Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a36550f9-7098-33c0-85ba-d0d0a198858e.roa
File: a36550f9-7098-33c0-85ba-d0d0a198858e.roa (raw, json)
Hash identifier: 1Lxm8yxYqYpzGUv81VJP4nIdZIej4dpEIAPEz1gnIDA=
Subject key identifier: CF:33:43:D5:77:40:C6:53:14:39:6A:3C:41:45:D7:A7:2D:BF:0B:96
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F009103503E73F166A8380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a36550f9-7098-33c0-85ba-d0d0a198858e.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397241
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:09:10:35:03:e7:3f:16:6a:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=d8ecc041-6c5b-48be-9378-3094b8d7d0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:9e:89:1e:07:fc:2a:fb:f6:dc:b2:f2:0a:
c5:52:52:23:33:d9:45:29:00:00:72:e8:3a:eb:33:
29:3e:0f:0a:82:f8:b3:13:3c:29:58:60:4d:41:e8:
57:e9:00:4d:c6:71:03:92:4f:61:ae:a3:31:f0:5e:
8d:61:42:61:af:98:88:57:10:ba:1e:fb:42:95:38:
40:a8:58:0d:ef:16:1c:d1:7e:4f:55:cc:f2:69:8a:
4d:ab:ea:71:61:33:d3:6b:58:fd:4d:e7:d0:b6:66:
c3:9d:b3:70:08:ba:32:c9:ab:ec:7e:61:ff:bf:0a:
48:6a:36:62:f5:3e:8e:c4:51:cb:c6:14:94:9b:e4:
55:72:1b:f0:53:4d:d1:35:d2:05:13:aa:dd:2e:50:
45:b2:44:d5:13:61:b8:9e:0f:ad:18:b0:17:4f:ba:
f7:c8:27:74:2f:5e:a3:8d:bd:69:ee:12:4b:3a:48:
d9:c5:68:a2:6c:c9:8d:87:35:04:8f:c6:59:33:43:
92:b8:87:f3:68:52:16:87:9b:1d:10:40:5b:ae:9e:
fc:70:de:16:93:a7:d7:c8:00:6b:e2:31:7d:8a:97:
1f:27:f3:67:bc:96:58:a8:89:82:3e:43:69:e3:ec:
d4:26:e9:1a:0c:b5:88:91:ce:03:d4:a7:cc:88:8c:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:43:D5:77:40:C6:53:14:39:6A:3C:41:45:D7:A7:2D:BF:0B:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a36550f9-7098-33c0-85ba-d0d0a198858e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:4c:8b:52:62:6a:e7:ca:cd:d3:b5:99:a3:54:7d:ac:30:a1:
d1:21:02:b1:ff:40:e9:e8:03:31:0e:90:eb:9b:60:aa:cc:ce:
c7:b3:22:3e:50:72:c0:b6:64:f1:79:f6:a9:ce:58:93:13:2e:
e6:f5:93:80:db:40:7e:56:76:0f:1e:36:e3:da:9d:13:00:50:
79:b6:09:02:28:fb:79:2d:48:ec:82:98:71:2d:5d:f9:7c:f5:
fc:df:88:11:5e:4d:03:7b:fe:f6:96:ef:fd:8d:98:fe:c6:db:
db:12:83:f2:3c:7f:22:92:97:d6:94:1d:05:2a:89:d2:5d:60:
1a:72:4e:72:ca:fb:d7:45:3a:5c:68:10:e0:3c:fb:89:ea:57:
3a:ff:e3:44:3f:71:24:15:77:0d:50:57:ae:54:15:d9:8a:db:
75:0e:e3:81:d6:cb:45:84:c3:b0:48:2d:d3:b9:95:21:43:ea:
fc:bc:b6:fa:97:75:2c:a5:54:3d:2c:83:e6:a4:de:5f:ab:03:
d6:60:b5:fd:79:dc:86:54:9f:7d:a1:97:fa:89:e1:4d:d9:0e:
5e:94:80:24:7b:5e:50:eb:9b:05:66:81:3f:5d:d4:a8:1f:da:
99:64:5d:c9:91:4e:eb:88:66:15:b2:dc:57:e2:45:11:83:0d:
ac:28:9c:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8AkQNQPnPxZqg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZDhlY2MwNDEtNmM1Yi00OGJlLTkzNzgtMzA5NGI4ZDdkMGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFaeiR4H/Cr79tyy8grFUlIjM9lFKQAAcug6
6zMpPg8KgvizEzwpWGBNQehX6QBNxnEDkk9hrqMx8F6NYUJhr5iIVxC6HvtClThA
qFgN7xYc0X5PVczyaYpNq+pxYTPTa1j9TefQtmbDnbNwCLoyyavsfmH/vwpIajZi
9T6OxFHLxhSUm+RVchvwU03RNdIFE6rdLlBFskTVE2G4ng+tGLAXT7r3yCd0L16j
jb1p7hJLOkjZxWiibMmNhzUEj8ZZM0OSuIfzaFIWh5sdEEBbrp78cN4Wk6fXyABr
4jF9ipcfJ/NnvJZYqImCPkNp4+zUJukaDLWIkc4D1KfMiIwV+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8zQ9V3QMZTFDlqPEFF16ctvwuWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTM2NTUwZjktNzA5OC0z
M2MwLTg1YmEtZDBkMGExOTg4NThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFMi1JiaufKzdO1maNUfawwodEhArH/QOnoAzEOkOubYKrMzsezIj5Q
csC2ZPF59qnOWJMTLub1k4DbQH5Wdg8eNuPanRMAUHm2CQIo+3ktSOyCmHEtXfl8
9fzfiBFeTQN7/vaW7/2NmP7G29sSg/I8fyKSl9aUHQUqidJdYBpyTnLK+9dFOlxo
EOA8+4nqVzr/40Q/cSQVdw1QV65UFdmK23UO44HWy0WEw7BILdO5lSFD6vy8tvqX
dSylVD0sg+ak3l+rA9Zgtf153IZUn32hl/qJ4U3ZDl6UgCR7XlDrmwVmgT9d1Kgf
2plkXcmRTuuIZhWy3FfiRRGDDawonC4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:52:11 2025 by rpki-client