Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f08fa4d-0ade-3e8a-9829-5c67fe317960.roa
File: 1f08fa4d-0ade-3e8a-9829-5c67fe317960.roa (raw, json)
Hash identifier: SNll3QS2WaeY13Vj1ZfsDyBAS8R1cglEPKqPcJ0TiXE=
Subject key identifier: 29:86:ED:15:BB:F7:7C:E0:6A:25:86:97:F7:06:6D:A8:CF:F9:34:F6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964EE9AD3B8C75C2438340
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f08fa4d-0ade-3e8a-9829-5c67fe317960.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397236
IP address blocks: 156.154.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:4e:e9:ad:3b:8c:75:c2:43:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=8d8ad4ea-edf3-4581-84ea-d3cf221c2e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:bf:c6:23:fb:a4:d1:e0:46:70:51:2d:48:
24:eb:10:1f:93:3a:59:66:83:dc:4d:a8:de:f9:c7:
ef:ea:c5:1a:d0:c0:a4:5e:32:ed:24:33:d0:c7:1b:
84:e3:90:99:66:ca:48:46:e8:2d:7a:fc:dc:ae:95:
22:26:ad:b3:63:69:b8:6a:c9:e8:7d:92:25:18:d4:
b5:f2:4e:49:fd:e1:4b:26:0c:e7:59:a1:6e:31:6a:
36:f6:d9:e0:f2:8a:f9:5e:55:dd:ca:3c:29:3c:2b:
62:c8:1f:28:e1:77:d5:bb:22:76:d1:7f:a2:de:59:
55:ef:b0:e1:1a:a5:50:8e:90:c3:82:f2:d2:b8:da:
00:29:ee:cf:13:b4:36:34:46:32:6b:4c:76:16:6a:
f9:79:be:17:a2:8e:d9:9e:59:a4:7b:12:85:79:56:
04:bd:0f:1f:9b:45:05:92:89:f9:d2:11:a7:c7:62:
06:03:40:6e:86:b8:93:a9:b0:ea:59:b9:6f:b4:b9:
c4:09:94:e3:41:1d:14:86:89:06:19:53:8a:72:38:
0e:75:c6:30:c3:52:95:99:32:10:30:03:18:6d:ce:
b0:9f:8e:0e:76:ba:55:01:07:53:39:0e:e2:40:08:
5f:73:5c:a8:73:8e:2e:b6:f0:79:52:e8:8e:5d:5b:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:86:ED:15:BB:F7:7C:E0:6A:25:86:97:F7:06:6D:A8:CF:F9:34:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f08fa4d-0ade-3e8a-9829-5c67fe317960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:e1:d3:0a:b3:9b:cf:82:a1:d8:ca:46:63:75:9c:ce:a6:a6:
53:e2:b7:b8:b7:8e:1a:50:27:69:bb:70:13:5c:f8:7e:f4:ba:
5d:40:eb:29:5a:a9:16:90:3b:da:45:15:db:07:ab:d2:f8:d5:
e0:2f:90:34:d3:b7:96:a3:b1:c9:a3:60:b4:60:c8:40:42:61:
9d:78:0d:3b:d3:10:d4:36:25:8d:18:82:1c:b0:38:5e:2f:71:
fc:0d:6b:0f:33:b8:e3:55:b4:bf:2d:50:51:94:87:22:d1:bd:
0a:01:35:a8:3f:f5:fd:99:c0:f8:00:81:2d:5f:3a:ae:9c:92:
88:39:95:4b:a4:7e:2f:38:ca:0f:73:b4:48:5d:8a:b5:b1:24:
4d:43:6b:39:46:44:f4:42:48:50:d7:3d:d0:d1:83:1a:42:ed:
ca:ea:66:7f:76:a9:5b:e8:85:81:26:24:4c:d1:1a:6d:67:0e:
24:49:77:cf:20:c6:9f:47:ae:41:6a:b7:14:3e:d4:2f:3f:f1:
40:bf:66:ec:0e:de:90:e3:14:5a:5d:3b:dc:fd:a1:1a:67:ec:
84:c6:54:38:94:76:01:3f:7b:74:f4:5c:f0:f8:15:01:f3:fa:
ae:c9:db:91:c2:66:31:f0:04:73:5e:4f:97:4b:6f:95:f9:9e:
7b:39:4f:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk7prTuMdcJDg0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
OGQ4YWQ0ZWEtZWRmMy00NTgxLTg0ZWEtZDNjZjIyMWMyZTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifS/xiP7pNHgRnBRLUgk6xAfkzpZZoPcTaje
+cfv6sUa0MCkXjLtJDPQxxuE45CZZspIRugtevzcrpUiJq2zY2m4asnofZIlGNS1
8k5J/eFLJgznWaFuMWo29tng8or5XlXdyjwpPCtiyB8o4XfVuyJ20X+i3llV77Dh
GqVQjpDDgvLSuNoAKe7PE7Q2NEYya0x2Fmr5eb4Xoo7ZnlmkexKFeVYEvQ8fm0UF
kon50hGnx2IGA0BuhriTqbDqWblvtLnECZTjQR0UhokGGVOKcjgOdcYww1KVmTIQ
MAMYbc6wn44OdrpVAQdTOQ7iQAhfc1yoc44utvB5UuiOXVuEzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmG7RW793zgaiWGl/cGbajP+TT2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWYwOGZhNGQtMGFkZS0z
ZThhLTk4MjktNWM2N2ZlMzE3OTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvh0wqzm8+CodjKRmN1nM6mplPit7i3jhpQJ2m7cBNc+H70ul1A6yla
qRaQO9pFFdsHq9L41eAvkDTTt5ajscmjYLRgyEBCYZ14DTvTENQ2JY0YghywOF4v
cfwNaw8zuONVtL8tUFGUhyLRvQoBNag/9f2ZwPgAgS1fOq6ckog5lUukfi84yg9z
tEhdirWxJE1DazlGRPRCSFDXPdDRgxpC7crqZn92qVvohYEmJEzRGm1nDiRJd88g
xp9HrkFqtxQ+1C8/8UC/ZuwO3pDjFFpdO9z9oRpn7ITGVDiUdgE/e3T0XPD4FQHz
+q7J25HCZjHwBHNeT5dLb5X5nns5Tx0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:10 2025 by rpki-client