Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3be8da86-16ec-340c-88ac-0481eaeee7ee.roa
File: 3be8da86-16ec-340c-88ac-0481eaeee7ee.roa (raw, json)
Hash identifier: pjswZ82GcLNsqxkb+22wNTbvuGyylVAE6dKBGDfpVLo=
Subject key identifier: 08:BE:59:99:35:88:CF:07:27:71:7A:FD:3E:D4:33:0D:07:14:E7:FD
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9963E125D6F7C6E1C0C5400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3be8da86-16ec-340c-88ac-0481eaeee7ee.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397226
IP address blocks: 156.154.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:3e:12:5d:6f:7c:6e:1c:0c:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=cb20a58c-c69f-4bf9-a098-de6c86a5d0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:ff:bd:bb:d0:34:c1:06:e3:f9:0e:e2:88:
97:a4:78:a6:6c:e5:62:8a:b1:a3:a5:99:c6:cf:02:
d7:8e:e9:48:3b:11:22:67:f7:74:1a:f4:2a:d6:15:
c4:cb:a5:c8:6b:a2:10:74:6a:be:66:4f:f9:51:bc:
d8:03:a3:cf:aa:36:9f:71:c7:7c:3b:04:3d:b5:3c:
a5:66:25:59:93:86:f3:9e:83:b7:e3:1c:fe:94:a4:
f4:ae:e7:3b:34:cd:87:d9:c5:ea:f7:b1:96:b3:fe:
f5:29:84:e7:f0:92:9b:f8:9a:87:99:ac:82:03:03:
7c:57:27:77:16:e5:6b:43:16:70:a7:fd:7d:02:0b:
43:9a:02:ae:19:5c:ca:10:b4:65:8e:f0:61:45:86:
43:50:c3:98:f2:7d:14:f4:d9:a8:75:9b:78:82:46:
51:f4:0c:b3:31:31:a3:a4:4a:69:58:0e:47:74:13:
20:13:29:a0:ff:e0:f3:82:c8:33:bd:18:52:0c:85:
e1:1b:58:31:53:60:48:a0:68:79:9b:aa:ce:ec:f4:
dc:e7:3d:6f:a5:6e:64:9e:e7:26:4c:46:b3:56:01:
81:a5:3f:b9:f2:64:f3:0f:c1:99:ce:05:11:2c:62:
05:01:f4:c2:31:82:26:cf:35:36:2d:fd:f4:ff:ff:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BE:59:99:35:88:CF:07:27:71:7A:FD:3E:D4:33:0D:07:14:E7:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3be8da86-16ec-340c-88ac-0481eaeee7ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:89:97:c7:b9:92:22:a8:d4:2e:e8:86:19:20:c4:68:c1:e1:
be:7a:b4:89:69:e1:af:7a:04:3c:88:a2:a6:16:0c:cc:ff:ae:
5c:42:49:c2:fa:7c:54:94:48:37:f5:7e:ed:fd:10:59:0c:f9:
ae:b0:ef:55:8b:f9:c1:ff:16:d2:fb:2e:d8:5a:a2:8a:7d:f9:
15:d6:b6:f2:39:56:ae:7a:c5:2c:7a:8c:62:78:ba:47:42:1c:
f0:03:e5:05:35:cb:d1:ea:6d:25:b3:87:30:60:89:6c:90:aa:
c7:b0:70:75:a4:02:09:ed:21:ea:45:93:94:9e:0e:c0:98:b9:
dd:af:ec:8a:a2:98:8e:23:0d:7e:14:0a:70:c8:be:06:e6:85:
5e:d3:8a:ef:ae:57:14:5c:22:08:07:85:1c:57:e9:b4:00:79:
48:d0:80:8d:37:34:e9:a9:aa:ae:5b:a4:07:79:25:d5:1f:9e:
dd:77:e6:6a:f8:11:df:c9:f3:02:70:a3:7c:91:66:20:c0:d8:
32:ae:48:b6:c4:27:08:8a:e6:cd:0a:d5:78:df:56:89:41:c5:
a4:16:2e:cf:55:0b:a8:c6:55:b7:b4:a5:c2:0b:a3:27:05:a5:
25:ce:bf:7b:98:f2:70:c5:fd:31:86:25:1d:df:8d:36:1a:50:
bc:89:d6:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplj4SXW98bhwMVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2IyMGE1OGMtYzY5Zi00YmY5LWEwOTgtZGU2Yzg2YTVkMGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA3/vbvQNMEG4/kO4oiXpHimbOViirGjpZnG
zwLXjulIOxEiZ/d0GvQq1hXEy6XIa6IQdGq+Zk/5UbzYA6PPqjafccd8OwQ9tTyl
ZiVZk4bznoO34xz+lKT0ruc7NM2H2cXq97GWs/71KYTn8JKb+JqHmayCAwN8Vyd3
FuVrQxZwp/19AgtDmgKuGVzKELRljvBhRYZDUMOY8n0U9NmodZt4gkZR9AyzMTGj
pEppWA5HdBMgEymg/+DzgsgzvRhSDIXhG1gxU2BIoGh5m6rO7PTc5z1vpW5knucm
TEazVgGBpT+58mTzD8GZzgURLGIFAfTCMYImzzU2Lf30//+PPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAi+WZk1iM8HJ3F6/T7UMw0HFOf9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2JlOGRhODYtMTZlYy0z
NDBjLTg4YWMtMDQ4MWVhZWVlN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaJl8e5kiKo1C7ohhkgxGjB4b56tIlp4a96BDyIoqYWDMz/rlxCScL6
fFSUSDf1fu39EFkM+a6w71WL+cH/FtL7Lthaoop9+RXWtvI5Vq56xSx6jGJ4ukdC
HPAD5QU1y9HqbSWzhzBgiWyQqsewcHWkAgntIepFk5SeDsCYud2v7IqimI4jDX4U
CnDIvgbmhV7Tiu+uVxRcIggHhRxX6bQAeUjQgI03NOmpqq5bpAd5JdUfnt135mr4
Ed/J8wJwo3yRZiDA2DKuSLbEJwiK5s0K1XjfVolBxaQWLs9VC6jGVbe0pcILoycF
pSXOv3uY8nDF/TGGJR3fjTYaULyJ1rk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:41 2025 by rpki-client