Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/477651e6-38c4-3aa4-963f-abfea2037443.roa
File: 477651e6-38c4-3aa4-963f-abfea2037443.roa (raw, json)
Hash identifier: VYUguBZoC9KftKBBR07qvNr3GXyj+iMrSdRD0SktB7Q=
Subject key identifier: 4A:BF:F2:63:D0:81:92:E6:7D:A2:6B:71:28:F1:40:45:11:CF:E0:E6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858492CB141B9CEB9E0CB08D44100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/477651e6-38c4-3aa4-963f-abfea2037443.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 399167
IP address blocks: 156.154.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:41:b9:ce:b9:e0:cb:08:d4:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=6f831107-2ba9-4d4b-b823-de0edd88368e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:b7:22:bf:a8:54:5c:7f:6a:88:b2:70:3d:
9b:39:cb:6a:4f:66:3f:a7:ad:4e:95:be:0d:50:8c:
d0:b6:60:cb:fb:66:4b:e6:05:a8:b5:03:a8:65:d3:
df:5e:b6:d6:fd:6e:42:33:f6:ed:f8:8e:b6:50:ef:
f2:a2:b5:41:27:c8:33:1f:01:e5:9d:3c:0b:dd:9c:
ba:ab:1e:a4:43:63:1d:46:cd:28:db:f3:f4:82:ec:
67:10:a8:44:6b:71:c2:01:58:aa:39:81:fb:0f:c4:
33:5c:4c:19:9b:9c:38:cf:31:10:da:94:f6:6a:ea:
1f:8c:24:8c:1e:bc:f1:3f:b5:19:ce:16:01:20:38:
f4:0a:d5:74:2e:99:71:55:5c:50:3e:83:3a:90:c0:
df:96:db:22:83:b2:53:fc:a6:24:03:21:e1:dc:7b:
ac:f0:33:2c:b2:82:75:2e:39:3b:3f:81:35:5d:21:
6e:b8:84:30:a2:72:a3:9c:25:7f:ae:6f:8c:ea:42:
c9:2d:9e:24:75:93:c3:e0:76:ed:86:e3:8b:b0:56:
c1:ed:64:e0:43:43:31:e7:58:5d:3c:ca:26:d8:72:
4c:28:9e:5d:ce:c4:9c:84:9c:1d:5d:59:3a:dd:e7:
c6:af:c6:dd:0a:a4:fd:89:4e:c8:5d:d3:0a:3e:87:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BF:F2:63:D0:81:92:E6:7D:A2:6B:71:28:F1:40:45:11:CF:E0:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/477651e6-38c4-3aa4-963f-abfea2037443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:b0:6e:8a:16:99:84:f5:8f:4a:e0:52:21:54:ce:ae:7a:8a:
0d:36:18:4b:bc:42:4b:4b:ea:70:59:4c:b7:a5:93:2f:7f:1e:
f4:82:fc:33:81:c9:38:63:bd:8c:dc:a4:a6:1c:da:fc:f5:ff:
05:86:0d:8c:d7:3f:5c:be:72:c4:ae:b8:ca:ac:08:f3:42:9f:
41:ee:46:7b:bc:e0:09:27:ff:34:0a:2f:f4:39:4a:d4:e7:01:
53:bf:fd:13:f8:5f:65:fd:af:8b:2b:fc:5a:91:88:72:90:47:
81:11:df:b4:d0:ee:b4:51:b0:6c:f0:01:31:cf:86:b6:0c:27:
6e:ec:8d:03:7f:d1:be:7a:7d:e3:0e:af:43:c4:8c:3e:6b:99:
e9:f6:0a:20:9d:6e:e2:f2:de:12:df:5d:79:49:3b:e0:bf:ce:
f5:22:b4:01:55:a3:08:b2:6b:12:a8:32:3f:b3:69:bd:60:5f:
45:52:7a:4a:5b:bd:9a:6a:31:c3:92:33:82:15:59:8c:0d:b0:
ac:35:73:b9:49:96:39:d7:06:d7:69:7f:07:71:bd:9a:84:41:
cb:1d:a3:49:bd:0e:ef:81:d3:4d:3d:88:f7:04:30:fe:69:75:
46:d2:f5:14:54:f2:6e:23:54:c5:ac:a6:d7:20:71:e0:a6:9d:
f6:1d:cf:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssUG5zrngywjUQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NmY4MzExMDctMmJhOS00ZDRiLWI4MjMtZGUwZWRkODgzNjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/S3Ir+oVFx/aoiycD2bOctqT2Y/p61Olb4N
UIzQtmDL+2ZL5gWotQOoZdPfXrbW/W5CM/bt+I62UO/yorVBJ8gzHwHlnTwL3Zy6
qx6kQ2MdRs0o2/P0guxnEKhEa3HCAViqOYH7D8QzXEwZm5w4zzEQ2pT2auofjCSM
HrzxP7UZzhYBIDj0CtV0LplxVVxQPoM6kMDfltsig7JT/KYkAyHh3Hus8DMssoJ1
Ljk7P4E1XSFuuIQwonKjnCV/rm+M6kLJLZ4kdZPD4HbthuOLsFbB7WTgQ0Mx51hd
PMom2HJMKJ5dzsSchJwdXVk63efGr8bdCqT9iU7IXdMKPofxPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEq/8mPQgZLmfaJrcSjxQEURz+DmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDc3NjUxZTYtMzhjNC0z
YWE0LTk2M2YtYWJmZWEyMDM3NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqwbooWmYT1j0rgUiFUzq56ig02GEu8QktL6nBZTLelky9/HvSC/DOB
yThjvYzcpKYc2vz1/wWGDYzXP1y+csSuuMqsCPNCn0HuRnu84Akn/zQKL/Q5StTn
AVO//RP4X2X9r4sr/FqRiHKQR4ER37TQ7rRRsGzwATHPhrYMJ27sjQN/0b56feMO
r0PEjD5rmen2CiCdbuLy3hLfXXlJO+C/zvUitAFVowiyaxKoMj+zab1gX0VSekpb
vZpqMcOSM4IVWYwNsKw1c7lJljnXBtdpfwdxvZqEQcsdo0m9Du+B0009iPcEMP5p
dUbS9RRU8m4jVMWsptcgceCmnfYdz5w=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:48 2025 by rpki-client