Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e646540-1c9b-3e4c-b9c2-fd6d59ed3de3.roa
File: 5e646540-1c9b-3e4c-b9c2-fd6d59ed3de3.roa (raw, json)
Hash identifier: NsiAi+mbvHBw2uRSMtffqurvvwTqW5Jt3zec8OyJc+Q=
Subject key identifier: 5C:72:EA:1B:39:F5:9F:45:75:8B:14:C8:EA:60:D7:4B:F2:5D:15:8D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858494B642517B3C55742134C3DE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e646540-1c9b-3e4c-b9c2-fd6d59ed3de3.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 12008
IP address blocks: 156.154.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:25:17:b3:c5:57:42:13:4c:3d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=fc511b0c-3b4a-4829-8b2b-d6f20d0352b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:5c:29:8b:bd:6e:35:1a:9b:3a:ea:85:c2:
c6:35:0d:87:a0:6e:ca:28:6b:f3:64:9a:20:69:0a:
77:4d:fa:3c:b3:7b:6a:27:7e:f8:8f:5b:6a:fd:eb:
bd:3f:37:09:43:0f:de:c6:e4:81:57:7b:5a:5b:fe:
7d:9a:44:f0:4b:3f:32:83:03:0f:e0:09:eb:99:43:
3f:30:5e:01:0a:eb:dd:5a:09:43:cb:66:89:c5:70:
45:1e:1a:69:70:e1:84:ee:75:0a:bd:40:40:7e:8a:
d3:4f:16:18:72:6a:71:c0:c3:fa:63:eb:39:82:11:
e7:1f:64:36:d3:44:9f:e0:8d:49:0d:76:ca:03:d2:
24:ce:9c:43:3f:0a:75:6d:eb:c3:f3:9a:42:5b:d9:
ac:8f:93:96:2f:f7:a7:95:ae:da:08:5a:d0:f2:ca:
98:d6:e4:87:3b:ab:c4:21:f9:74:fe:16:e6:bd:9d:
ac:d2:76:4e:2c:cc:b3:f8:23:33:bd:34:8f:f7:6d:
06:e8:55:c3:99:93:b5:8f:4a:56:27:da:19:54:9b:
54:55:82:e0:94:80:0f:a5:8a:86:5f:60:96:8e:4b:
54:30:cf:9f:0b:ca:43:3d:9c:21:0b:63:de:4e:ab:
cf:18:bf:b4:47:b2:69:0e:b9:30:be:ed:25:ba:b5:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:72:EA:1B:39:F5:9F:45:75:8B:14:C8:EA:60:D7:4B:F2:5D:15:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e646540-1c9b-3e4c-b9c2-fd6d59ed3de3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:90:b0:55:05:41:16:6c:99:e1:ae:5c:88:a9:f2:52:8e:38:
13:70:1e:0e:6f:5d:17:c5:17:56:90:81:62:f8:dc:17:9c:7f:
16:7f:59:67:ce:23:b5:96:79:63:fd:01:7a:e0:fc:dc:71:8b:
54:09:ea:6f:8d:21:4a:c1:76:0c:39:7d:68:82:31:51:a4:56:
f7:fd:9b:19:8a:0e:79:b8:c1:a9:9d:1e:c1:81:3e:6b:5e:8f:
87:b0:0b:53:cc:9a:83:cc:c0:f7:c1:2a:99:af:43:ec:b5:a1:
62:45:11:58:27:5a:00:be:69:cb:36:26:8a:af:87:05:20:c8:
54:8f:5e:0c:06:99:f5:41:b0:88:06:02:eb:0a:d6:ab:e2:92:
8f:18:a6:8b:e3:c4:c9:56:41:26:2f:b1:53:7d:6d:6c:93:fa:
66:cb:08:ff:e2:7f:31:90:57:fc:1a:c1:1b:cd:19:b2:1f:49:
10:ee:47:7f:29:05:b2:ca:af:5a:eb:94:5a:13:4d:ac:71:de:
80:c1:78:ee:18:bf:4c:af:0b:88:6c:74:0d:cf:d2:73:2a:35:
c8:f8:b4:b2:a5:f8:b8:88:1e:37:7f:61:ac:ac:c6:58:16:6d:
75:15:27:fe:09:37:64:8a:98:ad:8f:5a:28:b7:b6:cc:02:55:
65:09:60:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCUXs8VXQhNMPeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
ZmM1MTFiMGMtM2I0YS00ODI5LThiMmItZDZmMjBkMDM1MmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ApcKYu9bjUamzrqhcLGNQ2HoG7KKGvzZJog
aQp3Tfo8s3tqJ374j1tq/eu9PzcJQw/exuSBV3taW/59mkTwSz8ygwMP4AnrmUM/
MF4BCuvdWglDy2aJxXBFHhppcOGE7nUKvUBAforTTxYYcmpxwMP6Y+s5ghHnH2Q2
00Sf4I1JDXbKA9IkzpxDPwp1bevD85pCW9msj5OWL/enla7aCFrQ8sqY1uSHO6vE
Ifl0/hbmvZ2s0nZOLMyz+CMzvTSP920G6FXDmZO1j0pWJ9oZVJtUVYLglIAPpYqG
X2CWjktUMM+fC8pDPZwhC2PeTqvPGL+0R7JpDrkwvu0lurXUvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxy6hs59Z9FdYsUyOpg10vyXRWNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWU2NDY1NDAtMWM5Yi0z
ZTRjLWI5YzItZmQ2ZDU5ZWQzZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiQsFUFQRZsmeGuXIip8lKOOBNwHg5vXRfFF1aQgWL43BecfxZ/WWfO
I7WWeWP9AXrg/Nxxi1QJ6m+NIUrBdgw5fWiCMVGkVvf9mxmKDnm4wamdHsGBPmte
j4ewC1PMmoPMwPfBKpmvQ+y1oWJFEVgnWgC+acs2JoqvhwUgyFSPXgwGmfVBsIgG
AusK1qviko8YpovjxMlWQSYvsVN9bWyT+mbLCP/ifzGQV/wawRvNGbIfSRDuR38p
BbLKr1rrlFoTTaxx3oDBeO4Yv0yvC4hsdA3P0nMqNcj4tLKl+LiIHjd/YaysxlgW
bXUVJ/4JN2SKmK2PWii3tswCVWUJYLQ=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:16 2025 by rpki-client