Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/10d80a2d-0f2e-38b0-922a-b73eb1537d7b.roa
File: 10d80a2d-0f2e-38b0-922a-b73eb1537d7b.roa (raw, json)
Hash identifier: ToJ8mNYpKMsEXl0E+K+kl4DK+C9qJgvDz4WzUXVuhTQ=
Subject key identifier: 8D:17:DD:73:8B:0A:BB:FA:B1:57:98:3E:B1:46:25:FB:71:A0:D6:83
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210F43702BE91B71FF8EA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/10d80a2d-0f2e-38b0-922a-b73eb1537d7b.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397221
IP address blocks: 156.154.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0f:43:70:2b:e9:1b:71:ff:8e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=06273b31-2bac-4c9b-b14f-6e0633e9259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:dd:65:f9:5e:55:fd:b7:a4:23:7d:62:e7:
58:e8:b7:ed:37:13:a7:d3:ef:a5:ff:12:32:48:05:
bb:6e:85:ca:80:80:a8:8b:a8:52:41:a4:8e:dc:75:
da:f5:ce:57:ab:f5:03:ca:6f:17:c4:fa:e2:b7:5a:
5f:4b:28:21:ca:c9:b6:b0:d2:be:5a:be:2c:7d:c6:
a6:01:db:29:60:01:aa:72:f0:c1:c9:be:80:96:6a:
cb:ec:0f:5b:16:ff:e6:b2:c5:ed:6c:92:fd:b7:60:
f4:79:36:04:ea:a3:72:66:7d:d9:ea:5d:96:52:92:
3e:25:c3:6d:ed:70:44:57:da:8f:d2:78:de:75:32:
d7:19:6d:63:e1:46:f8:ba:b9:e4:57:e9:2b:12:c8:
f4:99:ba:a8:c9:3f:6d:5a:73:37:b1:c6:16:80:f0:
1b:d4:22:c6:f3:26:b9:99:e3:0b:9d:ee:b9:eb:a9:
00:79:86:0c:1a:87:00:15:47:c4:8a:40:47:26:8f:
ad:9a:ec:bf:c4:24:57:a1:49:23:71:1e:db:41:5d:
85:5b:07:ae:24:bf:e7:8f:a6:38:ad:3d:61:30:b3:
0d:62:62:8c:ff:47:20:4e:2d:fa:dd:46:14:c3:e3:
e3:40:37:f4:a9:7e:c0:f7:84:03:8a:ae:b8:20:12:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:17:DD:73:8B:0A:BB:FA:B1:57:98:3E:B1:46:25:FB:71:A0:D6:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/10d80a2d-0f2e-38b0-922a-b73eb1537d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:eb:78:67:88:25:26:de:d5:55:f3:3e:9c:80:c5:50:7c:e1:
77:18:be:c6:6f:ca:c0:7b:9d:c9:a7:a5:a5:d0:cc:46:64:b7:
9f:60:ea:5b:76:07:a6:ba:e4:9b:5b:04:5e:c4:24:c1:0d:00:
ed:25:df:dd:2c:f6:42:20:da:8d:ea:12:62:5f:5b:62:08:5e:
01:6e:36:38:47:ce:47:59:4f:75:09:18:ae:cd:eb:bb:6c:06:
6f:df:ea:70:a1:6b:1f:82:18:6f:b7:6f:c8:d7:78:d6:0c:2d:
01:2e:b2:14:0a:8e:43:be:df:52:b0:4a:25:f2:a9:6e:2f:60:
f0:52:73:fc:84:54:b5:3e:b3:1a:24:d8:73:13:59:a8:1d:f9:
50:8b:2b:0d:97:b8:30:4c:6d:fa:8c:aa:52:c1:47:45:38:dc:
ff:f4:66:da:cd:12:9d:7e:d7:ee:0d:e3:27:57:de:14:cc:65:
56:31:62:95:22:a9:ca:b2:63:57:97:fa:d3:b0:70:01:1e:68:
a8:27:df:e2:3e:a5:d4:c8:b5:6a:e8:61:ca:4c:ab:31:32:ee:
90:99:d2:84:f5:41:d0:cc:46:8f:4e:a3:36:50:fc:91:d5:bc:
74:2e:da:51:77:dc:91:2d:28:5f:4f:9b:b2:ff:21:47:a8:89:
3b:39:0e:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQ9DcCvpG3H/jqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
MDYyNzNiMzEtMmJhYy00YzliLWIxNGYtNmUwNjMzZTkyNTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqHdZfleVf23pCN9YudY6LftNxOn0++l/xIy
SAW7boXKgICoi6hSQaSO3HXa9c5Xq/UDym8XxPrit1pfSyghysm2sNK+Wr4sfcam
AdspYAGqcvDByb6AlmrL7A9bFv/mssXtbJL9t2D0eTYE6qNyZn3Z6l2WUpI+JcNt
7XBEV9qP0njedTLXGW1j4Ub4urnkV+krEsj0mbqoyT9tWnM3scYWgPAb1CLG8ya5
meMLne6566kAeYYMGocAFUfEikBHJo+tmuy/xCRXoUkjcR7bQV2FWweuJL/nj6Y4
rT1hMLMNYmKM/0cgTi363UYUw+PjQDf0qX7A94QDiq64IBLfcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0X3XOLCrv6sVeYPrFGJftxoNaDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTBkODBhMmQtMGYyZS0z
OGIwLTkyMmEtYjczZWIxNTM3ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnreGeIJSbe1VXzPpyAxVB84XcYvsZvysB7ncmnpaXQzEZkt59g6lt2
B6a65JtbBF7EJMENAO0l390s9kIg2o3qEmJfW2IIXgFuNjhHzkdZT3UJGK7N67ts
Bm/f6nChax+CGG+3b8jXeNYMLQEushQKjkO+31KwSiXyqW4vYPBSc/yEVLU+sxok
2HMTWagd+VCLKw2XuDBMbfqMqlLBR0U43P/0ZtrNEp1+1+4N4ydX3hTMZVYxYpUi
qcqyY1eX+tOwcAEeaKgn3+I+pdTItWroYcpMqzEy7pCZ0oT1QdDMRo9OozZQ/JHV
vHQu2lF33JEtKF9Pm7L/IUeoiTs5DuY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:37:20 2025 by rpki-client