Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4b9e358-2ae3-30fd-8b25-0c3720ddedfd.roa
File: d4b9e358-2ae3-30fd-8b25-0c3720ddedfd.roa (raw, json)
Hash identifier: gdlYCa2icrk/jcALXkSy6FzQR3QeOR1AbNvTJ3cKio0=
Subject key identifier: E2:FC:19:88:F1:F3:26:34:58:EC:9D:89:3C:68:01:51:26:DD:2B:40
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F013AE4B01974795A95640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4b9e358-2ae3-30fd-8b25-0c3720ddedfd.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397229
IP address blocks: 156.154.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:13:ae:4b:01:97:47:95:a9:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=1ae499a4-46bc-475c-80d6-12f59211b19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:71:a0:5d:eb:58:93:8b:1e:20:be:48:05:
52:9f:09:90:4e:e0:26:16:b5:7e:ab:86:a3:74:40:
97:c4:26:c3:d6:80:e5:69:55:eb:f2:db:ba:80:c2:
6d:f2:84:df:f3:57:5f:31:47:37:51:5d:62:cc:03:
d7:45:1b:9b:c2:3b:34:f8:c1:4f:3b:5c:05:c7:3c:
48:32:45:e0:f3:5a:cb:03:d6:55:de:66:30:a6:03:
8b:b6:57:82:4b:02:10:a9:90:c8:18:7d:31:af:51:
ef:f2:8c:d4:7f:e3:ea:88:76:59:02:af:f4:15:32:
48:8b:02:f0:89:e7:08:82:58:f1:90:d4:e3:6f:a2:
7a:05:78:86:11:02:c0:62:94:70:59:de:fd:11:50:
25:bd:c3:14:9f:c1:39:96:a4:2d:e3:2b:6a:db:7e:
ba:e0:40:8b:d6:29:9c:fc:47:fc:21:4b:ea:ed:bd:
41:b1:f8:50:cf:68:5f:a8:7c:db:e3:37:18:b1:9e:
dc:70:d8:f6:ba:54:8e:a0:ee:37:2e:d0:fe:39:a0:
34:48:a4:7c:d5:91:86:14:13:55:5a:83:86:d6:5e:
12:90:67:66:8f:6e:a4:7c:28:d7:a0:a5:97:90:00:
8a:eb:62:ed:25:9b:40:a3:21:f1:06:7c:95:21:dd:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FC:19:88:F1:F3:26:34:58:EC:9D:89:3C:68:01:51:26:DD:2B:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4b9e358-2ae3-30fd-8b25-0c3720ddedfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:4c:76:f6:88:2a:82:bf:38:84:a0:02:d8:fa:4e:b2:4f:6c:
ba:e6:73:00:10:8a:ad:8f:3e:51:d2:6b:6b:24:be:28:d2:a5:
2c:23:22:1a:4a:7d:3d:ef:e7:62:ff:e5:48:4c:d6:76:40:af:
7d:9b:68:11:a6:0c:10:28:5f:a9:6f:ea:b4:3d:0b:61:50:ce:
65:82:f2:c2:95:cd:85:15:97:5a:7a:8c:4e:87:ec:ca:cd:0b:
f1:aa:32:f6:f5:f0:35:15:e0:87:5c:44:34:15:e9:01:1e:58:
ad:9c:ed:c6:df:70:93:f7:0d:53:03:79:49:a8:8c:2a:35:c6:
5d:72:50:3a:75:87:ae:db:4a:f6:2b:49:c6:32:ea:cb:32:a6:
9b:fc:0e:15:ae:77:0d:0b:32:e9:35:42:01:a2:c4:6e:56:8c:
95:e4:2d:99:2b:05:09:b3:a8:da:4e:da:b4:30:f4:c1:36:97:
d7:0f:8f:e6:71:3a:15:0f:60:07:7b:08:ef:b5:39:9a:58:9c:
39:00:bb:a9:7d:49:59:ce:60:8f:c1:25:3b:8b:bf:98:1b:de:
06:a2:63:4f:9d:0d:2f:b5:31:48:d8:52:4c:16:74:4e:f1:f1:
ce:23:3d:81:a0:78:f2:a7:e3:3f:de:5d:6c:74:92:30:e3:a6:
69:13:e7:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8BOuSwGXR5WpVkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MWFlNDk5YTQtNDZiYy00NzVjLTgwZDYtMTJmNTkyMTFiMTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk5xoF3rWJOLHiC+SAVSnwmQTuAmFrV+q4aj
dECXxCbD1oDlaVXr8tu6gMJt8oTf81dfMUc3UV1izAPXRRubwjs0+MFPO1wFxzxI
MkXg81rLA9ZV3mYwpgOLtleCSwIQqZDIGH0xr1Hv8ozUf+PqiHZZAq/0FTJIiwLw
iecIgljxkNTjb6J6BXiGEQLAYpRwWd79EVAlvcMUn8E5lqQt4ytq23664ECL1imc
/Ef8IUvq7b1BsfhQz2hfqHzb4zcYsZ7ccNj2ulSOoO43LtD+OaA0SKR81ZGGFBNV
WoOG1l4SkGdmj26kfCjXoKWXkACK62LtJZtAoyHxBnyVId0yiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOL8GYjx8yY0WOydiTxoAVEm3StAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDRiOWUzNTgtMmFlMy0z
MGZkLThiMjUtMGMzNzIwZGRlZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5MdvaIKoK/OISgAtj6TrJPbLrmcwAQiq2PPlHSa2skvijSpSwjIhpK
fT3v52L/5UhM1nZAr32baBGmDBAoX6lv6rQ9C2FQzmWC8sKVzYUVl1p6jE6H7MrN
C/GqMvb18DUV4IdcRDQV6QEeWK2c7cbfcJP3DVMDeUmojCo1xl1yUDp1h67bSvYr
ScYy6ssyppv8DhWudw0LMuk1QgGixG5WjJXkLZkrBQmzqNpO2rQw9ME2l9cPj+Zx
OhUPYAd7CO+1OZpYnDkAu6l9SVnOYI/BJTuLv5gb3gaiY0+dDS+1MUjYUkwWdE7x
8c4jPYGgePKn4z/eXWx0kjDjpmkT59o=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:19:46 2025 by rpki-client