Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa
File: 3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa (raw, json)
Hash identifier: 9PdjR3AaSSH+0s4XUVVZa2gVJ1VKnEv0vlJs9CEdtf8=
Subject key identifier: 07:00:02:75:8C:DF:0E:43:AC:C6:62:FE:FD:0F:FF:8D:D2:05:28:73
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965D67CE362A7E7F66F110
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397241
IP address blocks: 156.154.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5d:67:ce:36:2a:7e:7f:66:f1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=00b59bdc-963c-4969-acde-fbb9f7dbc0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:f0:63:39:78:12:46:54:d1:d2:db:3a:25:
6d:ba:b2:35:8f:a5:f4:bf:93:f8:eb:ff:2b:0f:17:
45:93:ba:1e:93:81:b4:79:82:19:bc:53:82:1e:f9:
bf:31:5d:64:76:04:10:09:da:ac:5e:b8:e2:6e:3c:
7b:3b:bd:5f:e4:4e:b0:9e:20:d3:1f:34:54:42:9f:
73:e8:3a:ba:c7:d4:18:f0:ff:c9:08:87:96:02:a5:
78:be:cd:f4:e4:e2:75:3e:82:fd:f3:8e:5b:71:24:
15:d9:38:09:ad:a7:01:d9:b8:58:1e:ff:45:a8:20:
86:9d:ee:13:12:8c:75:84:3b:5c:87:d1:ac:af:5a:
6a:d9:0f:7f:69:56:48:f0:1a:f2:7b:1e:9d:73:96:
06:3a:7b:06:3b:0e:80:90:e0:ee:d5:a2:ef:b3:d7:
31:ff:16:9f:0b:28:df:b2:0d:ce:97:c0:5e:59:2e:
6d:97:98:f0:07:3e:7c:3d:e6:a2:06:b7:0a:b0:32:
93:2a:45:ae:15:d3:c6:67:c9:de:fd:30:c3:d3:bd:
58:ea:b7:69:95:c6:52:35:ff:64:b3:75:24:ce:46:
5a:d4:66:b1:92:b9:ff:20:cd:7e:04:3e:c6:6c:b1:
39:8b:03:dd:07:6b:bb:7c:b5:71:c3:4e:1b:c1:bc:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:00:02:75:8C:DF:0E:43:AC:C6:62:FE:FD:0F:FF:8D:D2:05:28:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:83:92:97:2e:0c:c6:c5:26:0c:0a:18:4d:58:dd:c7:35:35:
d0:d8:bd:92:57:76:93:ab:7a:ae:91:a6:8f:2f:42:c7:1e:25:
c0:28:75:ce:b7:e9:68:96:3b:ee:82:05:f7:d1:87:23:15:3f:
12:ee:44:8e:3b:6d:bf:ed:97:08:8d:0f:1d:17:e0:74:1d:18:
e5:de:fa:4e:a0:75:24:82:bb:f1:50:04:6a:14:9c:f3:94:fa:
13:5e:ce:8e:a7:80:84:76:7f:50:5d:2b:dc:f5:e3:6b:59:53:
a7:da:3a:e9:61:fd:1f:f4:e2:ae:33:6f:37:04:57:12:61:72:
8e:f1:1b:a4:5e:62:d4:db:6d:d1:c7:5b:d4:79:76:b3:2c:8b:
ae:f0:d7:84:99:e7:b6:51:90:3b:1e:fd:a8:4a:4b:d2:67:d5:
32:e4:14:09:95:0e:5c:ac:7c:55:d0:cb:6d:d1:01:71:4a:3a:
a6:14:2d:a5:1e:14:22:88:4d:1f:b5:bd:87:78:48:cb:ce:e9:
7d:d1:1f:c2:ea:d6:0c:67:0c:12:15:e3:7c:fe:35:05:0a:b9:
3c:ed:a8:c2:f1:49:56:95:74:98:4a:55:1d:45:e4:be:d1:f5:
49:6e:bb:a6:b9:be:60:59:9c:03:a0:de:ee:64:b5:06:49:d7:
72:1c:bb:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipll1nzjYqfn9m8RAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDBiNTliZGMtOTYzYy00OTY5LWFjZGUtZmJiOWY3ZGJjMGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQfwYzl4EkZU0dLbOiVturI1j6X0v5P46/8r
DxdFk7oek4G0eYIZvFOCHvm/MV1kdgQQCdqsXrjibjx7O71f5E6wniDTHzRUQp9z
6Dq6x9QY8P/JCIeWAqV4vs305OJ1PoL9845bcSQV2TgJracB2bhYHv9FqCCGne4T
Eox1hDtch9Gsr1pq2Q9/aVZI8Bryex6dc5YGOnsGOw6AkODu1aLvs9cx/xafCyjf
sg3Ol8BeWS5tl5jwBz58PeaiBrcKsDKTKkWuFdPGZ8ne/TDD071Y6rdplcZSNf9k
s3UkzkZa1Gaxkrn/IM1+BD7GbLE5iwPdB2u7fLVxw04bwbwRwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcAAnWM3w5DrMZi/v0P/43SBShzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2U5ZDc2NGUtNWJmMy0z
ZWQzLWE1OTAtNWRlYjZkNDdlNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWDkpcuDMbFJgwKGE1Y3cc1NdDYvZJXdpOreq6Rpo8vQsceJcAodc63
6WiWO+6CBffRhyMVPxLuRI47bb/tlwiNDx0X4HQdGOXe+k6gdSSCu/FQBGoUnPOU
+hNezo6ngIR2f1BdK9z142tZU6faOulh/R/04q4zbzcEVxJhco7xG6ReYtTbbdHH
W9R5drMsi67w14SZ57ZRkDse/ahKS9Jn1TLkFAmVDlysfFXQy23RAXFKOqYULaUe
FCKITR+1vYd4SMvO6X3RH8Lq1gxnDBIV43z+NQUKuTztqMLxSVaVdJhKVR1F5L7R
9Uluu6a5vmBZnAOg3u5ktQZJ13Icu6k=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:27 2025 by rpki-client