Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3289348b-34f7-3508-afa1-db57e1e68ba1.roa
File: 3289348b-34f7-3508-afa1-db57e1e68ba1.roa (raw, json)
Hash identifier: JqPxWYZjd3Rf29vyaYfYY/K5Jxtbvsj4+TGjFVriASg=
Subject key identifier: A5:B6:52:9D:86:74:BD:2C:7E:04:F4:D4:66:52:6E:17:EF:40:75:0F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965D449738AC77E931AE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3289348b-34f7-3508-afa1-db57e1e68ba1.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397238
IP address blocks: 156.154.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5d:44:97:38:ac:77:e9:31:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=be79043d-796b-485e-92bd-b66c9720549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:19:1e:31:29:15:ab:c9:35:b3:ff:ec:3f:
0b:78:10:1e:e9:3f:84:75:c3:ca:71:b2:25:c9:65:
27:53:9f:d8:17:17:27:39:93:a9:94:7c:26:7e:bb:
a9:c0:6d:c7:91:37:85:af:73:34:ad:4b:35:ea:06:
3f:83:56:45:09:fc:49:89:13:38:e8:b5:1e:8f:77:
cd:8c:ff:63:1c:30:b2:91:dd:c3:f8:4f:2c:a6:b2:
66:4d:99:8e:ee:70:b2:49:8a:86:48:5a:02:ef:39:
98:83:58:ee:e9:4e:21:66:c7:97:1f:bb:eb:d0:d5:
f0:9c:02:a2:89:48:09:7b:8c:c7:c1:09:cd:a0:ca:
5e:95:a5:2a:c2:96:55:33:2e:66:df:ff:09:90:33:
b7:ff:41:93:1d:d3:fc:0c:ad:46:0b:73:28:94:e4:
56:b2:95:9a:60:5d:5b:58:47:6e:ad:d1:a7:5a:32:
df:7d:1e:99:1a:18:b9:a5:1d:a8:9c:3c:2a:31:d7:
70:55:4d:77:a2:29:20:83:68:6b:89:a4:59:86:3c:
e0:22:2d:9d:b6:4a:74:49:df:12:82:21:7a:ec:07:
5c:4b:c5:1b:ef:87:75:62:ed:79:94:38:a5:2f:90:
f2:d4:3f:b3:c0:d6:0f:ba:f6:81:61:48:c4:bf:98:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:52:9D:86:74:BD:2C:7E:04:F4:D4:66:52:6E:17:EF:40:75:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3289348b-34f7-3508-afa1-db57e1e68ba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:a0:88:93:03:7b:09:5d:98:91:a3:c1:7e:31:c4:57:09:f6:
a0:b2:e6:8a:71:01:99:25:7c:ef:4e:c1:ba:1d:f1:f3:22:8f:
95:64:2c:8a:83:2e:f9:7f:a1:c5:50:76:e9:89:d8:f1:bb:8f:
d2:c1:c6:7d:18:22:3f:b3:33:73:31:f3:5c:9c:e2:55:1a:62:
2f:fa:1f:63:ab:71:7e:28:37:28:26:37:5d:1a:85:fc:75:19:
79:9c:a0:e8:54:83:9e:61:21:11:7d:66:38:d9:39:f9:70:26:
22:67:cd:ba:2e:7c:fb:de:50:80:57:f3:a9:e5:3c:f8:f1:c2:
44:2f:f0:0a:20:85:d6:7b:72:38:a4:b0:4c:19:97:71:59:01:
65:86:95:eb:87:54:70:32:0c:6a:0c:75:2b:9f:fd:a5:8f:7e:
1d:ce:51:b4:81:e9:e8:11:9e:e7:31:63:0c:22:21:81:07:94:
94:9e:23:d1:8d:f0:b3:a5:e7:f2:e8:81:9a:8b:db:85:ff:ae:
89:ec:f4:af:e1:69:82:f2:35:69:74:e2:13:8c:c3:a2:71:6f:
f9:7d:b3:44:e8:8f:7f:85:16:af:e3:28:97:07:95:18:b2:71:
48:ac:8e:75:a1:7a:e4:75:c1:5c:15:42:e8:67:df:bc:cf:1a:
bf:b7:a4:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipll1Elzisd+kxrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YmU3OTA0M2QtNzk2Yi00ODVlLTkyYmQtYjY2Yzk3MjA1NDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjwZHjEpFavJNbP/7D8LeBAe6T+EdcPKcbIl
yWUnU5/YFxcnOZOplHwmfrupwG3HkTeFr3M0rUs16gY/g1ZFCfxJiRM46LUej3fN
jP9jHDCykd3D+E8sprJmTZmO7nCySYqGSFoC7zmYg1ju6U4hZseXH7vr0NXwnAKi
iUgJe4zHwQnNoMpelaUqwpZVMy5m3/8JkDO3/0GTHdP8DK1GC3MolORWspWaYF1b
WEdurdGnWjLffR6ZGhi5pR2onDwqMddwVU13oikgg2hriaRZhjzgIi2dtkp0Sd8S
giF67AdcS8Ub74d1Yu15lDilL5Dy1D+zwNYPuvaBYUjEv5ihJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKW2Up2GdL0sfgT01GZSbhfvQHUPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzI4OTM0OGItMzRmNy0z
NTA4LWFmYTEtZGI1N2UxZTY4YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2giJMDewldmJGjwX4xxFcJ9qCy5opxAZklfO9Owbod8fMij5VkLIqD
Lvl/ocVQdumJ2PG7j9LBxn0YIj+zM3Mx81yc4lUaYi/6H2OrcX4oNygmN10ahfx1
GXmcoOhUg55hIRF9ZjjZOflwJiJnzboufPveUIBX86nlPPjxwkQv8AoghdZ7cjik
sEwZl3FZAWWGleuHVHAyDGoMdSuf/aWPfh3OUbSB6egRnucxYwwiIYEHlJSeI9GN
8LOl5/LogZqL24X/rons9K/haYLyNWl04hOMw6Jxb/l9s0Toj3+FFq/jKJcHlRiy
cUisjnWheuR1wVwVQuhn37zPGr+3pKU=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:47:13 2025 by rpki-client