Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa
File: cf81221b-0a41-37b9-9909-8340202ab1e1.roa (raw, json)
Hash identifier: YqGYA75+QvXKO032fZ1oTQr3gX5VQPb6VtajhH2EJZE=
Subject key identifier: 04:39:F2:7F:20:A6:95:04:A2:64:3F:7A:D6:91:33:D4:06:38:E9:E9
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00BC35F318D6D652FA540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397221
IP address blocks: 156.154.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0b:c3:5f:31:8d:6d:65:2f:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=0731ad79-626b-4e88-a950-606c592c675d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:37:4e:e5:44:66:b4:66:61:8f:a5:2f:6d:
8f:86:af:ff:85:a5:26:14:12:0a:cc:35:ae:c6:f3:
4d:c0:86:fb:7c:0b:1e:18:89:98:d3:b0:5c:9a:92:
33:3d:d5:ef:d4:11:15:a3:31:7a:a7:80:77:a2:16:
ec:ef:0c:08:6c:a2:ae:63:96:45:cc:54:ef:b3:7a:
06:68:ee:eb:1d:21:34:69:ef:62:0a:4c:db:b2:a9:
36:94:82:13:0e:00:5a:4d:da:1c:ad:ba:8c:18:c6:
49:e2:93:c1:8d:fe:d5:3c:f8:4d:5a:2b:a2:e6:71:
8e:3a:c2:17:de:e1:6e:8b:8e:8f:c4:24:a3:26:fc:
56:0a:f7:40:b2:84:0c:5a:df:3f:60:41:a9:80:27:
40:16:fc:a2:aa:25:96:5f:77:6e:9c:59:83:be:c0:
b7:ad:34:9d:a8:85:af:1a:77:b4:11:ed:dc:e9:1c:
b7:20:b1:4d:02:3c:88:ee:99:19:75:f8:3d:95:8a:
af:53:1c:43:3c:3f:fa:4d:01:97:62:98:14:bb:e9:
d0:f9:67:47:80:57:69:4c:d6:64:bf:ae:f4:37:47:
ab:c1:71:75:7c:e2:08:d5:f9:8f:ec:11:31:28:a5:
11:a3:85:e7:bb:41:25:e1:14:35:d3:e4:dc:b4:22:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:39:F2:7F:20:A6:95:04:A2:64:3F:7A:D6:91:33:D4:06:38:E9:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf81221b-0a41-37b9-9909-8340202ab1e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:90:63:48:ce:08:25:0f:eb:f0:d1:fb:90:7e:f7:57:96:c4:
3a:78:1f:ee:48:11:3f:67:e5:5c:bb:1c:ac:ac:43:9c:8d:b1:
e8:8f:79:98:4f:7e:ef:58:e9:a7:9f:38:97:12:32:86:9d:bd:
fb:cd:b3:8a:7f:e3:35:76:c9:7c:85:5e:25:f3:c5:17:26:f9:
e4:2c:98:63:f1:c6:76:8c:d2:24:15:e1:bc:34:ca:08:d8:f4:
8f:8a:87:74:41:5c:f2:a9:9a:3d:e6:7f:13:a2:f9:0f:b4:9e:
ef:57:08:d7:39:37:6e:45:8e:63:8c:65:1b:8d:e1:76:63:1d:
fc:bd:32:46:6e:c9:20:89:44:ce:80:ca:f8:f7:a5:9d:b4:19:
91:0c:44:3c:a4:42:44:a6:e8:af:62:72:0f:29:3c:5e:db:69:
cc:1a:45:5b:6e:49:44:57:b0:f7:6b:63:cc:f5:00:32:bb:8f:
91:45:a1:af:ce:22:97:7d:f7:dc:d5:f2:54:7e:89:7a:5d:04:
3a:3f:cc:0b:14:d8:c0:d0:c0:68:a1:a2:86:16:19:64:a2:4c:
67:f9:5f:b4:84:66:62:ca:a6:1b:d2:b9:d0:63:aa:7c:c9:9b:
08:57:18:75:19:46:d5:ea:8c:8e:ea:4e:f2:86:f4:09:92:40:
fe:de:f4:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8AvDXzGNbWUvpUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDczMWFkNzktNjI2Yi00ZTg4LWE5NTAtNjA2YzU5MmM2NzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEA3TuVEZrRmYY+lL22Phq//haUmFBIKzDWu
xvNNwIb7fAseGImY07BcmpIzPdXv1BEVozF6p4B3ohbs7wwIbKKuY5ZFzFTvs3oG
aO7rHSE0ae9iCkzbsqk2lIITDgBaTdocrbqMGMZJ4pPBjf7VPPhNWiui5nGOOsIX
3uFui46PxCSjJvxWCvdAsoQMWt8/YEGpgCdAFvyiqiWWX3dunFmDvsC3rTSdqIWv
Gne0Ee3c6Ry3ILFNAjyI7pkZdfg9lYqvUxxDPD/6TQGXYpgUu+nQ+WdHgFdpTNZk
v670N0erwXF1fOII1fmP7BExKKURo4Xnu0El4RQ10+TctCLTgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQ58n8gppUEomQ/etaRM9QGOOnpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2Y4MTIyMWItMGE0MS0z
N2I5LTk5MDktODM0MDIwMmFiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCQY0jOCCUP6/DR+5B+91eWxDp4H+5IET9n5Vy7HKysQ5yNseiPeZhP
fu9Y6aefOJcSMoadvfvNs4p/4zV2yXyFXiXzxRcm+eQsmGPxxnaM0iQV4bw0ygjY
9I+Kh3RBXPKpmj3mfxOi+Q+0nu9XCNc5N25FjmOMZRuN4XZjHfy9MkZuySCJRM6A
yvj3pZ20GZEMRDykQkSm6K9icg8pPF7bacwaRVtuSURXsPdrY8z1ADK7j5FFoa/O
Ipd999zV8lR+iXpdBDo/zAsU2MDQwGihooYWGWSiTGf5X7SEZmLKphvSudBjqnzJ
mwhXGHUZRtXqjI7qTvKG9AmSQP7e9KU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:19 2025 by rpki-client