Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/def2f129-370a-3f3a-b968-b028953a0674.roa
File: def2f129-370a-3f3a-b968-b028953a0674.roa (raw, json)
Hash identifier: KunaJGpjim9GPGzEBdzCDcrL3b0hWVOvZXUuACh5DYc=
Subject key identifier: 14:B0:B3:14:C7:9D:76:9C:1D:3D:35:2D:9D:8C:7C:0A:32:81:66:06
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E9D2C61AB0F70532DF40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/def2f129-370a-3f3a-b968-b028953a0674.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397218
IP address blocks: 156.154.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e9:d2:c6:1a:b0:f7:05:32:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=472d5a59-1a59-46f1-8f38-aadebe4c40f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:a3:59:83:15:9b:95:74:ab:77:f1:35:d4:
50:1b:39:23:a3:85:a8:31:6e:fe:68:b8:c7:10:e6:
11:00:1b:05:08:b0:18:87:c1:ea:1a:1e:53:57:9a:
40:8b:62:e9:e2:34:98:85:57:e2:91:4f:bb:c2:8b:
0f:44:c8:18:7a:a9:71:5e:fd:bb:78:d3:05:8a:1e:
22:07:ee:7a:fe:2b:e8:84:46:5e:35:eb:eb:72:ed:
9e:c4:c2:68:a2:38:ff:88:2e:72:5e:49:94:8b:ba:
89:88:5b:8b:f1:38:e9:92:2c:b2:7a:84:03:69:e9:
f1:50:58:ac:b7:ec:54:72:33:40:61:92:b4:51:f0:
88:04:74:76:48:9a:2e:c9:ab:8a:9f:11:34:48:fa:
bd:5b:dd:e6:06:20:de:fa:17:57:39:60:21:6d:1c:
27:d2:45:90:07:75:af:47:a1:93:be:90:72:33:6c:
cd:71:bc:36:95:06:be:cd:6b:6b:33:bd:ad:24:22:
15:37:b2:46:0d:c7:8c:57:97:cf:1e:4a:1e:2a:ab:
ee:22:5e:3e:b7:31:0d:bf:57:ad:23:c3:f5:c4:ee:
ae:3e:25:c6:50:dc:13:60:70:11:a0:f9:07:91:1a:
e0:b8:7a:37:05:11:d6:ac:44:17:64:ea:37:12:d8:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B0:B3:14:C7:9D:76:9C:1D:3D:35:2D:9D:8C:7C:0A:32:81:66:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/def2f129-370a-3f3a-b968-b028953a0674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:ab:63:92:c9:0d:0a:29:e0:4a:02:d1:3a:fc:f8:c3:01:dc:
d8:af:83:9e:7f:6f:e0:0a:b5:1a:59:21:c3:83:e4:8d:57:69:
cf:52:d1:4c:ac:69:e1:d6:a0:6b:ce:04:10:bc:9f:32:eb:7c:
96:f6:72:76:48:98:22:24:a8:58:0b:f2:c5:a7:12:9e:6f:45:
a5:37:e0:2c:08:ec:08:bb:d3:1f:94:4a:87:8b:50:d8:27:85:
3d:94:bc:ed:32:7b:69:01:b6:b7:ef:2e:af:6b:d9:85:ba:01:
51:37:42:a3:7c:e2:76:e5:d2:2d:64:f7:20:ee:ed:ab:01:92:
a7:d7:74:a9:24:58:f4:cb:db:fc:57:2d:b9:89:e6:06:f9:ba:
6b:27:ac:c4:5a:51:4c:83:66:20:f3:d9:92:b7:83:e2:4a:03:
5e:3e:7e:b7:b0:53:4a:6f:2a:0f:54:1d:53:e5:48:43:d5:d3:
de:0a:11:ec:ab:ef:c4:df:41:e7:58:6e:a6:03:e6:b1:1a:ff:
20:99:f6:e3:bc:e6:c9:58:be:e3:d1:13:23:75:19:1e:49:cf:
ab:6e:74:03:58:45:89:2d:82:92:f4:cb:1b:9f:0e:17:7e:95:
45:54:52:c7:eb:00:bf:30:95:48:98:a0:d1:47:ef:4b:2d:8c:
89:23:bb:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRunSxhqw9wUy30AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NDcyZDVhNTktMWE1OS00NmYxLThmMzgtYWFkZWJlNGM0MGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyqjWYMVm5V0q3fxNdRQGzkjo4WoMW7+aLjH
EOYRABsFCLAYh8HqGh5TV5pAi2Lp4jSYhVfikU+7wosPRMgYeqlxXv27eNMFih4i
B+56/ivohEZeNevrcu2exMJoojj/iC5yXkmUi7qJiFuL8TjpkiyyeoQDaenxUFis
t+xUcjNAYZK0UfCIBHR2SJouyauKnxE0SPq9W93mBiDe+hdXOWAhbRwn0kWQB3Wv
R6GTvpByM2zNcbw2lQa+zWtrM72tJCIVN7JGDceMV5fPHkoeKqvuIl4+tzENv1et
I8P1xO6uPiXGUNwTYHARoPkHkRrguHo3BRHWrEQXZOo3Etg2TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSwsxTHnXacHT01LZ2MfAoygWYGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGVmMmYxMjktMzcwYS0z
ZjNhLWI5NjgtYjAyODk1M2EwNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOrY5LJDQop4EoC0Tr8+MMB3Nivg55/b+AKtRpZIcOD5I1Xac9S0Uys
aeHWoGvOBBC8nzLrfJb2cnZImCIkqFgL8sWnEp5vRaU34CwI7Ai70x+USoeLUNgn
hT2UvO0ye2kBtrfvLq9r2YW6AVE3QqN84nbl0i1k9yDu7asBkqfXdKkkWPTL2/xX
LbmJ5gb5umsnrMRaUUyDZiDz2ZK3g+JKA14+frewU0pvKg9UHVPlSEPV094KEeyr
78TfQedYbqYD5rEa/yCZ9uO85slYvuPREyN1GR5Jz6tudANYRYktgpL0yxufDhd+
lUVUUsfrAL8wlUiYoNFH70stjIkju9o=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:04 2025 by rpki-client