Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa
File: 29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa (raw, json)
Hash identifier: OytSTwugwBHJWR6xm7Os2q7TyqTbtxlBy6U7yDabtbs=
Subject key identifier: BB:32:31:C8:AD:50:D1:8B:A9:1A:32:4D:44:57:F7:4E:57:68:6E:61
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E99135DFD86DB179F080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397213
IP address blocks: 156.154.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e9:91:35:df:d8:6d:b1:79:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=55449745-7133-4e80-bff7-480f08ea8343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:87:c9:cf:97:eb:5e:34:c2:7b:f4:bf:f7:a8:
43:f7:83:64:67:bb:6e:cc:60:1d:c8:d0:8b:0e:a9:
ae:a8:50:40:4e:c5:78:a3:96:6f:10:34:33:fa:49:
6c:35:0c:66:9b:11:a5:7b:82:68:9a:f3:99:fc:03:
67:69:b9:e0:24:68:b3:b4:b4:01:c9:27:4a:96:23:
5d:64:18:ce:6a:c3:99:5a:61:e3:ab:c5:b3:3c:fe:
34:1b:5c:a3:09:c6:67:c8:a6:e6:c5:ec:13:6c:93:
37:f4:6b:0c:67:05:4c:50:cd:fb:1b:c1:83:26:31:
5a:a1:37:74:62:00:78:8a:db:9c:3c:f5:72:ef:9d:
0e:2d:92:c2:af:2c:80:15:68:96:d4:22:38:77:f3:
40:56:eb:84:1d:be:c5:44:95:be:1e:69:82:74:b0:
fb:75:ec:4c:9b:1f:60:38:a5:53:3a:87:49:74:22:
cc:4a:19:b5:3d:74:6e:e8:eb:ba:b3:51:ac:02:c4:
be:36:5d:15:bf:a2:e7:8a:80:14:fd:87:08:cd:c9:
72:f2:d2:57:ec:69:61:cf:88:5b:fc:1f:c5:88:58:
29:12:40:cc:dc:cb:80:d1:66:fd:11:19:51:eb:dd:
c0:2a:73:c8:70:b8:64:e7:64:f1:c8:df:96:d4:58:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:31:C8:AD:50:D1:8B:A9:1A:32:4D:44:57:F7:4E:57:68:6E:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:fb:bf:c8:1e:f7:bc:cc:b4:6f:74:9e:bc:44:48:ee:18:e8:
43:9b:90:c4:9b:6b:fd:6c:e3:84:d0:4e:76:8a:d4:44:aa:04:
57:57:1a:53:62:db:d3:15:8f:de:1a:b8:05:8f:3a:c7:13:34:
69:f8:5c:c5:fc:10:5c:db:c7:ab:47:75:0a:d6:5d:be:a3:56:
e4:34:aa:71:88:9b:93:e9:02:c2:44:7a:c8:60:f0:a9:a0:27:
f5:e6:d8:45:f9:5a:49:2b:2e:1d:14:36:90:c3:0a:32:b1:de:
f1:86:34:f1:c1:fb:7c:46:0c:0c:b6:de:3b:00:85:45:7d:1f:
78:11:7a:c2:16:32:d0:a4:eb:6c:e8:78:17:33:4a:34:a5:bf:
b0:8c:aa:1a:1c:2e:08:b8:f3:ce:67:d5:e2:82:c9:3a:6b:8a:
0a:de:5f:2a:82:eb:d8:ec:4f:4c:9b:2a:b3:0e:b5:54:ea:74:
de:ca:61:51:98:21:da:c6:e1:75:77:75:0b:03:b7:ca:ef:04:
c4:60:95:d2:ac:97:55:67:1e:d7:13:52:ae:7a:fa:03:5b:f2:
6d:a8:f7:7e:9c:9f:aa:ac:d0:2f:ce:6c:68:21:f7:44:c7:7e:
94:00:24:fc:c7:b2:e7:b8:77:e5:67:f8:1d:9e:0f:61:35:15:
e1:93:85:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRumRNd/YbbF58IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NTU0NDk3NDUtNzEzMy00ZTgwLWJmZjctNDgwZjA4ZWE4MzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4fJz5frXjTCe/S/96hD94NkZ7tuzGAdyNCL
DqmuqFBATsV4o5ZvEDQz+klsNQxmmxGle4JomvOZ/ANnabngJGiztLQBySdKliNd
ZBjOasOZWmHjq8WzPP40G1yjCcZnyKbmxewTbJM39GsMZwVMUM37G8GDJjFaoTd0
YgB4itucPPVy750OLZLCryyAFWiW1CI4d/NAVuuEHb7FRJW+HmmCdLD7dexMmx9g
OKVTOodJdCLMShm1PXRu6Ou6s1GsAsS+Nl0Vv6LnioAU/YcIzcly8tJX7Glhz4hb
/B/FiFgpEkDM3MuA0Wb9ERlR693AKnPIcLhk52TxyN+W1FiQ8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsyMcitUNGLqRoyTURX905XaG5hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjlkYWRjOGYtNzkyYy0z
NzlkLWFlMWEtMmQyMzEyYWI1N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIL7v8ge97zMtG90nrxESO4Y6EObkMSba/1s44TQTnaK1ESqBFdXGlNi
29MVj94auAWPOscTNGn4XMX8EFzbx6tHdQrWXb6jVuQ0qnGIm5PpAsJEeshg8Kmg
J/Xm2EX5WkkrLh0UNpDDCjKx3vGGNPHB+3xGDAy23jsAhUV9H3gResIWMtCk62zo
eBczSjSlv7CMqhocLgi4885n1eKCyTprigreXyqC69jsT0ybKrMOtVTqdN7KYVGY
IdrG4XV3dQsDt8rvBMRgldKsl1VnHtcTUq56+gNb8m2o936cn6qs0C/ObGgh90TH
fpQAJPzHsue4d+Vn+B2eD2E1FeGThao=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:42 2025 by rpki-client