Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa65a223-5cef-353d-ac3c-5a05a1c4f3eb.roa
File: fa65a223-5cef-353d-ac3c-5a05a1c4f3eb.roa (raw, json)
Hash identifier: t44WRgNp6klwVs2nLs8kSGzQvsNsRtzWfauTSZNm7pM=
Subject key identifier: AF:1F:BB:3A:A4:60:44:C6:F5:BF:96:11:4C:47:27:D2:59:AB:E7:47
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0133C7C7968961CB91380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa65a223-5cef-353d-ac3c-5a05a1c4f3eb.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397221
IP address blocks: 156.154.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:13:3c:7c:79:68:96:1c:b9:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=c89b9231-a148-44a4-905f-31157fab5617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:1f:c6:5f:90:60:a4:90:5e:56:9b:ce:43:
0d:1c:61:97:ab:3d:20:e8:17:35:ea:43:e9:2f:36:
64:8c:2d:d6:bd:88:85:ce:1b:eb:b5:6e:38:b6:12:
bc:40:e6:2d:75:5c:a3:a5:d3:8a:64:12:b9:14:79:
4e:9d:cf:e1:03:ec:ac:36:79:d6:73:64:5b:d0:f6:
9e:5c:67:48:94:f0:02:3d:d6:f1:fe:ae:3a:37:24:
19:dc:c7:4d:b9:0c:3e:ff:29:85:cb:ce:79:28:2c:
df:dc:9d:5b:2f:7f:0f:a2:9c:34:c2:37:a5:0a:a4:
c0:70:13:21:6d:77:69:74:49:74:48:54:be:71:b9:
9c:5f:01:a0:9f:cc:5b:c2:4c:af:af:38:cc:c4:a6:
ef:de:80:f1:7c:e2:77:1a:48:92:8c:ab:b5:00:aa:
f6:24:6c:76:5a:a5:61:6a:67:bc:2e:f3:71:b5:97:
22:dd:12:0f:a9:d9:cd:3e:ed:1a:32:c5:eb:2f:4e:
f4:6e:c4:d2:12:e8:5d:ef:d0:bf:6b:fd:40:10:e1:
da:49:7d:aa:05:c6:17:7c:71:0f:51:25:ea:27:87:
af:2d:a9:48:95:7f:8e:8b:1d:5b:16:e1:0d:c0:43:
51:e7:64:7f:7f:eb:e2:e3:b9:15:e9:ca:e5:8a:6d:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1F:BB:3A:A4:60:44:C6:F5:BF:96:11:4C:47:27:D2:59:AB:E7:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa65a223-5cef-353d-ac3c-5a05a1c4f3eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:86:3d:c2:5e:04:51:1b:d9:12:fc:72:c1:9a:fa:6c:fc:d6:
ae:c1:b3:71:ae:94:83:9a:9b:c0:db:30:07:c8:cf:8f:e8:49:
c0:f6:e9:ae:5a:bb:02:f3:12:54:1a:75:ce:92:20:ff:c1:a6:
ab:5f:af:ca:29:e8:a3:1f:13:cd:01:8a:df:16:f3:73:01:b4:
47:0c:50:76:da:57:42:9e:d6:60:bd:73:94:82:aa:d9:aa:ad:
e8:4d:a6:3c:56:4e:7e:b6:a3:53:27:8e:69:d3:26:90:d6:08:
27:fc:43:4f:2b:64:a2:68:ed:a1:76:f4:6d:e5:54:2a:ea:9b:
1f:76:3f:8f:68:98:31:01:0b:d3:48:43:d7:bc:fc:53:22:f4:
05:51:f9:bd:53:da:62:8c:16:03:30:aa:33:fd:a8:ca:d4:07:
25:86:ab:de:86:c2:11:48:f4:fb:d5:6e:10:3d:0e:f7:ea:12:
bb:37:31:c7:1a:7e:60:78:7f:74:f0:e0:ac:f9:35:ca:c3:7c:
4f:40:5e:73:e9:0c:1b:bf:1a:74:3d:08:ff:84:63:4f:19:d1:
a4:19:f9:08:c1:d6:8c:a4:71:0a:34:27:01:b7:1b:fd:b9:0e:
b3:c0:45:be:e2:e8:6b:02:f2:96:3c:ff:ae:7a:75:70:26:45:
5b:f6:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:11:24 2025 by rpki-client