6-b512-16b10f0614f1.roa (raw, json)
Hash identifier: Hs5jzQQc7W3rpqlOLsJHSg9NhGhuIQr1wfGeSGoCVis=
Subject key identifier: FD:6F:CB:43:98:11:91:AD:C4:74:FE:BF:46:90:09:02:00:F2:2B:9B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB6D3BE4596FAC00F3BC80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d189bdd4-3c26-3da6-b512-16b10f0614f1.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397231
IP address blocks: 156.154.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:6d:3b:e4:59:6f:ac:00:f3:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=8c8b512a-a850-4e47-bbcd-96b4f1eac5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:ad:81:49:bb:d4:d6:74:55:77:9b:02:0d:
7c:75:a5:80:e3:23:22:04:78:38:1b:47:81:ec:20:
5d:b9:dc:87:8b:f1:3d:be:6e:80:11:98:3a:33:88:
c7:a1:27:9c:7b:f8:d9:40:20:ea:a4:a9:b8:3c:34:
86:51:50:8e:9d:e6:8e:34:f9:47:97:e7:e3:29:5f:
dd:3f:97:56:9d:c9:ea:41:8e:90:50:aa:26:2f:a2:
2d:cb:06:01:d2:93:bb:c1:d5:84:1b:30:9a:f1:bf:
ca:4d:8f:1d:17:d5:24:7b:4a:10:4b:82:84:d5:75:
d4:3c:57:5f:3a:84:47:7b:5f:d4:7d:97:0d:fa:f8:
21:2f:a5:67:3b:2f:68:c6:8c:0e:ea:e2:2e:3d:0d:
61:00:03:4e:85:40:bd:4f:42:89:0c:23:d9:97:e9:
f0:07:9e:12:a1:ea:92:dd:ad:35:c4:24:74:8f:55:
de:74:d1:49:d4:bd:7e:85:35:a3:28:78:63:23:8f:
b7:ec:6e:40:8e:ab:fe:5d:41:f9:7f:cb:cb:2d:80:
33:4f:71:b2:76:a5:e9:9a:15:98:c0:80:ff:1d:32:
b7:1d:e0:7d:76:1b:31:83:f1:d6:dc:a5:71:a4:7f:
16:fb:17:cf:45:ea:38:bb:5c:ee:4d:bf:a6:66:87:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6F:CB:43:98:11:91:AD:C4:74:FE:BF:46:90:09:02:00:F2:2B:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d189bdd4-3c26-3da6-b512-16b10f0614f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:2d:c6:bc:df:3f:a8:6c:34:50:64:56:6f:fa:a9:67:f6:3a:
3e:ce:f5:2f:c7:9d:9b:4f:b5:d3:8c:59:ab:d3:5b:ca:bf:d0:
32:08:15:cf:17:75:16:ad:d1:2e:8e:b1:cb:ca:76:6e:77:bd:
57:f5:33:28:b9:69:1d:95:78:91:93:5d:f5:33:a8:68:b3:99:
24:c3:2d:1f:d5:55:68:4a:ce:e5:67:2c:33:4f:83:64:39:2a:
f7:95:87:b5:b5:93:2a:f7:f9:2c:00:19:9d:cb:08:fe:ce:86:
10:62:fa:22:5b:c9:5c:aa:2d:68:d2:74:7f:1d:08:69:28:eb:
f8:c9:57:a2:cd:9d:82:f9:9c:d2:ff:da:a3:c4:c6:34:e5:f2:
46:e6:67:a0:4c:ec:22:bc:c9:cb:98:a5:c8:89:d1:7f:54:18:
9a:e6:2c:90:26:cb:3b:65:63:81:7e:34:4a:a5:d8:e6:61:4f:
e0:fc:3d:ca:8f:3a:5b:2c:ca:f3:47:66:b8:24:5b:ab:b7:24:
f9:84:2f:d1:b6:5d:ee:03:7a:36:74:a7:c0:f0:0b:3f:72:3e:
ec:7e:01:00:74:6a:6e:59:4b:7c:03:b5:77:13:1c:50:23:93:
9e:ed:4f:52:a4:97:e2:0e:ca:de:ad:32:6d:91:a9:c9:b9:2f:
84:de:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:11:38 2025 by rpki-client