Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8fdbe9d-7347-3c8a-824b-b5e555d1f2d9.roa
File: f8fdbe9d-7347-3c8a-824b-b5e555d1f2d9.roa (raw, json)
Hash identifier: MtGPtAHJKdzIpochnZRdImMPpy3neUkhzNYHbB2Wfg0=
Subject key identifier: 5E:A4:6A:66:52:86:D9:9A:76:5D:AA:9C:8F:A0:91:B6:12:57:C9:71
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB6AE22CE7A5AD994FE900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8fdbe9d-7347-3c8a-824b-b5e555d1f2d9.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397219
IP address blocks: 156.154.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:6a:e2:2c:e7:a5:ad:99:4f:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=640f14a9-8f97-4d57-bc98-bf98acbc8d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:20:fd:69:49:3f:97:5e:dd:74:bb:6c:93:
4b:f4:12:45:86:73:48:92:b6:2b:ec:37:da:e1:a6:
57:f6:93:39:19:01:8f:b2:66:65:9c:d0:b7:5d:4b:
1d:3e:b6:9e:e6:dd:3b:1c:e7:9c:ec:c1:bf:dc:50:
10:63:8c:ca:a8:1d:7e:a2:42:dd:c9:ed:51:03:ce:
74:f0:aa:3a:2a:92:e2:01:35:8f:1b:41:7c:f5:69:
42:ee:fd:2e:83:07:4d:56:8d:1c:61:e2:22:f1:6b:
4f:a6:16:c4:ff:b7:82:cb:42:80:c1:8b:e7:fe:19:
c4:40:b3:4e:fe:a0:90:78:76:48:13:4c:df:ea:8f:
58:97:33:08:23:ae:1d:f4:f1:61:91:22:20:09:45:
65:0b:c5:b8:2b:47:d0:fa:bf:82:46:7c:4a:3f:e4:
16:f2:3a:c9:e4:51:42:74:56:7e:2e:c0:06:90:c0:
a7:85:c6:18:9f:f4:5e:f8:c5:fd:69:66:50:3f:b7:
cf:af:d9:5c:23:0e:67:86:7c:bb:b8:f0:37:1f:9e:
af:f8:a1:5d:be:2b:2a:c8:3b:82:93:f9:c6:a7:58:
02:3b:a5:23:01:25:ad:6d:6d:9b:55:6e:2e:ad:1d:
b5:4c:7a:96:cb:df:8b:26:b6:44:38:28:a5:f3:55:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A4:6A:66:52:86:D9:9A:76:5D:AA:9C:8F:A0:91:B6:12:57:C9:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8fdbe9d-7347-3c8a-824b-b5e555d1f2d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:8c:10:41:90:42:a4:a3:3e:76:7f:b1:08:e6:50:52:ff:7e:
cb:32:ca:29:91:4a:22:d1:a3:dd:0a:95:37:25:bf:fe:47:68:
ba:a8:51:95:64:e8:be:ce:d3:86:1e:c7:aa:eb:de:4f:cc:c6:
19:62:1c:ca:40:4e:cd:b8:e6:70:43:99:63:93:37:88:d4:6a:
89:7f:d8:08:17:f4:b7:12:15:9f:42:42:71:03:f8:ec:f6:22:
eb:9c:c8:7e:3a:9d:75:11:d3:08:48:0c:b8:95:24:66:a0:56:
ba:55:cd:6a:da:92:5b:4d:71:31:1a:ba:43:21:4e:0d:72:0e:
ad:40:49:36:8c:9c:ed:06:3f:44:3f:84:dd:28:ed:3c:bf:fd:
4b:95:e2:6d:51:c5:40:75:2d:58:54:29:6d:a8:5b:c9:92:fc:
b4:cf:80:b2:7a:8f:1a:8b:82:e8:9a:85:1a:cd:c9:7b:3b:c5:
4f:ef:21:9b:37:9c:68:8d:13:6e:a5:94:f6:1e:6e:c0:62:74:
d1:7a:ba:7c:a8:60:6b:74:f3:24:69:32:d4:76:aa:e7:d1:af:
16:50:48:7c:2c:45:52:f1:c0:3d:f5:ca:5d:5f:bb:b8:d0:4b:
3d:79:8b:a4:7a:cf:d5:e8:53:e7:db:f3:a5:c9:11:90:79:6e:
a1:8c:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:31:01 2025 by rpki-client