Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/282e4a17-3c6d-3325-9948-9995d342e5fe.roa
File: 282e4a17-3c6d-3325-9948-9995d342e5fe.roa (raw, json)
Hash identifier: 4a+3IdzqU+MVzEBFHhupasDLYkxWpdeWq/D/yh5yzEY=
Subject key identifier: C9:94:F2:EB:02:90:71:20:F9:E5:D3:08:3A:1C:AC:34:56:03:35:61
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E6E73599EC209CAE0F20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/282e4a17-3c6d-3325-9948-9995d342e5fe.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397231
IP address blocks: 156.154.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e6:e7:35:99:ec:20:9c:ae:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=8e3c9856-139f-4bd1-aa59-c4b4879b3d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:3c:04:c9:4b:c5:f5:7d:90:66:a7:86:da:
ad:f7:12:94:6d:2c:d9:af:e4:8d:2e:69:92:54:fe:
59:ec:66:1d:bb:cc:a3:1c:a4:ea:c7:23:e1:ff:c4:
fb:db:59:00:37:39:03:fb:96:58:36:87:38:88:82:
86:ab:fd:a6:d9:38:54:09:8f:9d:9f:68:42:38:ce:
d2:7a:37:c0:6b:a4:3b:6f:b9:8b:25:01:c8:1c:64:
6d:01:64:58:61:b9:37:4a:ad:2d:1e:21:07:c8:43:
e6:7e:84:4f:39:60:7a:e2:c5:43:05:ea:42:b6:3c:
01:8d:4b:9f:c0:81:7e:bc:4b:b7:56:72:6c:58:0e:
7d:e8:b0:7d:6c:06:e0:b1:0e:e9:b8:f5:30:97:4e:
a8:1a:cc:b3:bc:52:f2:7b:83:7e:a8:92:13:51:9f:
4e:04:22:bc:0f:0e:9a:39:11:8d:75:e4:05:aa:21:
7d:fd:a6:7a:cc:c7:d2:a1:9b:eb:6f:c8:a3:a9:40:
6c:90:08:30:48:75:28:c5:85:9f:87:34:ef:6e:d5:
35:e1:11:eb:36:9d:15:12:75:f3:e1:0d:6e:a2:63:
dc:80:dc:4d:08:45:b9:c6:58:1e:5b:e1:f5:77:82:
50:78:dd:b3:0d:b5:f0:42:64:c3:a8:7c:bd:56:41:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:F2:EB:02:90:71:20:F9:E5:D3:08:3A:1C:AC:34:56:03:35:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/282e4a17-3c6d-3325-9948-9995d342e5fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:bc:7e:d7:70:74:5c:34:2a:3c:7f:0f:0f:83:0b:43:cd:98:
5b:9e:77:92:5c:80:cf:b4:f6:61:d7:ab:f4:50:3b:a5:8a:67:
04:36:47:c9:ad:a1:59:61:f7:3c:d6:c3:fe:a8:b9:c3:1c:f9:
28:45:5c:bc:79:73:99:af:dc:54:d9:af:9d:7a:31:cf:2b:4e:
42:f6:1a:bc:86:b0:7a:ff:c2:f4:1c:3c:78:e5:17:22:5e:08:
24:46:16:f5:6d:2e:a9:04:60:26:ae:d0:b8:83:8e:cf:27:e4:
0f:36:9d:d7:a8:75:2a:91:4b:74:67:e0:18:e1:38:6e:91:c4:
33:83:0c:83:61:2d:1b:5d:39:00:e1:d0:bb:be:55:ed:8b:ef:
0a:77:91:d3:70:84:35:9f:9b:0c:6e:48:43:ae:95:4f:4a:38:
6e:f2:8b:2f:06:fd:83:27:49:17:cb:11:24:50:42:d2:9e:5a:
56:32:ba:04:61:4f:9c:83:04:6e:bb:63:8c:3a:c6:15:9a:81:
ff:f7:96:35:28:87:7c:18:be:2c:dd:4b:91:fc:b2:b9:40:a3:
1d:0a:15:78:5c:c4:67:bf:f5:0f:7b:67:af:29:27:8f:db:63:
5f:de:9c:48:f9:29:91:1c:6c:7f:2e:a9:35:93:80:fe:9a:42:
44:b0:5b:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRubnNZnsIJyuDyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
OGUzYzk4NTYtMTM5Zi00YmQxLWFhNTktYzRiNDg3OWIzZDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tc8BMlLxfV9kGanhtqt9xKUbSzZr+SNLmmS
VP5Z7GYdu8yjHKTqxyPh/8T721kANzkD+5ZYNoc4iIKGq/2m2ThUCY+dn2hCOM7S
ejfAa6Q7b7mLJQHIHGRtAWRYYbk3Sq0tHiEHyEPmfoRPOWB64sVDBepCtjwBjUuf
wIF+vEu3VnJsWA596LB9bAbgsQ7puPUwl06oGsyzvFLye4N+qJITUZ9OBCK8Dw6a
ORGNdeQFqiF9/aZ6zMfSoZvrb8ijqUBskAgwSHUoxYWfhzTvbtU14RHrNp0VEnXz
4Q1uomPcgNxNCEW5xlgeW+H1d4JQeN2zDbXwQmTDqHy9VkGyzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmU8usCkHEg+eXTCDocrDRWAzVhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjgyZTRhMTctM2M2ZC0z
MzI1LTk5NDgtOTk5NWQzNDJlNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHu8ftdwdFw0Kjx/Dw+DC0PNmFued5JcgM+09mHXq/RQO6WKZwQ2R8mt
oVlh9zzWw/6oucMc+ShFXLx5c5mv3FTZr516Mc8rTkL2GryGsHr/wvQcPHjlFyJe
CCRGFvVtLqkEYCau0LiDjs8n5A82ndeodSqRS3Rn4BjhOG6RxDODDINhLRtdOQDh
0Lu+Ve2L7wp3kdNwhDWfmwxuSEOulU9KOG7yiy8G/YMnSRfLESRQQtKeWlYyugRh
T5yDBG67Y4w6xhWagf/3ljUoh3wYvizdS5H8srlAox0KFXhcxGe/9Q97Z68pJ4/b
Y1/enEj5KZEcbH8uqTWTgP6aQkSwW5k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:51:49 2025 by rpki-client