Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c9510f83-ec03-3be5-af3d-3665ee4e9002.roa
File: c9510f83-ec03-3be5-af3d-3665ee4e9002.roa (raw, json)
Hash identifier: 9dmBourHEaMh+IeFnb4vjwlYiW9Z02ik2ZlFRe5IQ4E=
Subject key identifier: AA:11:D9:ED:CC:7C:BD:78:6B:2B:65:38:E7:FD:BB:F7:0D:52:AF:17
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99658D689F91C5D4D213D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c9510f83-ec03-3be5-af3d-3665ee4e9002.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397213
IP address blocks: 156.154.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:58:d6:89:f9:1c:5d:4d:21:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=4fc5c8d8-b0b4-4e7a-9b4b-2b33407a54f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:23:53:38:33:9f:b8:da:78:0d:71:8b:4c:
67:83:6c:49:db:1d:dd:be:44:db:92:6a:db:4e:51:
99:1c:fc:23:37:31:92:f7:a4:c3:4d:d5:5e:f6:80:
b9:ae:7b:27:a1:91:b6:ab:3b:2d:f2:74:8b:7a:81:
e8:d8:c2:70:85:7a:65:2a:8a:33:57:70:1d:10:cf:
8d:e2:c5:29:51:1a:ca:6e:4a:58:2e:07:96:52:54:
80:3f:4c:bf:33:0e:9f:28:da:ec:e9:37:9b:00:b1:
f2:67:49:12:29:d4:7e:30:af:fe:8a:f4:01:03:7c:
54:2e:43:67:0d:37:72:05:37:fb:c8:b4:6f:6e:80:
38:4f:04:f5:05:7a:be:cd:fa:1a:f8:71:18:d8:7f:
4c:e8:84:6b:c7:c8:55:4f:f4:80:33:c4:2d:65:57:
1c:dd:32:2d:33:4c:83:0e:06:69:48:56:0f:a0:94:
c9:ff:50:de:73:42:66:3c:e9:a6:0b:13:0d:8d:5c:
55:04:5f:11:1a:38:9f:b9:1e:d6:cd:13:60:ef:db:
c4:e2:f5:41:4f:bd:92:b3:66:10:99:76:b8:15:75:
f8:f6:32:8b:63:41:41:55:9a:55:e2:5e:f2:45:bb:
b9:5a:2d:92:e1:f8:49:ef:6b:bd:6c:c3:fb:af:51:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:D9:ED:CC:7C:BD:78:6B:2B:65:38:E7:FD:BB:F7:0D:52:AF:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c9510f83-ec03-3be5-af3d-3665ee4e9002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:8f:0c:a1:91:a2:f2:87:77:c9:09:40:40:94:de:b1:11:56:
16:c2:98:6b:bc:6c:9c:72:d0:ef:c4:b7:95:3e:f0:13:48:ac:
cc:e6:a2:0c:5f:67:63:64:1b:45:c1:0a:d2:05:4f:17:82:d9:
41:03:36:71:ee:d0:de:ad:58:59:00:65:54:d0:3b:d4:43:e2:
16:aa:e9:c7:3f:9e:96:d2:ef:83:1f:f7:5e:64:dd:21:5e:04:
bc:d0:02:75:11:8e:f0:a1:dd:1d:68:96:75:91:45:37:a4:73:
12:d1:17:8e:21:ef:80:3e:33:9d:d6:4d:7c:9a:a8:53:3f:8e:
1f:47:9b:7e:25:e1:b0:a4:b1:9a:92:2e:f8:a9:a5:62:e8:25:
6c:14:aa:ff:19:4b:6d:9b:2c:09:e5:c1:8d:c9:ce:0b:58:3d:
87:e8:c0:24:bf:cb:e3:c5:80:64:27:18:61:0d:6d:44:f3:8a:
d4:c9:01:94:60:3c:26:65:a0:1d:fe:e9:1f:48:a3:bd:4e:5d:
14:29:59:48:2f:d1:f3:4f:d7:ef:90:7c:ec:5f:7e:db:ac:61:
da:d6:90:cb:3e:04:f3:d6:b3:7b:81:6f:d5:f3:b5:9a:35:b5:
fd:8e:0e:76:72:11:be:9f:60:88:6f:d8:62:23:e0:98:83:90:
1d:aa:31:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplljWifkcXU0hPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NGZjNWM4ZDgtYjBiNC00ZTdhLTliNGItMmIzMzQwN2E1NGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMIjUzgzn7jaeA1xi0xng2xJ2x3dvkTbkmrb
TlGZHPwjNzGS96TDTdVe9oC5rnsnoZG2qzst8nSLeoHo2MJwhXplKoozV3AdEM+N
4sUpURrKbkpYLgeWUlSAP0y/Mw6fKNrs6TebALHyZ0kSKdR+MK/+ivQBA3xULkNn
DTdyBTf7yLRvboA4TwT1BXq+zfoa+HEY2H9M6IRrx8hVT/SAM8QtZVcc3TItM0yD
DgZpSFYPoJTJ/1Dec0JmPOmmCxMNjVxVBF8RGjifuR7WzRNg79vE4vVBT72Ss2YQ
mXa4FXX49jKLY0FBVZpV4l7yRbu5Wi2S4fhJ72u9bMP7r1HdeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKoR2e3MfL14aytlOOf9u/cNUq8XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzk1MTBmODMtZWMwMy0z
YmU1LWFmM2QtMzY2NWVlNGU5MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHePDKGRovKHd8kJQECU3rERVhbCmGu8bJxy0O/Et5U+8BNIrMzmogxf
Z2NkG0XBCtIFTxeC2UEDNnHu0N6tWFkAZVTQO9RD4haq6cc/npbS74Mf915k3SFe
BLzQAnURjvCh3R1olnWRRTekcxLRF44h74A+M53WTXyaqFM/jh9Hm34l4bCksZqS
LvippWLoJWwUqv8ZS22bLAnlwY3JzgtYPYfowCS/y+PFgGQnGGENbUTzitTJAZRg
PCZloB3+6R9Io71OXRQpWUgv0fNP1++QfOxfftusYdrWkMs+BPPWs3uBb9XztZo1
tf2ODnZyEb6fYIhv2GIj4JiDkB2qMY4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:05:05 2025 by rpki-client