Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78a23a23-2315-37a6-9166-ebd474a4a580.roa
File: 78a23a23-2315-37a6-9166-ebd474a4a580.roa (raw, json)
Hash identifier: MqoI63lL6pBq30eWVv9dqD5z5/3gHbdVjwn72m2e9JQ=
Subject key identifier: 73:96:4C:05:2C:5E:BB:7C:89:20:94:3A:8A:88:F9:A1:6A:C2:4D:4E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20FF36DFC9CF65BC07E500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78a23a23-2315-37a6-9166-ebd474a4a580.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397238
IP address blocks: 156.154.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ff:36:df:c9:cf:65:bc:07:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=e8bfd5c2-f282-4342-a7d3-9b16e23f43a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:24:dc:f6:9e:f3:f3:6d:b5:2f:26:f5:a4:
96:06:d6:c7:43:55:38:c1:f8:a6:7a:5d:05:be:eb:
02:5f:5d:f7:44:0e:18:12:f0:03:5a:0e:60:a8:59:
b8:f5:f0:a7:a6:9b:7e:4e:52:a6:ea:df:8c:31:09:
52:2e:65:db:5e:12:c8:ad:1e:ba:a6:9e:f0:26:46:
f7:d5:54:ef:09:1b:81:d5:b7:c3:07:27:2e:da:8f:
47:cc:bd:10:89:55:df:ab:39:52:8c:4c:e7:80:d2:
13:4c:78:d2:1c:78:54:f2:5a:f4:b4:53:0b:3d:f7:
e0:42:c3:30:8e:bb:04:51:0d:7c:63:88:74:f4:43:
ba:d5:57:53:72:49:63:ae:9b:57:61:b5:b0:35:55:
e2:e9:98:9d:85:75:5f:84:13:d5:86:10:45:14:86:
12:27:a0:b0:d3:5c:34:2c:cf:3e:ad:66:98:3f:97:
ff:fa:27:ec:2c:6e:08:69:c8:52:c2:f4:bb:14:4f:
fb:f1:a2:94:15:f8:c9:4a:5a:ba:3a:d6:c7:d0:ce:
82:fb:62:a5:b6:b3:5d:c6:9d:c9:0f:c1:cf:15:94:
5a:11:b7:ca:ad:a2:aa:b2:d3:d8:2c:68:bb:19:66:
c6:26:9c:c8:a9:25:8a:cc:8d:84:8e:a1:11:79:94:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:96:4C:05:2C:5E:BB:7C:89:20:94:3A:8A:88:F9:A1:6A:C2:4D:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78a23a23-2315-37a6-9166-ebd474a4a580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:21:a1:45:18:e4:b6:60:79:fa:41:4f:30:af:d7:7f:d3:f0:
a4:9b:30:19:01:2c:42:76:9b:f8:cd:3e:4c:36:09:5e:cf:43:
16:92:f9:85:14:23:ed:c8:63:2c:3a:96:64:9b:f8:41:c4:e0:
1f:96:8e:e9:d8:08:32:9b:cd:99:73:7d:6d:9c:c3:50:bc:e6:
6f:bb:c5:4b:0d:a2:a9:11:f8:3f:c4:1b:ef:db:52:15:80:4d:
cc:96:a6:dd:be:9e:b5:1f:49:e5:bc:68:86:d9:f6:64:ab:f2:
18:db:ac:2c:4d:a1:48:bd:e7:5d:e4:ed:51:43:30:29:5e:c5:
80:cb:2f:11:9e:c3:4e:b4:06:36:a1:9e:d8:0e:76:ad:26:a7:
d0:db:64:37:f3:dc:0e:9a:44:07:8d:0e:eb:61:27:29:f9:06:
84:c8:19:87:4e:23:8d:0d:91:2f:88:42:42:63:1b:0a:b3:ca:
2d:3b:4b:7a:b5:54:36:3e:c6:05:38:83:d2:71:68:2d:83:60:
5d:01:d6:ad:d0:f2:9b:23:d9:3e:70:af:8e:fe:2a:ea:97:ba:
7b:7c:e8:ec:7f:7c:b4:55:56:6a:4e:60:a8:f9:aa:d5:c9:5a:
fb:b1:13:17:ec:04:d1:3e:13:1f:f3:62:30:e7:65:64:79:ab:
81:58:cf:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IP8238nPZbwH5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
ZThiZmQ1YzItZjI4Mi00MzQyLWE3ZDMtOWIxNmUyM2Y0M2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUsk3Pae8/NttS8m9aSWBtbHQ1U4wfimel0F
vusCX133RA4YEvADWg5gqFm49fCnppt+TlKm6t+MMQlSLmXbXhLIrR66pp7wJkb3
1VTvCRuB1bfDBycu2o9HzL0QiVXfqzlSjEzngNITTHjSHHhU8lr0tFMLPffgQsMw
jrsEUQ18Y4h09EO61VdTckljrptXYbWwNVXi6ZidhXVfhBPVhhBFFIYSJ6Cw01w0
LM8+rWaYP5f/+ifsLG4IachSwvS7FE/78aKUFfjJSlq6OtbH0M6C+2KltrNdxp3J
D8HPFZRaEbfKraKqstPYLGi7GWbGJpzIqSWKzI2EjqEReZQYtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOWTAUsXrt8iSCUOoqI+aFqwk1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzhhMjNhMjMtMjMxNS0z
N2E2LTkxNjYtZWJkNDc0YTRhNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8hoUUY5LZgefpBTzCv13/T8KSbMBkBLEJ2m/jNPkw2CV7PQxaS+YUU
I+3IYyw6lmSb+EHE4B+WjunYCDKbzZlzfW2cw1C85m+7xUsNoqkR+D/EG+/bUhWA
TcyWpt2+nrUfSeW8aIbZ9mSr8hjbrCxNoUi9513k7VFDMClexYDLLxGew060Bjah
ntgOdq0mp9DbZDfz3A6aRAeNDuthJyn5BoTIGYdOI40NkS+IQkJjGwqzyi07S3q1
VDY+xgU4g9JxaC2DYF0B1q3Q8psj2T5wr47+KuqXunt86Ox/fLRVVmpOYKj5qtXJ
WvuxExfsBNE+Ex/zYjDnZWR5q4FYz3o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:11 2025 by rpki-client