Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a785c30-3480-3c38-8cbc-76cd138708aa.roa
File: 2a785c30-3480-3c38-8cbc-76cd138708aa.roa (raw, json)
Hash identifier: qIJNyGpJCQlewSvSS3dPp0HER2IGtF9WHi/GnCYRZWA=
Subject key identifier: 7A:41:C1:45:B6:F5:4F:89:61:DB:AC:6B:25:23:2E:AE:BD:E1:97:26
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964D9C51271F40391DCF00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a785c30-3480-3c38-8cbc-76cd138708aa.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397242
IP address blocks: 156.154.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:4d:9c:51:27:1f:40:39:1d:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=5abf9a92-0712-4988-b4fe-b41308f67a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:b8:d4:c8:d0:ce:b0:1a:e1:6f:a6:a5:4e:
7b:7e:0a:ff:7d:cc:99:7c:c5:e2:fa:87:ff:61:0c:
97:54:b5:7e:09:0f:f4:ff:76:ae:d2:f8:5b:be:fe:
d4:d3:ca:29:27:da:80:76:c4:7e:f3:40:c4:30:ef:
fa:60:9a:4d:e5:40:c8:d8:67:94:eb:e9:d4:04:6b:
49:7e:17:72:33:93:30:cb:97:73:e6:9e:ba:6f:38:
bf:eb:b0:46:ae:ef:d8:2f:1f:30:3b:50:30:07:c3:
78:d1:d2:e3:6f:c3:34:4b:5c:fe:5c:f5:0b:a1:90:
46:a5:5d:5f:c8:73:fe:87:4d:03:bf:07:a8:2c:27:
eb:ff:48:7e:e9:e1:0b:71:69:cb:07:8c:a8:e3:dd:
05:2e:ca:3c:9f:da:d8:80:91:fe:3f:5d:f0:61:8d:
f8:f1:0c:31:b7:2c:ed:cd:b1:a7:18:bb:cf:78:32:
49:e0:c4:0a:5f:87:5e:f0:f1:e0:e5:26:17:03:2c:
d3:cc:17:04:50:83:86:9c:19:44:e9:3c:fc:4f:00:
ed:77:67:14:49:2e:2e:d4:1b:86:ec:08:87:6c:75:
08:67:33:fc:d7:74:34:44:e5:f1:b2:3d:d3:cb:40:
f8:0a:54:a8:a7:99:c2:26:5e:21:34:7b:a1:bc:fe:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:41:C1:45:B6:F5:4F:89:61:DB:AC:6B:25:23:2E:AE:BD:E1:97:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a785c30-3480-3c38-8cbc-76cd138708aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:84:b5:3d:05:05:df:3d:3f:6a:54:34:ec:65:3b:06:12:9b:
41:f2:5d:97:0d:25:c4:69:b1:27:d9:03:77:21:25:db:85:c8:
3c:dd:f3:d7:e2:5f:48:91:ed:3c:46:f1:80:5f:b4:b5:37:06:
90:47:c1:07:eb:3f:1b:2c:2c:59:e1:95:50:05:91:33:34:c4:
2d:6a:b8:e0:01:70:15:ed:d1:de:7e:b6:a7:4b:30:d3:7f:2b:
60:ec:5c:6b:92:37:24:d3:16:32:4b:41:47:ef:ad:7c:cc:56:
0e:c3:89:c0:d4:69:c7:00:6d:8f:4e:9e:6c:4c:16:3b:50:72:
8d:5e:79:5a:e4:1c:99:18:c7:50:5a:66:9d:dc:4a:66:51:d0:
a3:5f:7f:a3:b2:41:72:b0:26:81:d6:ea:15:1a:1c:94:02:a7:
3b:08:4e:1a:c0:a5:86:ea:0a:84:4a:8a:00:8e:30:e9:62:57:
51:3f:13:e3:a6:b9:de:a1:4f:90:69:8e:03:3e:8d:7f:a2:45:
a0:c1:f5:8e:6f:9c:03:6d:57:f9:fa:da:a1:16:81:c4:d2:0c:
27:61:9d:84:8f:ac:a1:3e:d4:6c:44:22:a8:c0:e4:c5:98:cf:
01:fd:0c:e5:8d:bc:c7:a3:66:e7:03:64:fb:13:54:d0:12:76:
51:2d:cd:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk2cUScfQDkdzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NWFiZjlhOTItMDcxMi00OTg4LWI0ZmUtYjQxMzA4ZjY3YTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRG41MjQzrAa4W+mpU57fgr/fcyZfMXi+of/
YQyXVLV+CQ/0/3au0vhbvv7U08opJ9qAdsR+80DEMO/6YJpN5UDI2GeU6+nUBGtJ
fhdyM5Mwy5dz5p66bzi/67BGru/YLx8wO1AwB8N40dLjb8M0S1z+XPULoZBGpV1f
yHP+h00DvweoLCfr/0h+6eELcWnLB4yo490FLso8n9rYgJH+P13wYY348Qwxtyzt
zbGnGLvPeDJJ4MQKX4de8PHg5SYXAyzTzBcEUIOGnBlE6Tz8TwDtd2cUSS4u1BuG
7AiHbHUIZzP813Q0ROXxsj3Ty0D4ClSop5nCJl4hNHuhvP4S/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpBwUW29U+JYdusayUjLq694ZcmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmE3ODVjMzAtMzQ4MC0z
YzM4LThjYmMtNzZjZDEzODcwOGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6EtT0FBd89P2pUNOxlOwYSm0HyXZcNJcRpsSfZA3chJduFyDzd89fi
X0iR7TxG8YBftLU3BpBHwQfrPxssLFnhlVAFkTM0xC1quOABcBXt0d5+tqdLMNN/
K2DsXGuSNyTTFjJLQUfvrXzMVg7DicDUaccAbY9OnmxMFjtQco1eeVrkHJkYx1Ba
Zp3cSmZR0KNff6OyQXKwJoHW6hUaHJQCpzsIThrApYbqCoRKigCOMOliV1E/E+Om
ud6hT5BpjgM+jX+iRaDB9Y5vnANtV/n62qEWgcTSDCdhnYSPrKE+1GxEIqjA5MWY
zwH9DOWNvMejZucDZPsTVNASdlEtzbE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:57 2025 by rpki-client