Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/43efe82d-5d6d-354d-904a-125ffcd33560.roa
File: 43efe82d-5d6d-354d-904a-125ffcd33560.roa (raw, json)
Hash identifier: +b4b0t/pwNLmqEiW3hbEEmb3MDVVaaF6f2r1o+6c+qQ=
Subject key identifier: 24:1D:B2:5B:87:F1:5C:AA:3F:40:FE:3B:B4:66:81:62:A3:FE:FA:9B
Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial: 010D0C9F43285848451581917437CB2681C8E780
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/43efe82d-5d6d-354d-904a-125ffcd33560.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14618
IP address blocks: 156.70.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:81:91:74:37:cb:26:81:c8:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=46f2c44b-3521-4e0d-a42e-a27d97be2ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:a1:75:12:fa:fa:12:38:59:76:23:a0:cb:
0a:e0:91:2e:2e:17:eb:4c:d9:fd:29:ab:6a:a1:fb:
c3:b8:cf:e6:6d:0a:43:9b:31:36:4b:96:52:58:a6:
54:40:45:93:7a:b7:bf:fe:e6:bf:9d:4d:e3:80:11:
64:52:bf:83:cf:e6:38:61:ef:86:db:12:b4:40:b0:
b0:3a:e7:17:3c:93:df:de:ee:af:e1:d8:71:fb:ad:
a1:31:40:60:8a:74:c7:36:72:0b:86:8b:7e:31:59:
e0:e2:76:8d:1b:e5:d2:3c:b8:ef:0a:32:df:9b:45:
02:ed:7b:dd:2c:42:43:e5:b4:1f:7a:f7:99:99:12:
06:b2:f0:78:c9:8e:ce:36:ba:5c:6d:99:33:4f:0d:
62:35:3c:fb:f4:ef:7e:75:f7:ce:2b:92:d4:e0:d3:
99:62:18:85:de:7d:44:4b:35:3b:3c:13:2b:4d:b1:
f8:a0:f8:87:d9:99:58:fb:97:54:8d:44:25:6c:71:
3e:1b:a4:ab:64:1f:47:45:4a:71:4d:32:d3:f5:74:
cb:1f:85:ed:af:ff:ae:af:89:01:b6:d0:50:3f:71:
a6:12:0a:e2:b5:af:bf:fb:fa:56:0d:9f:37:85:17:
8c:88:ad:15:be:50:a6:da:d9:b9:7a:d8:ef:8a:9b:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1D:B2:5B:87:F1:5C:AA:3F:40:FE:3B:B4:66:81:62:A3:FE:FA:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/43efe82d-5d6d-354d-904a-125ffcd33560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
X509v3 Authority Key Identifier:
keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
sbgp-ipAddrBlock: critical
IPv4:
156.70.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:6c:25:a0:5c:b9:87:a5:ea:e3:df:d9:46:57:9b:cf:74:46:
bf:12:0e:be:68:6f:6e:78:81:08:f2:41:00:ba:8d:7c:53:40:
fc:5d:dc:1e:af:ed:85:08:c1:31:d4:ed:a5:81:f6:e6:dd:73:
3b:f2:e3:ff:40:9b:99:0e:32:62:79:0f:0d:bb:22:34:eb:b5:
0c:0d:15:ac:3b:e7:ae:a9:9f:6f:d4:71:1c:02:f8:f6:0a:63:
51:a6:c0:ae:55:04:84:aa:d7:6e:e5:09:ca:4e:ca:93:99:d2:
a7:49:2b:c5:23:e9:05:aa:ea:1f:97:5c:32:95:4b:79:44:6a:
ff:18:61:2b:c2:c8:39:4c:d3:06:84:8d:9c:81:f5:b6:13:fa:
87:d3:fd:fb:fc:52:28:93:0c:85:62:7c:2d:12:19:6e:f0:78:
aa:9f:18:e1:e1:20:63:8f:61:6e:8d:ee:e9:b7:3e:13:3a:31:
bb:49:fa:5b:4e:d0:9a:44:33:08:87:7a:c6:2d:1e:e8:e7:0b:
ca:57:36:15:b3:7d:46:40:9d:55:2f:d0:63:cd:9a:e0:5a:ff:
a5:6e:31:d8:cb:75:e7:ab:32:ac:ad:5f:76:05:7d:41:95:06:
ce:ec:0a:ff:19:44:5d:d9:f0:36:10:6e:25:ab:97:5d:25:f2:
83:86:ae:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYGRdDfLJoHI54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw
YWVlMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
NDZmMmM0NGItMzUyMS00ZTBkLWE0MmUtYTI3ZDk3YmUyYWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMShdRL6+hI4WXYjoMsK4JEuLhfrTNn9Katq
ofvDuM/mbQpDmzE2S5ZSWKZUQEWTere//ua/nU3jgBFkUr+Dz+Y4Ye+G2xK0QLCw
OucXPJPf3u6v4dhx+62hMUBginTHNnILhot+MVng4naNG+XSPLjvCjLfm0UC7Xvd
LEJD5bQfeveZmRIGsvB4yY7ONrpcbZkzTw1iNTz79O9+dffOK5LU4NOZYhiF3n1E
SzU7PBMrTbH4oPiH2ZlY+5dUjUQlbHE+G6SrZB9HRUpxTTLT9XTLH4Xtr/+ur4kB
ttBQP3GmEgrita+/+/pWDZ83hReMiK0VvlCm2tm5etjvipv+GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQdsluH8VyqP0D+O7RmgWKj/vqbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl
OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvNDNlZmU4MmQtNWQ2ZC0z
NTRkLTkwNGEtMTI1ZmZjZDMzNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0
M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy
MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2
ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnEZsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMNsJaBcuYel6uPf2UZXm890Rr8SDr5ob254gQjyQQC6jXxTQPxd3B6v
7YUIwTHU7aWB9ubdczvy4/9Am5kOMmJ5Dw27IjTrtQwNFaw7566pn2/UcRwC+PYK
Y1GmwK5VBISq127lCcpOypOZ0qdJK8Uj6QWq6h+XXDKVS3lEav8YYSvCyDlM0waE
jZyB9bYT+ofT/fv8UiiTDIVifC0SGW7weKqfGOHhIGOPYW6N7um3PhM6MbtJ+ltO
0JpEMwiHesYtHujnC8pXNhWzfUZAnVUv0GPNmuBa/6VuMdjLdeerMqytX3YFfUGV
Bs7sCv8ZRF3Z8DYQbiWrl10l8oOGrkQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:50 2025 by rpki-client