Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8171b269-29de-3cb4-b1c1-0ffc5d419441.roa
File: 8171b269-29de-3cb4-b1c1-0ffc5d419441.roa (raw, json)
Hash identifier: h5l+FFEnQyfQhbd6rfFGSAyo4CgUKvOpK6KoscoUQ4E=
Subject key identifier: 66:0E:CB:CB:67:89:E5:67:95:20:D3:A4:42:01:7B:2A:FF:BE:6C:FB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210415B8C246023AD0C700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8171b269-29de-3cb4-b1c1-0ffc5d419441.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397220
IP address blocks: 156.154.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:04:15:b8:c2:46:02:3a:d0:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=89bf3b0e-3d84-4469-80a3-8364813a0eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:c5:4b:eb:3d:74:b3:f6:76:60:d7:5c:2c:
10:07:f7:66:6c:d7:a1:7d:8b:fc:fe:02:77:bf:cd:
ae:0b:e3:d1:9b:e9:a0:c6:ad:ad:65:2f:ec:bb:f9:
f6:80:4b:69:47:31:6e:04:64:cf:e1:72:e2:f5:39:
50:96:63:4f:2c:7c:67:b4:5f:e1:4f:5f:d2:05:8e:
b9:c6:ff:c0:cf:a9:db:ba:a1:14:b1:6f:b7:f8:f8:
58:ef:d6:1a:d8:ea:12:c9:01:87:6a:e6:37:61:cf:
35:c8:52:03:6e:b4:03:80:e6:8b:00:4b:79:23:15:
db:d0:b1:f8:04:ba:52:ae:5b:97:22:cd:a3:f4:d8:
da:82:79:a6:7f:d2:78:a6:7b:ba:8e:3b:4c:b5:3c:
26:e2:48:e5:2c:81:4b:a0:4c:5a:1b:f4:3d:9a:ae:
1e:04:00:1a:43:b5:fe:52:9e:9c:5a:77:94:fe:69:
2a:d0:6c:93:35:5a:2b:d5:05:8f:20:58:c4:45:0b:
8b:43:82:30:6a:d1:60:a4:99:0b:b4:65:4a:3d:1d:
e8:7b:c8:13:bd:ea:f8:0a:cb:0a:8a:94:3a:15:09:
e6:c4:b4:9c:28:6e:00:5d:9d:42:0b:20:78:35:cd:
08:c0:7e:34:60:27:df:d9:66:40:cb:0c:d6:b9:90:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:CB:CB:67:89:E5:67:95:20:D3:A4:42:01:7B:2A:FF:BE:6C:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8171b269-29de-3cb4-b1c1-0ffc5d419441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:7b:bd:53:9f:44:45:38:d8:4b:2b:b3:07:05:c9:32:2e:51:
3f:aa:e1:e2:77:1b:0c:93:8e:dd:15:03:3d:2b:c4:57:4d:2a:
15:df:43:61:d2:da:86:95:87:13:5e:e1:82:37:c1:42:da:0f:
9e:e3:80:db:7c:0b:04:97:03:7b:03:e0:14:4b:f9:be:ea:b8:
08:a5:5e:7d:9d:e0:dd:a0:29:c7:ce:98:dd:87:68:54:bc:0d:
51:e6:aa:62:af:ce:c3:8d:a6:b6:2b:42:70:e4:a5:c0:27:82:
ab:06:c7:e5:c6:7e:2b:7e:97:16:df:b3:42:b5:00:d9:bb:62:
b0:58:ec:37:a6:96:09:8c:55:0a:85:ab:3b:9b:d2:62:be:bc:
5a:38:dc:aa:a8:19:51:9a:e5:79:d7:8e:ae:ae:1f:03:e9:fd:
69:40:32:e3:f8:ea:de:98:4d:db:4a:bc:21:13:87:40:2e:9e:
9b:69:31:d4:f6:48:0a:2b:6b:4d:57:2d:da:8a:b4:99:8a:9b:
57:1a:3e:d1:4f:41:44:18:8e:34:70:cb:04:b8:fd:b3:f4:9d:
f0:2b:5e:8b:13:f1:9e:eb:53:76:4a:07:5c:28:10:a9:95:c0:
97:b0:6c:28:1f:5e:bd:6c:a1:8c:39:8e:ed:cb:51:c9:06:70:
1b:e8:82:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQQVuMJGAjrQxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
ODliZjNiMGUtM2Q4NC00NDY5LTgwYTMtODM2NDgxM2EwZWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48vFS+s9dLP2dmDXXCwQB/dmbNehfYv8/gJ3
v82uC+PRm+mgxq2tZS/su/n2gEtpRzFuBGTP4XLi9TlQlmNPLHxntF/hT1/SBY65
xv/Az6nbuqEUsW+3+PhY79Ya2OoSyQGHauY3Yc81yFIDbrQDgOaLAEt5IxXb0LH4
BLpSrluXIs2j9Njagnmmf9J4pnu6jjtMtTwm4kjlLIFLoExaG/Q9mq4eBAAaQ7X+
Up6cWneU/mkq0GyTNVor1QWPIFjERQuLQ4IwatFgpJkLtGVKPR3oe8gTver4CssK
ipQ6FQnmxLScKG4AXZ1CCyB4Nc0IwH40YCff2WZAywzWuZByrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYOy8tnieVnlSDTpEIBeyr/vmz7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODE3MWIyNjktMjlkZS0z
Y2I0LWIxYzEtMGZmYzVkNDE5NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADN7vVOfREU42EsrswcFyTIuUT+q4eJ3GwyTjt0VAz0rxFdNKhXfQ2HS
2oaVhxNe4YI3wULaD57jgNt8CwSXA3sD4BRL+b7quAilXn2d4N2gKcfOmN2HaFS8
DVHmqmKvzsONprYrQnDkpcAngqsGx+XGfit+lxbfs0K1ANm7YrBY7DemlgmMVQqF
qzub0mK+vFo43KqoGVGa5XnXjq6uHwPp/WlAMuP46t6YTdtKvCETh0AunptpMdT2
SAora01XLdqKtJmKm1caPtFPQUQYjjRwywS4/bP0nfArXosT8Z7rU3ZKB1woEKmV
wJewbCgfXr1soYw5ju3LUckGcBvogh8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:28 2025 by rpki-client