Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2536fa13-8ac1-3f67-8e8b-13f739ba0b9a.roa
File: 2536fa13-8ac1-3f67-8e8b-13f739ba0b9a.roa (raw, json)
Hash identifier: XwJQPOm6KaXWR/F9Pn5CfZjxWBWOb0ZP2zJ/BjhzqY4=
Subject key identifier: 08:71:C9:51:0F:50:15:B4:43:58:0C:EC:DB:65:B7:B3:2B:F3:78:8E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20FD8E60BBAF871A6C1E36
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2536fa13-8ac1-3f67-8e8b-13f739ba0b9a.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397214
IP address blocks: 156.154.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:fd:8e:60:bb:af:87:1a:6c:1e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=4722335d-7bbe-42be-b1bd-c4dc870bc435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:87:06:70:0c:5b:2d:2c:4c:f1:78:c6:94:
37:3d:4b:a2:47:07:02:02:10:13:07:59:da:fe:44:
2a:5d:2c:53:15:5f:6b:35:66:5e:82:08:af:9b:58:
b0:23:28:1c:8a:a8:db:38:7c:4e:cf:36:d9:7c:6c:
57:90:7d:a2:c9:45:44:c1:95:bc:52:7a:36:ba:97:
4d:37:ce:5c:e7:ee:cd:19:ac:01:18:b9:4e:04:52:
07:cf:b7:fe:2f:89:bf:83:52:b6:d6:31:5c:46:38:
74:03:3d:c9:15:eb:75:a5:6d:7b:f8:a3:c6:a9:7e:
e4:d5:78:23:e5:c5:37:53:8d:a0:a1:1b:d5:91:a8:
24:d2:f6:92:45:bb:d5:80:f8:d7:5f:85:04:d5:a9:
a8:35:7a:97:e7:99:90:fe:05:fe:9e:a7:59:e1:34:
70:c3:5d:fa:f1:59:42:7b:1c:b5:cc:6e:7f:35:d0:
87:e9:84:66:89:4f:5b:65:d5:16:fe:22:65:6a:14:
18:73:77:47:36:e6:b9:47:4f:43:92:16:3d:00:8e:
68:83:98:6c:c9:5e:ea:6d:30:cc:25:c3:f2:e5:91:
d4:46:1b:fd:cf:25:fd:92:b2:92:66:76:bd:86:c3:
dd:ea:51:05:42:e5:87:07:64:64:60:97:0c:2f:7d:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:71:C9:51:0F:50:15:B4:43:58:0C:EC:DB:65:B7:B3:2B:F3:78:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2536fa13-8ac1-3f67-8e8b-13f739ba0b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:74:0d:e2:9f:ab:39:09:03:1b:00:6b:50:37:07:af:85:5e:
24:c8:c9:c0:77:e6:4c:c0:8a:7d:4c:29:59:96:97:b9:16:1c:
1d:64:7b:a3:79:79:52:1d:e1:e4:34:f6:0b:fa:7e:bc:0a:65:
6c:3d:32:89:1c:90:27:d8:2c:98:4a:f4:8f:9a:8e:fa:73:b0:
e8:06:64:71:8a:fc:89:5f:5b:6c:08:1d:ac:e7:8c:87:74:b9:
6a:b5:af:03:21:ee:f7:c3:76:e8:9e:4f:8f:21:f8:78:7f:95:
03:59:eb:a4:8d:ce:e0:b6:86:15:e3:ff:9d:41:df:7a:45:90:
df:57:e9:a4:8d:cd:da:6a:84:a9:d0:7c:c8:e5:01:21:dc:06:
c1:a3:fd:a9:3e:a3:5b:90:a6:08:eb:53:5e:39:64:cf:2b:a5:
55:89:eb:78:72:2b:24:7b:79:53:3f:d8:b6:42:e1:3c:39:94:
57:7f:ec:79:85:5c:a1:a6:79:f8:a3:68:b5:a9:90:44:2c:8c:
0e:c8:19:47:3e:d0:d2:5e:42:15:de:6f:1a:95:ba:6e:a9:e8:
dd:f0:ef:67:4f:36:19:ab:e0:68:0b:2b:a4:d2:92:12:54:84:
9c:9c:70:1d:45:83:dd:4d:78:67:25:a5:b0:6a:6e:75:a0:a6:
21:c6:8b:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IP2OYLuvhxpsHjYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
NDcyMjMzNWQtN2JiZS00MmJlLWIxYmQtYzRkYzg3MGJjNDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2GHBnAMWy0sTPF4xpQ3PUuiRwcCAhATB1na
/kQqXSxTFV9rNWZeggivm1iwIygciqjbOHxOzzbZfGxXkH2iyUVEwZW8Uno2updN
N85c5+7NGawBGLlOBFIHz7f+L4m/g1K21jFcRjh0Az3JFet1pW17+KPGqX7k1Xgj
5cU3U42goRvVkagk0vaSRbvVgPjXX4UE1amoNXqX55mQ/gX+nqdZ4TRww1368VlC
exy1zG5/NdCH6YRmiU9bZdUW/iJlahQYc3dHNua5R09DkhY9AI5og5hsyV7qbTDM
JcPy5ZHURhv9zyX9krKSZna9hsPd6lEFQuWHB2RkYJcML33fcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhxyVEPUBW0Q1gM7Ntlt7Mr83iOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjUzNmZhMTMtOGFjMS0z
ZjY3LThlOGItMTNmNzM5YmEwYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGB0DeKfqzkJAxsAa1A3B6+FXiTIycB35kzAin1MKVmWl7kWHB1ke6N5
eVId4eQ09gv6frwKZWw9MokckCfYLJhK9I+ajvpzsOgGZHGK/IlfW2wIHaznjId0
uWq1rwMh7vfDduieT48h+Hh/lQNZ66SNzuC2hhXj/51B33pFkN9X6aSNzdpqhKnQ
fMjlASHcBsGj/ak+o1uQpgjrU145ZM8rpVWJ63hyKyR7eVM/2LZC4Tw5lFd/7HmF
XKGmefijaLWpkEQsjA7IGUc+0NJeQhXebxqVum6p6N3w72dPNhmr4GgLK6TSkhJU
hJyccB1Fg91NeGclpbBqbnWgpiHGi9k=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:05:00 2025 by rpki-client