Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ef16400-e2c5-3ed8-b2e2-ce86cff7143d.roa
File: 1ef16400-e2c5-3ed8-b2e2-ce86cff7143d.roa (raw, json)
Hash identifier: bkLqjfC61unghUsRFXcbfAN2xvVU2YFg7cCfWTO6fs4=
Subject key identifier: CB:75:F2:F8:C4:7E:F8:58:20:76:6E:58:CE:7E:37:C2:4B:90:B2:9E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20EF1755D2C92472B6B400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ef16400-e2c5-3ed8-b2e2-ce86cff7143d.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397240
IP address blocks: 156.154.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ef:17:55:d2:c9:24:72:b6:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=0c962c49-d7d2-4747-88ec-e04ba0054fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:91:17:06:c6:28:b1:1b:94:9e:bb:95:9a:
a9:77:14:dc:71:ad:cf:41:18:10:95:67:b9:90:4d:
26:63:2e:e7:f2:f5:50:7b:36:2d:f3:0f:81:44:2f:
5e:0e:24:09:e5:1f:01:c1:cd:38:4e:95:79:80:96:
24:56:59:8b:a5:3f:eb:15:94:ee:4b:bf:5f:7f:9c:
24:2b:8d:59:ae:56:ee:6a:1f:e8:0c:ef:e9:2d:95:
eb:dc:f5:f9:2d:5f:30:52:97:ed:b8:0d:40:fe:ff:
72:91:9d:17:8a:34:7c:17:9f:b1:9b:eb:38:2b:83:
b2:b0:11:fe:79:d7:81:27:f1:f7:d1:a0:2f:7f:e5:
ea:c8:86:d3:2f:6d:a2:f2:4a:99:05:9c:67:4f:bb:
67:ec:b3:10:08:d4:f6:e2:cf:0b:b5:49:41:64:1c:
8e:a8:9f:b4:46:98:ce:df:f7:6f:12:4a:53:a0:b5:
f8:89:7c:a1:c5:1e:0c:31:49:2a:84:4e:85:5b:0f:
a4:0c:93:4d:30:fa:a2:b6:58:ae:30:2d:a5:bb:7c:
1a:d7:75:0d:1c:aa:3a:1f:9e:2c:2f:55:b7:c8:a6:
e7:a0:78:fb:b5:37:b9:30:34:e4:fb:ef:70:87:c7:
4e:6a:46:e2:f5:3e:47:b2:0e:17:a8:32:34:e7:0b:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:F2:F8:C4:7E:F8:58:20:76:6E:58:CE:7E:37:C2:4B:90:B2:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ef16400-e2c5-3ed8-b2e2-ce86cff7143d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:ec:ed:c5:c7:4d:9a:03:ea:90:c0:d7:47:f8:43:0e:cc:e6:
f5:b0:44:a9:d3:9b:71:7d:8b:67:8b:68:21:c6:44:30:e4:e3:
28:a7:c7:98:0f:e1:44:06:b0:27:d2:1f:e5:38:09:f9:9a:60:
7b:be:1f:e6:40:2b:8f:13:e0:3f:98:d9:f5:d6:5e:a3:b2:f6:
68:72:10:70:27:12:0f:32:c0:ec:17:fa:02:84:31:91:92:7e:
69:fd:fb:86:20:10:fd:07:01:41:52:4c:0f:06:b7:9c:23:a2:
83:86:65:a2:ea:37:80:ee:6a:7f:ca:39:d4:d0:b6:24:02:9c:
cc:89:7a:0b:5a:ee:7e:34:61:0b:76:c5:30:93:68:ba:06:46:
71:c0:ad:3c:59:9c:7a:d7:bc:79:41:d7:dd:c9:d0:1d:69:11:
3a:a4:0b:c0:e1:ef:ab:91:be:ce:9e:2c:ed:e6:06:4f:a6:f8:
0a:a6:2f:87:b3:c3:ba:c9:bb:3d:89:1d:96:15:57:c5:a2:68:
aa:4b:15:ae:5f:d5:0e:8e:8a:03:68:18:6c:db:79:97:bc:e1:
30:78:24:e8:8e:d4:68:a4:b5:8f:73:3e:51:72:75:26:65:9a:
5f:6c:22:7f:88:61:f6:ea:f4:7a:f5:f5:3a:78:d7:77:3b:1d:
8f:c6:33:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IO8XVdLJJHK2tAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
MGM5NjJjNDktZDdkMi00NzQ3LTg4ZWMtZTA0YmEwMDU0ZmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliKRFwbGKLEblJ67lZqpdxTcca3PQRgQlWe5
kE0mYy7n8vVQezYt8w+BRC9eDiQJ5R8Bwc04TpV5gJYkVlmLpT/rFZTuS79ff5wk
K41Zrlbuah/oDO/pLZXr3PX5LV8wUpftuA1A/v9ykZ0XijR8F5+xm+s4K4OysBH+
edeBJ/H30aAvf+XqyIbTL22i8kqZBZxnT7tn7LMQCNT24s8LtUlBZByOqJ+0RpjO
3/dvEkpToLX4iXyhxR4MMUkqhE6FWw+kDJNNMPqitliuMC2lu3wa13UNHKo6H54s
L1W3yKbnoHj7tTe5MDTk++9wh8dOakbi9T5Hsg4XqDI05wuOFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMt18vjEfvhYIHZuWM5+N8JLkLKeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWVmMTY0MDAtZTJjNS0z
ZWQ4LWIyZTItY2U4NmNmZjcxNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDs7cXHTZoD6pDA10f4Qw7M5vWwRKnTm3F9i2eLaCHGRDDk4yinx5gP
4UQGsCfSH+U4CfmaYHu+H+ZAK48T4D+Y2fXWXqOy9mhyEHAnEg8ywOwX+gKEMZGS
fmn9+4YgEP0HAUFSTA8Gt5wjooOGZaLqN4Duan/KOdTQtiQCnMyJegta7n40YQt2
xTCTaLoGRnHArTxZnHrXvHlB193J0B1pETqkC8Dh76uRvs6eLO3mBk+m+AqmL4ez
w7rJuz2JHZYVV8WiaKpLFa5f1Q6OigNoGGzbeZe84TB4JOiO1GiktY9zPlFydSZl
ml9sIn+IYfbq9Hr19Tp413c7HY/GM6I=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:05:36 2025 by rpki-client