Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e71089d-1077-345b-b701-ff278199ce4b.roa
File: 3e71089d-1077-345b-b701-ff278199ce4b.roa (raw, json)
Hash identifier: oHxmuABOiMe+FI1WLWnSsk5ldko8Z+G/eSF923Ez6ys=
Subject key identifier: B0:9F:F0:7A:F4:09:8D:E3:37:B3:F8:E4:61:CC:58:67:C7:06:07:4B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B6427990AA59A871B222480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e71089d-1077-345b-b701-ff278199ce4b.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397223
IP address blocks: 156.154.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:27:99:0a:a5:9a:87:1b:22:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=2321f148-e333-419c-b246-2c68ee5f7e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:a1:13:39:2c:ef:0a:7d:ae:21:6f:c6:fe:
63:99:d2:28:d5:8d:31:3b:b9:69:31:a4:ba:61:99:
d2:e6:62:31:14:78:2a:15:17:24:ce:07:11:15:71:
0c:e3:00:be:f3:a9:79:19:62:0d:61:1e:75:b5:04:
85:49:30:c7:14:a5:79:20:b3:19:d2:81:dd:b2:31:
43:f3:1b:19:df:b9:2c:34:7d:86:4c:60:84:76:7e:
a5:21:b8:65:a3:ad:5f:13:b2:fe:19:90:9c:76:de:
f7:1c:bf:56:38:c7:2a:af:39:07:9b:c5:fe:c9:71:
fc:23:bd:4c:c1:53:fb:b5:77:74:96:f2:63:4f:cb:
f9:16:26:8c:2d:87:ea:06:ea:fa:42:c2:d2:3a:e8:
48:5f:49:e1:e7:90:05:f6:af:e8:61:17:c0:c7:fe:
b7:0f:73:7c:e7:95:62:86:30:b4:95:c1:68:43:c2:
28:88:4c:d1:26:54:6b:e4:ec:16:f5:43:cd:ce:c9:
78:4a:24:23:c1:83:ae:2f:0b:b9:c2:03:bd:1a:34:
55:fc:a4:7b:ba:ff:57:5d:9b:50:3d:ba:b2:4c:b5:
ca:ac:3f:1a:9b:36:19:0b:5f:2d:54:94:d5:a3:1e:
8c:0f:aa:8c:7a:c8:b0:b7:49:8c:5e:d4:cd:99:dd:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:F0:7A:F4:09:8D:E3:37:B3:F8:E4:61:CC:58:67:C7:06:07:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e71089d-1077-345b-b701-ff278199ce4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:78:5b:fc:11:d5:87:54:9a:85:c1:d3:19:62:b2:0c:d0:98:
13:f2:9f:ba:df:d4:a9:ce:8d:b9:b1:25:c0:d3:30:77:60:be:
fc:ae:f2:24:fb:4b:2d:e4:41:8e:c9:3f:a5:71:0d:05:3e:6e:
4d:56:9b:62:c7:fc:74:8d:a5:c4:c8:a1:95:dc:46:44:be:40:
bc:fe:d0:8e:bf:0b:8f:8c:2c:a0:22:d8:90:e1:2a:24:be:11:
d0:01:83:54:d8:d5:7c:56:52:f4:7e:53:ba:b9:06:63:04:4e:
ef:70:ba:8c:79:dc:95:0a:4a:aa:a0:35:90:03:24:02:7a:2a:
be:79:2a:90:6f:1f:79:79:be:51:26:78:bb:17:7a:a9:9b:04:
a6:57:3b:cf:0c:d7:e9:7c:cc:72:03:4a:bd:28:09:39:13:e5:
4a:62:24:48:77:22:cc:97:37:91:ae:f5:de:9c:2f:49:cf:9a:
02:a2:51:c5:8f:68:05:db:ec:2d:a1:6e:5b:be:00:0a:22:81:
ee:ad:33:97:a6:43:2f:4a:ae:68:af:87:b6:86:f7:65:c3:58:
f2:df:f7:ae:e7:82:6e:ee:20:65:0b:51:be:4b:28:c3:07:ce:
63:50:e1:b6:ae:a3:71:d2:91:b1:5a:70:86:85:ec:b6:af:14:
3b:1a:2a:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCeZCqWahxsiJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
MjMyMWYxNDgtZTMzMy00MTljLWIyNDYtMmM2OGVlNWY3ZTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol6hEzks7wp9riFvxv5jmdIo1Y0xO7lpMaS6
YZnS5mIxFHgqFRckzgcRFXEM4wC+86l5GWINYR51tQSFSTDHFKV5ILMZ0oHdsjFD
8xsZ37ksNH2GTGCEdn6lIbhlo61fE7L+GZCcdt73HL9WOMcqrzkHm8X+yXH8I71M
wVP7tXd0lvJjT8v5FiaMLYfqBur6QsLSOuhIX0nh55AF9q/oYRfAx/63D3N855Vi
hjC0lcFoQ8IoiEzRJlRr5OwW9UPNzsl4SiQjwYOuLwu5wgO9GjRV/KR7uv9XXZtQ
PbqyTLXKrD8amzYZC18tVJTVox6MD6qMesiwt0mMXtTNmd2bnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCf8Hr0CY3jN7P45GHMWGfHBgdLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2U3MTA4OWQtMTA3Ny0z
NDViLWI3MDEtZmYyNzgxOTljZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGF4W/wR1YdUmoXB0xlisgzQmBPyn7rf1KnOjbmxJcDTMHdgvvyu8iT7
Sy3kQY7JP6VxDQU+bk1Wm2LH/HSNpcTIoZXcRkS+QLz+0I6/C4+MLKAi2JDhKiS+
EdABg1TY1XxWUvR+U7q5BmMETu9wuox53JUKSqqgNZADJAJ6Kr55KpBvH3l5vlEm
eLsXeqmbBKZXO88M1+l8zHIDSr0oCTkT5UpiJEh3IsyXN5Gu9d6cL0nPmgKiUcWP
aAXb7C2hblu+AAoige6tM5emQy9Krmivh7aG92XDWPLf967ngm7uIGULUb5LKMMH
zmNQ4bauo3HSkbFacIaF7LavFDsaKm8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:51 2025 by rpki-client