Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6607e3a3-55a2-36c0-9826-dd1d3b316a5d.roa
File: 6607e3a3-55a2-36c0-9826-dd1d3b316a5d.roa (raw, json)
Hash identifier: lJi9MMFnCYkmJwk68AyHd8N/ME5yPGps8y6ph7lGlvM=
Subject key identifier: 30:66:16:86:75:8F:13:0E:44:E1:1E:EC:58:17:7E:9A:66:26:A3:15
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848907605F6F71805E1C4075E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6607e3a3-55a2-36c0-9826-dd1d3b316a5d.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397214
IP address blocks: 156.154.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:05:f6:f7:18:05:e1:c4:07:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=0b7f0f25-d201-4bde-a698-d7e72d567e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:8a:ab:b4:ca:e8:2f:01:81:7e:77:12:c7:
6e:c2:e4:a8:9a:ff:cb:fa:b4:c7:4f:d9:20:47:28:
b7:16:6c:cf:5d:79:a5:4f:57:9c:53:11:b0:4a:3f:
fe:13:0b:33:36:d6:5f:bc:ee:dc:fb:54:90:b4:62:
51:d5:80:f4:ea:fc:b4:3d:eb:22:c8:63:b5:a4:dd:
a9:72:fc:4b:e6:b3:1b:97:18:e1:b7:6d:bb:ca:c5:
55:ad:c5:6b:ca:65:d3:af:be:b9:08:f1:6a:d7:78:
c9:51:9d:54:5b:0f:55:fa:54:c3:4a:61:17:95:67:
79:d0:e6:2f:22:52:5a:73:5e:15:c3:46:45:45:a2:
88:ae:71:83:f5:69:02:a0:44:b2:8d:c5:00:a0:b9:
cb:ad:de:3b:55:5b:64:74:a5:b9:b8:2e:ce:0c:2d:
d2:d5:c1:f6:0e:fe:ac:08:91:13:bc:43:10:7e:c6:
dc:62:1f:61:ea:47:78:f4:71:24:f4:d1:f3:c9:f2:
be:2e:f5:c8:51:4e:0b:6a:a9:08:6d:ff:ba:7f:51:
9a:21:13:45:88:4e:0d:d3:79:5d:fc:9b:6a:c4:6b:
78:1f:54:6a:a6:f4:6f:f0:61:8b:35:fd:59:3f:4c:
88:7e:bc:db:d4:7a:11:05:8a:38:73:a2:19:d8:d0:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:16:86:75:8F:13:0E:44:E1:1E:EC:58:17:7E:9A:66:26:A3:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6607e3a3-55a2-36c0-9826-dd1d3b316a5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:38:00:a4:6a:d7:be:63:f0:91:43:9a:4a:e8:09:cc:4e:54:
e0:b0:3f:d9:f6:b7:f5:44:42:0a:72:b9:96:5c:44:4b:41:04:
fc:0d:10:05:4f:b1:3b:ff:ba:6a:6b:95:83:fb:dd:8c:f2:63:
df:77:87:62:88:1b:de:d8:ca:08:be:3a:0b:87:dd:03:f4:e8:
4d:51:b2:12:a5:9c:53:20:e5:28:87:db:74:80:1d:cd:06:d1:
c9:ca:19:59:92:62:f3:b8:3a:56:0f:20:9d:7b:4a:0e:e6:ab:
56:f0:5f:02:fb:2f:de:b1:a0:8e:37:66:24:08:54:80:94:12:
12:60:82:d7:10:e1:cf:f2:1f:d3:18:3f:24:bc:5d:96:07:36:
2e:de:9e:d9:82:01:9b:7d:d7:bf:b1:c6:65:ff:7d:44:20:31:
af:16:4d:de:9d:47:9f:8b:f6:e0:35:96:a2:5e:14:d3:3d:22:
ac:42:85:51:9e:f6:74:62:98:cd:30:39:35:e3:1c:e5:18:59:
5b:2f:06:5f:12:69:83:ef:66:46:33:a1:42:a6:68:82:8d:b3:
65:4c:bb:7a:0a:52:0d:d0:ff:65:7b:e0:d3:f9:91:f7:55:0f:
9a:9d:60:9c:1f:5f:3d:12:52:89:90:15:53:48:82:cd:76:92:
ba:bf:5d:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgX29xgF4cQHXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
MGI3ZjBmMjUtZDIwMS00YmRlLWE2OTgtZDdlNzJkNTY3ZTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1SKq7TK6C8BgX53EsduwuSomv/L+rTHT9kg
Ryi3FmzPXXmlT1ecUxGwSj/+EwszNtZfvO7c+1SQtGJR1YD06vy0PesiyGO1pN2p
cvxL5rMblxjht227ysVVrcVrymXTr765CPFq13jJUZ1UWw9V+lTDSmEXlWd50OYv
IlJac14Vw0ZFRaKIrnGD9WkCoESyjcUAoLnLrd47VVtkdKW5uC7ODC3S1cH2Dv6s
CJETvEMQfsbcYh9h6kd49HEk9NHzyfK+LvXIUU4LaqkIbf+6f1GaIRNFiE4N03ld
/JtqxGt4H1RqpvRv8GGLNf1ZP0yIfrzb1HoRBYo4c6IZ2NAz6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBmFoZ1jxMOROEe7FgXfppmJqMVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjYwN2UzYTMtNTVhMi0z
NmMwLTk4MjYtZGQxZDNiMzE2YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHY4AKRq175j8JFDmkroCcxOVOCwP9n2t/VEQgpyuZZcREtBBPwNEAVP
sTv/umprlYP73YzyY993h2KIG97Yygi+OguH3QP06E1RshKlnFMg5SiH23SAHc0G
0cnKGVmSYvO4OlYPIJ17Sg7mq1bwXwL7L96xoI43ZiQIVICUEhJggtcQ4c/yH9MY
PyS8XZYHNi7entmCAZt917+xxmX/fUQgMa8WTd6dR5+L9uA1lqJeFNM9IqxChVGe
9nRimM0wOTXjHOUYWVsvBl8SaYPvZkYzoUKmaIKNs2VMu3oKUg3Q/2V74NP5kfdV
D5qdYJwfXz0SUomQFVNIgs12krq/Xb8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:06 2025 by rpki-client