Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/172ba7d9-83e0-3088-8782-af327c284e77.roa
File: 172ba7d9-83e0-3088-8782-af327c284e77.roa (raw, json)
Hash identifier: xrWF8DDlDDul2x21Q3FNsid3gUI5spgNgk3B6eOkJ68=
Subject key identifier: 42:96:7E:4E:E9:4C:D1:66:F4:72:C9:FB:7C:BD:E8:D4:D1:8C:B2:04
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F01C32A35B0B846C72E440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/172ba7d9-83e0-3088-8782-af327c284e77.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397220
IP address blocks: 156.154.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:1c:32:a3:5b:0b:84:6c:72:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=e41de624-5224-4aa3-896e-023eb3aef815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:2b:05:f0:a2:07:4c:21:2f:65:25:36:9c:
db:a8:1a:1c:4f:05:ae:af:20:71:c2:d1:1a:72:c1:
79:76:78:15:b7:cf:ff:0d:f9:10:50:2d:88:a3:05:
33:51:57:ed:d7:f7:af:dd:4a:99:f5:5c:73:e6:20:
c7:9e:fe:04:2d:cf:61:de:cc:b0:1c:d7:d5:2c:0d:
2a:8b:9c:28:a9:27:ec:a4:81:4f:d1:cb:80:7b:c7:
cc:f2:da:cd:a4:54:58:8a:23:de:ca:3f:47:80:33:
2b:40:d1:83:cc:9a:76:e6:36:b6:64:ff:6f:4c:52:
ee:0c:3f:f3:30:a0:94:03:d9:4b:7d:6f:db:f2:4c:
9e:4f:a8:06:77:54:13:ce:d5:13:43:ab:e7:05:47:
34:be:79:a0:d9:2c:06:76:8f:c7:77:67:ce:f1:c9:
af:1a:ee:4f:2d:f7:36:d9:ed:14:6e:9e:a0:45:c4:
f6:28:35:dc:2d:0f:40:7e:d4:35:ae:34:99:f8:63:
ac:7c:5b:07:d8:cc:a2:c7:59:de:a1:b5:4d:f3:08:
57:02:d6:a8:94:c2:67:4f:0c:2b:d1:cd:ab:ad:ba:
df:95:b9:c9:a4:46:56:2f:cf:24:78:5d:a5:bf:2e:
3f:50:28:a5:93:fc:73:95:a7:4e:48:41:21:71:fb:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:96:7E:4E:E9:4C:D1:66:F4:72:C9:FB:7C:BD:E8:D4:D1:8C:B2:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/172ba7d9-83e0-3088-8782-af327c284e77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:60:a9:35:0f:99:f8:14:59:9b:eb:66:80:3f:d4:83:91:eb:
79:fb:40:50:08:7d:40:7b:8a:df:da:4c:7e:b6:a5:26:2e:5d:
9b:80:b6:e8:16:e5:35:ae:78:dc:18:dd:b6:f0:35:14:05:08:
70:bc:18:2c:8e:1d:af:b2:38:08:4f:34:32:f2:84:49:1e:b2:
1c:cf:bd:75:e8:2b:86:61:b2:cc:26:59:50:8b:86:be:b3:63:
84:83:ca:63:d1:2c:cc:3c:f8:af:37:9c:77:bc:0c:80:60:75:
d3:e6:5e:16:51:30:b0:01:8f:e6:31:c7:cd:dd:0e:75:fe:7f:
4e:df:38:1d:03:b2:ad:22:e1:27:37:47:0a:5f:1b:a9:f5:e8:
85:15:79:b3:26:2d:d0:df:27:0d:f8:fb:52:fd:1f:ec:b5:a0:
a6:a1:7f:ee:d9:de:7e:86:2e:5f:95:3d:62:00:48:a2:f6:3a:
91:ce:11:88:0c:fa:cd:5e:44:ea:e2:cf:d7:8b:ef:bf:12:5d:
89:2d:6a:75:fc:cf:9c:04:5b:f2:3b:a8:01:b9:f2:89:f7:b3:
0a:19:b1:b5:b5:86:2e:51:de:d7:66:c2:61:25:8d:20:4e:00:
1b:aa:ee:f2:0a:23:7a:f0:40:8c:06:85:75:a0:2d:d1:95:54:
60:db:fb:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8Bwyo1sLhGxy5EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZTQxZGU2MjQtNTIyNC00YWEzLTg5NmUtMDIzZWIzYWVmODE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx4rBfCiB0whL2UlNpzbqBocTwWuryBxwtEa
csF5dngVt8//DfkQUC2IowUzUVft1/ev3UqZ9Vxz5iDHnv4ELc9h3sywHNfVLA0q
i5woqSfspIFP0cuAe8fM8trNpFRYiiPeyj9HgDMrQNGDzJp25ja2ZP9vTFLuDD/z
MKCUA9lLfW/b8kyeT6gGd1QTztUTQ6vnBUc0vnmg2SwGdo/Hd2fO8cmvGu5PLfc2
2e0Ubp6gRcT2KDXcLQ9AftQ1rjSZ+GOsfFsH2Myix1neobVN8whXAtaolMJnTwwr
0c2rrbrflbnJpEZWL88keF2lvy4/UCilk/xzladOSEEhcfvxoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKWfk7pTNFm9HLJ+3y96NTRjLIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTcyYmE3ZDktODNlMC0z
MDg4LTg3ODItYWYzMjdjMjg0ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFgqTUPmfgUWZvrZoA/1IOR63n7QFAIfUB7it/aTH62pSYuXZuAtugW
5TWueNwY3bbwNRQFCHC8GCyOHa+yOAhPNDLyhEkeshzPvXXoK4ZhsswmWVCLhr6z
Y4SDymPRLMw8+K83nHe8DIBgddPmXhZRMLABj+Yxx83dDnX+f07fOB0Dsq0i4Sc3
RwpfG6n16IUVebMmLdDfJw34+1L9H+y1oKahf+7Z3n6GLl+VPWIASKL2OpHOEYgM
+s1eROriz9eL778SXYktanX8z5wEW/I7qAG58on3swoZsbW1hi5R3tdmwmEljSBO
ABuq7vIKI3rwQIwGhXWgLdGVVGDb+zI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:43 2025 by rpki-client