Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/32518b36-3f07-3615-899d-a1e64ee92568.roa
File: 32518b36-3f07-3615-899d-a1e64ee92568.roa (raw, json)
Hash identifier: zixYjCXBIagNzQn7CVC4fvFazXPepAUcW0JMiUM3D5A=
Subject key identifier: AD:A8:5A:85:03:27:12:D8:50:10:F4:00:3F:4E:84:1F:29:0C:D5:14
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20FD7EB33B8F3EEC05B780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/32518b36-3f07-3615-899d-a1e64ee92568.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397213
IP address blocks: 156.154.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:fd:7e:b3:3b:8f:3e:ec:05:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=85307f4e-574d-4314-ad87-e44cbfb86e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5f:97:27:49:9a:7d:20:cc:58:0c:5c:82:50:
ca:a0:cb:4d:7f:8c:8a:b6:f6:0e:ee:5f:d1:5b:d0:
9b:1c:60:77:3c:00:78:ef:60:37:94:3c:f5:c5:f6:
96:1d:97:5b:ba:e3:27:75:10:30:44:66:de:b2:4a:
15:6d:c4:42:85:f9:fa:89:2f:ff:84:80:cc:7c:36:
da:90:29:37:97:8c:2e:e7:f2:3f:26:ff:68:fa:e2:
a6:18:3b:55:26:fc:87:5e:2d:5e:1f:d1:03:87:9f:
bc:d8:dc:95:03:e6:63:0e:cc:31:6e:7a:82:fc:a5:
d8:fd:59:5b:4e:7f:e5:49:cb:a9:86:a3:19:d3:04:
0f:07:4b:38:8f:a9:bd:8c:7d:0d:ab:d4:fc:fe:99:
4b:c9:9d:5e:4d:c6:34:93:62:3c:20:d9:08:29:7f:
44:8f:00:59:76:95:36:f0:ba:15:e2:fb:0c:9e:50:
76:42:be:3e:80:4d:79:d5:08:c8:ce:30:d4:a1:c6:
2e:f4:b5:42:d1:24:cd:f6:7b:ce:ab:f3:93:94:e9:
35:8f:36:fe:9a:6e:7e:d5:4b:d1:01:a8:e9:0e:07:
d4:f1:e6:99:94:96:de:e5:40:11:91:20:59:99:a3:
d4:67:a8:5e:a7:9b:95:2f:0c:2f:21:74:7e:99:49:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:5A:85:03:27:12:D8:50:10:F4:00:3F:4E:84:1F:29:0C:D5:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/32518b36-3f07-3615-899d-a1e64ee92568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:de:9c:9d:50:2f:13:a2:92:da:9f:37:0b:2f:db:56:47:b6:
05:5d:a9:17:df:08:d8:10:62:e4:12:d0:d1:90:18:34:f1:da:
99:55:d6:ef:51:ea:8e:8f:0f:0d:0c:56:91:53:e5:73:90:65:
2a:56:51:12:42:c9:80:13:3e:d9:ef:84:2f:b3:7e:e0:e6:5d:
4a:83:7f:45:7b:c0:a5:71:38:38:8f:8e:f3:28:1f:b1:ec:5a:
2f:cc:d4:31:92:a4:ea:09:85:30:58:7e:0e:0d:ac:2b:a1:3d:
85:b4:f5:27:d4:d5:5c:1b:8f:fc:c5:d3:1e:f1:f4:95:10:49:
0a:06:fa:c4:44:f8:16:ec:a9:b8:61:be:02:ab:d6:b3:ce:59:
90:c9:0f:2d:e4:41:fd:51:f9:2b:e3:b0:fb:55:6d:b1:36:c7:
20:aa:93:f6:60:2c:b5:66:31:0b:09:70:a1:6b:e8:b2:7c:49:
86:a9:b4:fd:fb:84:62:5b:ac:b1:bb:0d:eb:f4:6f:3c:d0:0a:
06:49:35:22:f5:3d:f7:d6:51:a8:11:ef:6b:79:1e:cb:24:77:
a6:33:8a:5d:fa:4e:d1:a0:b5:55:01:f9:f6:70:ff:3a:e3:ba:
2e:4b:44:26:a9:e1:03:4b:e7:04:71:8d:e4:b8:f8:d4:4c:46:
f4:19:61:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IP1+szuPPuwFt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
ODUzMDdmNGUtNTc0ZC00MzE0LWFkODctZTQ0Y2JmYjg2ZTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl+XJ0mafSDMWAxcglDKoMtNf4yKtvYO7l/R
W9CbHGB3PAB472A3lDz1xfaWHZdbuuMndRAwRGbeskoVbcRChfn6iS//hIDMfDba
kCk3l4wu5/I/Jv9o+uKmGDtVJvyHXi1eH9EDh5+82NyVA+ZjDswxbnqC/KXY/Vlb
Tn/lScuphqMZ0wQPB0s4j6m9jH0Nq9T8/plLyZ1eTcY0k2I8INkIKX9EjwBZdpU2
8LoV4vsMnlB2Qr4+gE151QjIzjDUocYu9LVC0STN9nvOq/OTlOk1jzb+mm5+1UvR
AajpDgfU8eaZlJbe5UARkSBZmaPUZ6hep5uVLwwvIXR+mUm6lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK2oWoUDJxLYUBD0AD9OhB8pDNUUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzI1MThiMzYtM2YwNy0z
NjE1LTg5OWQtYTFlNjRlZTkyNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnenJ1QLxOiktqfNwsv21ZHtgVdqRffCNgQYuQS0NGQGDTx2plV1u9R
6o6PDw0MVpFT5XOQZSpWURJCyYATPtnvhC+zfuDmXUqDf0V7wKVxODiPjvMoH7Hs
Wi/M1DGSpOoJhTBYfg4NrCuhPYW09SfU1Vwbj/zF0x7x9JUQSQoG+sRE+Bbsqbhh
vgKr1rPOWZDJDy3kQf1R+SvjsPtVbbE2xyCqk/ZgLLVmMQsJcKFr6LJ8SYaptP37
hGJbrLG7Dev0bzzQCgZJNSL1PffWUagR72t5Hsskd6Yzil36TtGgtVUB+fZw/zrj
ui5LRCap4QNL5wRxjeS4+NRMRvQZYQ8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:57 2025 by rpki-client