Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/05cf9f4d-8225-302a-9341-e3c04bb2ebd9.roa
File: 05cf9f4d-8225-302a-9341-e3c04bb2ebd9.roa (raw, json)
Hash identifier: deszBTqUiLDxxgQT8XSd2nPVN9iZYvkfMI8dNhJxl6Y=
Subject key identifier: 91:A5:67:41:9E:BB:C0:99:F1:40:45:4D:EB:34:F6:05:DA:EA:99:16
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848F926B2ECEF266F6383644000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/05cf9f4d-8225-302a-9341-e3c04bb2ebd9.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 397232
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b2:ec:ef:26:6f:63:83:64:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=e0db7f8b-c345-4e97-82fb-bd29901ac405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:af:d6:74:6b:09:f1:91:09:c4:01:2a:80:
cc:49:a3:4d:ff:b8:e7:e5:61:31:21:47:d9:ac:41:
52:53:a0:41:ec:13:da:2d:58:b6:8b:3d:0a:65:79:
18:2a:2b:df:d9:a5:10:84:81:f5:f1:9c:5d:14:ba:
af:16:ca:d9:5f:f4:c8:e1:a5:ba:f0:1b:dc:5c:da:
29:84:05:1a:19:71:8f:10:fb:d6:30:b8:88:58:79:
c0:89:af:81:f0:13:87:2e:b5:43:9b:8a:2b:61:7c:
bf:1d:7b:60:98:e8:ac:e6:f1:0e:1a:6b:01:f1:1b:
da:b7:87:7d:79:08:bb:f1:6f:1c:3d:3b:68:6f:2d:
d1:c4:e1:c2:ff:88:c5:28:d6:67:79:37:26:d4:42:
3c:20:18:6e:f7:c2:b9:05:b3:ab:fc:f1:40:fb:5f:
a9:c1:47:be:9d:65:da:67:53:23:33:70:b6:dd:af:
d3:90:43:96:92:97:8c:86:d5:44:76:e3:d0:67:36:
eb:76:10:e4:58:1d:3d:14:ab:eb:e1:ed:c0:f9:68:
6e:19:c9:a7:46:ce:60:d6:43:c6:db:69:6a:22:9f:
10:e7:ca:d8:77:ad:57:b7:cf:36:c2:08:fb:b0:2b:
02:ac:b9:84:da:79:cb:ce:4e:e0:43:3c:af:93:cf:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:67:41:9E:BB:C0:99:F1:40:45:4D:EB:34:F6:05:DA:EA:99:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/05cf9f4d-8225-302a-9341-e3c04bb2ebd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:88:89:15:01:c2:2b:41:a0:42:76:19:9a:ab:7f:84:23:34:
48:4c:00:6f:f7:36:15:fd:ca:9f:71:b7:66:46:f0:e7:8d:5c:
5d:21:80:22:e9:b7:d3:8b:c5:b2:c6:cc:47:ec:5e:d0:f6:ba:
71:0f:31:21:52:8f:1c:d0:82:ba:2f:71:4f:80:6c:58:bc:bb:
c1:0e:53:01:43:6f:a5:54:ad:4f:eb:65:c4:18:ab:84:6e:5c:
42:7e:12:c3:9d:9a:88:d7:d4:0e:ab:4d:8d:74:be:ba:5d:40:
cd:a5:38:e0:59:d7:f6:f6:96:27:49:f5:d5:03:f3:41:b6:c9:
fe:8c:be:a7:51:a7:2d:0e:a0:16:c3:2c:98:1f:a6:ed:a7:0a:
b3:62:f9:bd:3b:f9:f0:43:8d:bd:75:c4:f4:19:80:db:12:0c:
34:6a:a3:6b:b1:40:f6:af:ac:e7:0b:25:bc:35:ff:02:87:f2:
26:dd:93:9c:ac:77:aa:47:7b:b2:04:b0:5e:ef:cd:a5:e6:78:
dc:91:e8:b4:7f:7a:ba:21:fc:8a:bc:03:26:01:87:c6:64:0b:
88:f4:8e:ac:d0:99:fa:aa:a1:f8:52:d5:b8:01:2f:02:a3:f2:
9b:a1:b7:5e:a7:b8:6a:d2:72:33:ed:70:60:13:ac:96:cb:bd:
67:b8:f2:e8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj5JrLs7yZvY4NkQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZTBkYjdmOGItYzM0NS00ZTk3LTgyZmItYmQyOTkwMWFjNDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfSv1nRrCfGRCcQBKoDMSaNN/7jn5WExIUfZ
rEFSU6BB7BPaLVi2iz0KZXkYKivf2aUQhIH18ZxdFLqvFsrZX/TI4aW68BvcXNop
hAUaGXGPEPvWMLiIWHnAia+B8BOHLrVDm4orYXy/HXtgmOis5vEOGmsB8Rvat4d9
eQi78W8cPTtoby3RxOHC/4jFKNZneTcm1EI8IBhu98K5BbOr/PFA+1+pwUe+nWXa
Z1MjM3C23a/TkEOWkpeMhtVEduPQZzbrdhDkWB09FKvr4e3A+WhuGcmnRs5g1kPG
22lqIp8Q58rYd61Xt882wgj7sCsCrLmE2nnLzk7gQzyvk8+Y9wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJGlZ0Geu8CZ8UBFTes09gXa6pkWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDVjZjlmNGQtODIyNS0z
MDJhLTkzNDEtZTNjMDRiYjJlYmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnJo6AwQA
nJq/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABSIiRUBwitBoEJ2GZqrf4QjNEhMAG/3NhX9yp9xt2ZG8OeN
XF0hgCLpt9OLxbLGzEfsXtD2unEPMSFSjxzQgrovcU+AbFi8u8EOUwFDb6VUrU/r
ZcQYq4RuXEJ+EsOdmojX1A6rTY10vrpdQM2lOOBZ1/b2lidJ9dUD80G2yf6MvqdR
py0OoBbDLJgfpu2nCrNi+b07+fBDjb11xPQZgNsSDDRqo2uxQPavrOcLJbw1/wKH
8ibdk5ysd6pHe7IEsF7vzaXmeNyR6LR/eroh/Iq8AyYBh8ZkC4j0jqzQmfqqofhS
1bgBLwKj8puht16nuGrScjPtcGATrJbLvWe48ug=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:08:22 2025 by rpki-client