Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35bd6a65-fa95-386d-8fef-7f8cb0981fc7.roa
File: 35bd6a65-fa95-386d-8fef-7f8cb0981fc7.roa (raw, json)
Hash identifier: 2xRWoFBY/letDVehRKj6Ddmk25dNvqOs2ZtakEewgNI=
Subject key identifier: 74:D8:11:8C:CB:16:4E:C9:56:D6:31:CE:A3:15:1E:0B:9C:62:80:A7
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210202750A8CF801751400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35bd6a65-fa95-386d-8fef-7f8cb0981fc7.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397218
IP address blocks: 156.154.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:02:02:75:0a:8c:f8:01:75:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=3c257ec9-ea1a-45e2-b47e-a0944abbc30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:e9:6d:52:c0:54:c5:f7:5b:c5:75:cd:91:
22:90:e0:a7:56:38:56:18:3a:1b:0d:b3:59:12:32:
9d:d7:f6:7b:96:87:59:07:9a:03:06:e3:ef:d5:10:
49:f3:e9:29:b2:9f:a1:10:ef:c5:b5:0f:87:69:39:
7e:df:79:f6:f7:f1:ee:2f:a6:e0:2e:c5:fa:61:24:
f6:70:9d:2c:af:4c:76:b5:1a:db:f0:a6:06:0c:18:
1a:bf:5a:78:ec:07:34:b0:2f:7a:bd:18:68:0e:d7:
1a:f7:53:eb:7e:dd:d8:bc:e7:90:cb:16:3d:54:28:
bc:ba:35:02:85:ea:0b:e6:77:99:d8:79:d8:ca:d6:
3b:d0:9c:e7:87:c4:6c:35:09:8c:f1:98:d5:6a:f2:
78:4b:79:ef:38:a5:a6:16:6a:5c:0b:49:30:16:59:
d3:a2:29:fa:25:51:88:e2:19:c9:86:3e:8c:35:36:
61:b5:1d:bc:e0:fa:d2:6a:24:69:31:fd:c2:69:c2:
5f:29:ea:a7:71:4b:d3:d8:6b:33:5d:af:83:73:ec:
f1:83:6d:e8:cd:42:31:e2:be:69:a1:ac:5d:6c:16:
0f:2d:fe:85:20:5c:21:97:71:2b:9f:d7:9e:50:9e:
7f:c4:f4:9c:fa:55:07:47:83:df:ef:7a:41:19:9b:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D8:11:8C:CB:16:4E:C9:56:D6:31:CE:A3:15:1E:0B:9C:62:80:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35bd6a65-fa95-386d-8fef-7f8cb0981fc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:08:b0:d0:99:52:7e:a0:60:8d:cc:c4:e2:dd:59:15:cd:01:
3e:01:fa:61:06:a6:6d:33:91:17:5c:1c:1c:b7:33:06:6f:57:
dc:61:71:e0:83:31:ba:ec:68:ef:cc:b7:a6:19:57:ca:9f:a5:
ce:dc:f5:9f:15:fe:dc:89:9d:84:19:53:f9:37:c5:d8:4e:de:
05:b2:fa:67:3d:e7:d1:a1:7d:0d:1b:49:28:6c:ac:f1:b5:16:
90:35:f1:26:69:14:f6:91:b0:57:6c:5d:c9:8a:12:13:f8:9a:
18:f3:97:41:e0:cc:dd:7d:e5:85:2f:f8:17:44:bc:79:60:67:
a5:93:05:59:f9:8e:6a:b1:4a:bb:b3:ab:3e:16:b0:0e:86:d3:
16:1b:fc:c9:70:ee:85:3e:c9:95:db:66:0b:e0:c9:6e:22:08:
fe:fe:68:99:d6:2c:f4:79:c0:7c:13:57:1d:62:dc:6a:e6:bb:
ef:87:b3:f8:76:ed:ee:ca:7d:9b:b8:4f:9c:b2:d7:07:4f:e4:
3e:0a:ca:25:27:81:e8:47:ed:19:5c:f3:9e:43:09:13:38:dd:
d0:82:0f:33:90:6b:d7:93:ae:c7:d5:ce:74:cb:6e:53:d0:b2:
cb:41:18:6b:a2:c1:09:7a:7c:b8:f8:40:c9:45:fe:50:f5:ea:
7c:66:e3:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQICdQqM+AF1FAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
M2MyNTdlYzktZWExYS00NWUyLWI0N2UtYTA5NDRhYmJjMzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpXpbVLAVMX3W8V1zZEikOCnVjhWGDobDbNZ
EjKd1/Z7lodZB5oDBuPv1RBJ8+kpsp+hEO/FtQ+HaTl+33n29/HuL6bgLsX6YST2
cJ0sr0x2tRrb8KYGDBgav1p47Ac0sC96vRhoDtca91Prft3YvOeQyxY9VCi8ujUC
heoL5neZ2HnYytY70Jznh8RsNQmM8ZjVavJ4S3nvOKWmFmpcC0kwFlnToin6JVGI
4hnJhj6MNTZhtR284PrSaiRpMf3CacJfKeqncUvT2GszXa+Dc+zxg23ozUIx4r5p
oaxdbBYPLf6FIFwhl3Ern9eeUJ5/xPSc+lUHR4Pf73pBGZsZiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTYEYzLFk7JVtYxzqMVHgucYoCnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzViZDZhNjUtZmE5NS0z
ODZkLThmZWYtN2Y4Y2IwOTgxZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcIsNCZUn6gYI3MxOLdWRXNAT4B+mEGpm0zkRdcHBy3MwZvV9xhceCD
MbrsaO/Mt6YZV8qfpc7c9Z8V/tyJnYQZU/k3xdhO3gWy+mc959GhfQ0bSShsrPG1
FpA18SZpFPaRsFdsXcmKEhP4mhjzl0HgzN195YUv+BdEvHlgZ6WTBVn5jmqxSruz
qz4WsA6G0xYb/Mlw7oU+yZXbZgvgyW4iCP7+aJnWLPR5wHwTVx1i3Grmu++Hs/h2
7e7KfZu4T5yy1wdP5D4KyiUngehH7Rlc855DCRM43dCCDzOQa9eTrsfVznTLblPQ
sstBGGuiwQl6fLj4QMlF/lD16nxm42U=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:00 2025 by rpki-client