Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7b17f2ba-c1a4-345f-b510-6da4763a4694.roa
File: 7b17f2ba-c1a4-345f-b510-6da4763a4694.roa (raw, json)
Hash identifier: 4Kv2xYv5ITG/+QateYmKth9bWm8lB1sHfBo6+4MAsnw=
Subject key identifier: 99:3A:50:D9:E0:0E:42:CE:14:D0:EF:66:E4:48:9B:86:19:75:2A:3C
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F43285848FEBBD73BFAB32C449A4DA780
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7b17f2ba-c1a4-345f-b510-6da4763a4694.roa
Signing time: Tue 25 Feb 2025 02:00:39 +0000
ROA not before: Tue 25 Feb 2025 02:00:39 +0000
ROA not after: Mon 26 May 2025 01:00:39 +0000
asID: 16789
IP address blocks: 104.156.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fe:bb:d7:3b:fa:b3:2c:44:9a:4d:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Feb 25 02:00:39 2025 GMT
Not After : May 26 01:00:39 2025 GMT
Subject: CN=42926c0c-5fd3-4891-a048-9b9a8569e31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:fe:3a:1e:9e:9a:d6:36:6f:5e:99:6b:59:
41:64:0f:ec:4c:9e:89:27:62:db:ae:5a:0b:94:d1:
9c:00:c7:fd:10:1a:71:bd:45:8b:a4:bd:4b:ab:99:
ec:8f:a4:80:1a:ba:1f:2e:28:c8:f9:54:38:49:6d:
a3:77:df:af:54:d8:35:31:6b:79:d1:63:94:5f:5c:
d0:77:46:9a:82:fe:9a:ec:57:47:ad:e0:eb:42:c2:
c9:9e:b9:a3:b9:86:a4:d6:5a:8b:2f:8a:d9:3f:17:
fb:2d:61:bb:00:1f:11:4c:d6:df:8a:77:f1:01:8d:
38:98:12:47:8a:7d:d8:c4:84:57:50:57:1a:e5:56:
34:68:d1:73:c0:75:ed:fc:d4:de:21:ef:52:ad:6d:
53:55:3c:8e:c9:7c:69:6a:a2:d0:d6:f7:6b:2f:c3:
c4:a5:35:76:c3:51:8a:fe:7b:0d:b7:1b:48:32:64:
c4:85:43:44:56:84:ad:21:1f:d3:31:13:5d:36:1e:
a5:5b:2f:8e:26:64:de:b6:c9:6c:cd:2d:fa:e5:8a:
48:23:43:a8:1f:ea:13:2d:25:bc:6b:95:7e:13:95:
42:60:59:ee:8e:6c:3d:4c:be:f0:a2:36:30:e2:d6:
36:27:a5:e8:e7:0d:4a:94:78:6d:a2:07:c7:c0:bf:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:50:D9:E0:0E:42:CE:14:D0:EF:66:E4:48:9B:86:19:75:2A:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7b17f2ba-c1a4-345f-b510-6da4763a4694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.184.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f6:d7:69:8c:1e:01:74:ff:43:91:08:3c:9f:00:40:62:26:
b2:52:6f:e5:e4:bd:05:f3:b2:52:cb:c7:67:95:e9:7f:27:31:
f0:6c:4f:09:70:6b:11:18:79:7c:34:85:47:a9:e0:ed:77:ff:
a5:0d:32:52:5f:63:54:d4:4c:e8:c1:a3:48:02:c3:a7:71:2f:
73:c0:1e:2a:e9:7e:46:64:97:ee:f2:cf:6f:18:2e:75:3e:68:
69:3b:cf:57:82:ce:7c:3f:0d:3d:cd:94:d7:f8:78:4d:e8:1f:
fb:fc:b6:9a:6b:db:90:a1:88:c2:a2:3b:c1:69:cc:40:23:df:
bd:f5:dd:2b:bf:6a:2a:dd:91:c4:6e:54:4d:c8:e7:25:28:0d:
fd:01:ca:f2:e9:94:59:78:e9:e1:fa:25:55:d4:b0:9b:4f:a2:
69:2c:59:6b:78:03:a7:f7:a1:c8:a3:6e:bd:16:c3:c4:c2:40:
88:8d:95:2d:f1:7e:9f:57:64:45:8d:10:e3:dc:8a:d4:08:c6:
71:71:03:87:24:f7:13:ed:6e:31:89:09:21:08:e1:66:dd:c6:
d6:06:bb:bc:cf:20:b8:f9:b0:58:dc:44:50:4c:54:ea:bc:69:
5c:ef:8f:d5:80:fd:6f:d0:b3:25:11:13:e4:17:5f:06:d9:98:
10:40:cb:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj+u9c7+rMsRJpNp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4
YjY4MB4XDTI1MDIyNTAyMDAzOVoXDTI1MDUyNjAxMDAzOVowLzEtMCsGA1UEAxMk
NDI5MjZjMGMtNWZkMy00ODkxLWEwNDgtOWI5YTg1NjllMzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN/+Oh6emtY2b16Za1lBZA/sTJ6JJ2LbrloL
lNGcAMf9EBpxvUWLpL1Lq5nsj6SAGrofLijI+VQ4SW2jd9+vVNg1MWt50WOUX1zQ
d0aagv6a7FdHreDrQsLJnrmjuYak1lqLL4rZPxf7LWG7AB8RTNbfinfxAY04mBJH
in3YxIRXUFca5VY0aNFzwHXt/NTeIe9SrW1TVTyOyXxpaqLQ1vdrL8PEpTV2w1GK
/nsNtxtIMmTEhUNEVoStIR/TMRNdNh6lWy+OJmTetslszS365YpII0OoH+oTLSW8
a5V+E5VCYFnujmw9TL7wojYw4tY2J6Xo5w1KlHhtogfHwL9nxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJk6UNngDkLOFNDvZuRIm4YZdSo8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy
ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvN2IxN2YyYmEtYzFhNC0z
NDVmLWI1MTAtNmRhNDc2M2E0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5
YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk
OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy
ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJy4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACL212mMHgF0/0ORCDyfAEBiJrJSb+XkvQXzslLLx2eV6X8nMfBsTwlw
axEYeXw0hUep4O13/6UNMlJfY1TUTOjBo0gCw6dxL3PAHirpfkZkl+7yz28YLnU+
aGk7z1eCznw/DT3NlNf4eE3oH/v8tppr25ChiMKiO8FpzEAj37313Su/airdkcRu
VE3I5yUoDf0ByvLplFl46eH6JVXUsJtPomksWWt4A6f3ocijbr0Ww8TCQIiNlS3x
fp9XZEWNEOPcitQIxnFxA4ck9xPtbjGJCSEI4WbdxtYGu7zPILj5sFjcRFBMVOq8
aVzvj9WA/W/QsyURE+QXXwbZmBBAyws=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:05 2025 by rpki-client