Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa
File: 0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa (raw, json)
Hash identifier: 8m+Jot3jcgJOqTtLua9eY1NXhaqpnni0B2oFxtotE4c=
Subject key identifier: BE:E0:3B:AE:71:67:D5:12:E2:49:2C:E8:3C:3C:20:DD:F1:87:CF:6B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00E1FD33914ED53945180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397230
IP address blocks: 156.154.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0e:1f:d3:39:14:ed:53:94:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=ade9572c-4c57-4b75-8167-dad69bbf1834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:9d:f9:27:a2:c9:c6:06:5e:ce:37:e9:95:
b0:2e:b0:9c:d8:da:e1:11:74:3b:41:a2:95:ec:d6:
f8:69:42:71:66:61:3d:bf:46:cc:9d:47:b5:23:c1:
b0:c6:19:29:f1:37:b7:97:17:ce:26:91:8c:e4:f1:
52:66:d1:f9:ad:40:a4:90:91:44:3b:51:bf:57:0e:
92:a7:34:c4:d4:d6:34:a7:ec:9a:54:3c:a0:1f:f3:
a3:78:71:2b:44:64:a8:f8:a1:93:62:98:64:ea:20:
36:d2:4b:77:69:07:46:e9:a5:81:ee:d1:bc:08:3a:
06:06:36:39:23:79:02:13:d4:40:5b:8f:d8:0c:8e:
29:b1:58:a0:85:dd:34:e1:6c:fc:01:70:dd:6a:34:
4a:93:07:a7:7f:ed:c2:2c:14:a0:d2:b8:c4:91:32:
75:9a:8a:35:9d:89:5f:bc:d4:94:1c:4f:73:80:b0:
25:c0:e6:06:79:6d:b3:ad:83:c2:72:9d:ef:3e:df:
7d:0a:d5:b8:65:43:0f:33:98:3c:3c:41:1b:f4:c2:
b6:a6:c2:17:22:15:6c:cf:aa:14:b4:2b:95:f3:f7:
c6:e4:4f:4a:77:83:05:1b:34:bc:d8:16:5b:52:3c:
ba:5b:10:45:87:12:8e:1e:82:8d:b1:2a:65:b1:fd:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E0:3B:AE:71:67:D5:12:E2:49:2C:E8:3C:3C:20:DD:F1:87:CF:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:29:57:f5:d7:3c:84:4f:a6:d8:6b:90:6f:d0:b5:ef:4d:a5:
9f:93:1a:f5:8c:65:5c:f1:6e:99:e7:26:8f:27:87:35:bd:b4:
01:95:f3:fa:77:bf:f8:99:a0:30:b7:cb:eb:d9:4c:c2:a7:99:
6f:9b:58:29:23:b4:8d:eb:dd:19:b1:d1:6c:36:e4:c5:2c:46:
26:ba:27:c0:13:84:3a:78:39:92:c2:d7:42:b5:b4:ff:2f:f8:
f2:f9:74:c9:b9:8b:17:00:37:19:ec:99:de:49:c2:03:68:4c:
ec:61:a8:0f:7c:cd:54:c3:78:57:68:0a:ca:00:1c:97:52:16:
9a:52:8b:87:23:47:bd:0e:45:c9:ef:93:fd:fa:72:d9:05:71:
6b:09:ec:9e:f7:d7:dd:b6:9d:19:74:d9:69:df:37:dc:26:9b:
4f:31:35:a9:d4:9a:27:1b:78:ff:d9:19:44:4b:73:b7:36:d8:
03:66:68:9a:b5:5f:41:e8:32:67:2b:68:10:1d:65:79:de:7b:
c2:21:28:1f:93:a5:5c:f3:4e:34:24:bd:b1:c4:26:12:ef:96:
d8:97:84:87:3c:12:a8:f0:b1:71:e0:f5:94:f3:ce:ae:24:3a:
16:d3:7b:61:e1:25:c4:c1:15:da:df:c8:e4:b8:f9:4f:8d:e7:
68:de:84:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8A4f0zkU7VOUUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YWRlOTU3MmMtNGM1Ny00Yjc1LTgxNjctZGFkNjliYmYxODM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA6d+SeiycYGXs436ZWwLrCc2NrhEXQ7QaKV
7Nb4aUJxZmE9v0bMnUe1I8Gwxhkp8Te3lxfOJpGM5PFSZtH5rUCkkJFEO1G/Vw6S
pzTE1NY0p+yaVDygH/OjeHErRGSo+KGTYphk6iA20kt3aQdG6aWB7tG8CDoGBjY5
I3kCE9RAW4/YDI4psVighd004Wz8AXDdajRKkwenf+3CLBSg0rjEkTJ1moo1nYlf
vNSUHE9zgLAlwOYGeW2zrYPCcp3vPt99CtW4ZUMPM5g8PEEb9MK2psIXIhVsz6oU
tCuV8/fG5E9Kd4MFGzS82BZbUjy6WxBFhxKOHoKNsSplsf2iOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7gO65xZ9US4kks6Dw8IN3xh89rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGFkNmU4ZGMtMjc0NC0z
MzIyLThiZGYtNmRjMWUzZmEyNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8pV/XXPIRPpthrkG/Qte9NpZ+TGvWMZVzxbpnnJo8nhzW9tAGV8/p3
v/iZoDC3y+vZTMKnmW+bWCkjtI3r3Rmx0Ww25MUsRia6J8AThDp4OZLC10K1tP8v
+PL5dMm5ixcANxnsmd5JwgNoTOxhqA98zVTDeFdoCsoAHJdSFppSi4cjR70ORcnv
k/36ctkFcWsJ7J731922nRl02WnfN9wmm08xNanUmicbeP/ZGURLc7c22ANmaJq1
X0HoMmcraBAdZXnee8IhKB+TpVzzTjQkvbHEJhLvltiXhIc8EqjwsXHg9ZTzzq4k
OhbTe2HhJcTBFdrfyOS4+U+N52jehHA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:40:25 2025 by rpki-client