Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/121d050e-c394-311b-ae0b-ac504b8f55b2.roa
File: 121d050e-c394-311b-ae0b-ac504b8f55b2.roa (raw, json)
Hash identifier: Hy1weHk/zpPoRD4Qywx9X7rimFHIQvQMvR0yMWN3iMA=
Subject key identifier: 6F:2C:A5:09:68:E2:55:0B:9E:C0:E6:27:89:DF:15:6F:63:D1:0A:7F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210E51B1A9FAE19755E300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/121d050e-c394-311b-ae0b-ac504b8f55b2.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397236
IP address blocks: 156.154.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0e:51:b1:a9:fa:e1:97:55:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=cdb16ba1-68e0-4d9d-94ae-f03ef8fdae87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:4d:a2:98:96:be:4b:f7:e0:4d:7a:c3:34:
05:64:d3:69:20:a3:1c:c0:37:34:a7:81:39:34:61:
81:66:27:7c:21:c4:bc:3e:d5:42:34:47:a6:93:8b:
a9:77:6b:a1:4b:ef:22:2e:05:9c:8e:82:f4:5d:2f:
ca:5d:21:00:ad:4c:a4:f4:26:ee:6c:a6:ec:78:8f:
2f:8e:15:bc:d3:39:8b:25:ad:69:54:00:0a:75:b2:
ff:bb:55:4d:12:c0:a6:cb:8f:4b:ed:f5:f1:0b:af:
13:65:c3:62:4d:ac:82:1b:b3:73:2f:8e:df:5f:2f:
32:94:dc:26:50:49:76:3f:e4:95:ee:2d:96:de:fb:
83:75:bd:f6:c6:02:d8:e1:a4:02:5c:08:2c:e0:94:
90:c7:72:45:5a:58:7c:60:2e:49:bb:1e:bf:8e:28:
86:b4:62:28:74:02:ae:8a:64:c0:0d:9f:0b:da:f8:
be:de:e5:16:ac:c3:ef:44:c4:0e:35:f3:23:36:a2:
73:d2:3a:ea:52:18:b4:f2:71:69:cb:fc:aa:6e:1b:
8a:c3:4e:57:79:f0:97:fc:3f:af:a7:26:d4:8a:db:
9d:65:77:e5:80:fc:0b:2f:33:07:c4:b2:5b:f9:6c:
56:3b:23:42:9f:30:fa:21:81:d0:50:5d:6a:95:52:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:A5:09:68:E2:55:0B:9E:C0:E6:27:89:DF:15:6F:63:D1:0A:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/121d050e-c394-311b-ae0b-ac504b8f55b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:4c:8b:e4:59:a5:73:af:75:f7:89:74:ca:2c:93:8f:3d:e4:
35:8c:3d:2f:a1:0f:2e:7b:00:c8:a6:47:c9:1e:16:87:aa:8b:
58:fc:af:4a:ee:96:f1:21:63:f1:45:d3:83:e8:76:d5:8e:fd:
e1:28:e7:13:dc:87:a0:58:6a:c7:63:ca:59:26:a0:4e:a1:7a:
97:c3:16:c9:d0:22:59:79:fc:d6:37:66:4d:2a:4e:63:b6:53:
47:a6:a3:f3:70:79:29:a4:a4:b3:af:32:61:34:98:6d:69:d1:
c4:5f:85:d2:21:14:b5:d5:14:da:94:da:d0:1c:00:ac:2a:32:
dd:59:43:b9:b3:8e:1a:8b:ef:c5:54:70:61:bf:af:03:85:41:
2b:d7:fb:ab:b5:74:fa:2b:59:f8:8f:59:60:85:f3:90:ff:bb:
9b:30:b2:37:b3:19:da:3a:87:09:af:3a:24:5e:5f:9f:6c:29:
21:ca:c2:8a:ec:3c:9d:87:45:46:f8:52:c3:f0:ab:38:cd:36:
db:44:da:9e:96:3c:e6:c8:27:52:72:5f:f3:22:ec:fd:f3:27:
6d:9c:ac:66:b4:62:d8:35:59:22:04:ba:ae:5e:4f:ad:11:ce:
b7:db:4c:84:3f:4b:c5:92:c7:50:f8:a2:98:0a:e3:c7:63:38:
12:e5:71:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQ5Rsan64ZdV4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
Y2RiMTZiYTEtNjhlMC00ZDlkLTk0YWUtZjAzZWY4ZmRhZTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKFNopiWvkv34E16wzQFZNNpIKMcwDc0p4E5
NGGBZid8IcS8PtVCNEemk4upd2uhS+8iLgWcjoL0XS/KXSEArUyk9CbubKbseI8v
jhW80zmLJa1pVAAKdbL/u1VNEsCmy49L7fXxC68TZcNiTayCG7NzL47fXy8ylNwm
UEl2P+SV7i2W3vuDdb32xgLY4aQCXAgs4JSQx3JFWlh8YC5Jux6/jiiGtGIodAKu
imTADZ8L2vi+3uUWrMPvRMQONfMjNqJz0jrqUhi08nFpy/yqbhuKw05XefCX/D+v
pybUitudZXflgPwLLzMHxLJb+WxWOyNCnzD6IYHQUF1qlVLZXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8spQlo4lULnsDmJ4nfFW9j0Qp/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTIxZDA1MGUtYzM5NC0z
MTFiLWFlMGItYWM1MDRiOGY1NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZMi+RZpXOvdfeJdMosk4895DWMPS+hDy57AMimR8keFoeqi1j8r0ru
lvEhY/FF04PodtWO/eEo5xPch6BYasdjylkmoE6hepfDFsnQIll5/NY3Zk0qTmO2
U0emo/NweSmkpLOvMmE0mG1p0cRfhdIhFLXVFNqU2tAcAKwqMt1ZQ7mzjhqL78VU
cGG/rwOFQSvX+6u1dPorWfiPWWCF85D/u5swsjezGdo6hwmvOiReX59sKSHKwors
PJ2HRUb4UsPwqzjNNttE2p6WPObIJ1JyX/Mi7P3zJ22crGa0Ytg1WSIEuq5eT60R
zrfbTIQ/S8WSx1D4opgK48djOBLlcZI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:36:14 2025 by rpki-client