Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85b542c8-603c-3a75-98d8-357f40c93c8e.roa
File: 85b542c8-603c-3a75-98d8-357f40c93c8e.roa (raw, json)
Hash identifier: BybLrklfIL1i9BbqhdhD1BlWqQlso9yCDOPTJi3c1/M=
Subject key identifier: DA:65:34:7B:F9:BE:25:E5:6F:37:3C:C7:92:A8:04:24:CB:AC:0B:88
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246DD2CC95C8089355DA4A7
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85b542c8-603c-3a75-98d8-357f40c93c8e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397219
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:dd:2c:c9:5c:80:89:35:5d:a4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=eade6433-ce32-4417-afee-247ec71b1335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:df:d5:f1:94:13:8d:8c:c5:e2:d0:3c:a7:
11:e0:3e:e9:86:59:14:05:15:f1:df:a8:8f:54:19:
3c:16:7e:e1:82:4e:88:36:91:5e:11:54:43:92:c9:
70:df:7b:49:f4:28:cb:5f:c4:0a:a1:b5:e4:90:f2:
8f:74:1c:aa:e0:84:af:62:0c:6e:d7:9c:3d:e6:70:
24:4b:7a:99:1b:7f:9b:8c:ee:35:40:0b:78:65:66:
a0:4e:7c:de:90:64:36:c7:41:bb:fa:7a:c9:a1:d7:
e0:e6:0c:e3:1a:37:ef:66:24:ee:c8:d6:5a:d4:8e:
a8:f1:9c:d2:40:6d:0e:a3:e5:d3:40:68:04:35:23:
94:a6:9e:1a:be:7b:e1:d4:b1:ed:c0:d7:3c:91:b1:
a0:0a:53:01:51:65:70:fc:0f:e6:e2:ce:10:8f:86:
54:51:31:82:04:88:17:f8:ef:7a:68:ae:f5:6f:bc:
a3:73:2f:b4:f8:46:40:2b:23:08:c2:1e:61:c5:de:
72:ce:89:c7:6b:3e:5d:12:06:e1:9c:99:ff:26:ce:
1d:8b:80:b1:3c:af:f9:53:e9:64:5b:cc:62:88:80:
b5:9b:44:9f:3a:b9:bf:de:33:6c:41:58:89:c8:e9:
94:31:52:2a:39:bb:81:08:df:6f:44:1e:40:18:90:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:34:7B:F9:BE:25:E5:6F:37:3C:C7:92:A8:04:24:CB:AC:0B:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85b542c8-603c-3a75-98d8-357f40c93c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:af:d2:c3:d9:e8:e4:47:36:c2:03:1e:5a:26:05:d2:8d:bc:
38:d8:b6:9c:89:fe:ff:c7:bd:b6:05:8e:1a:4c:0d:05:fe:01:
b4:b7:c0:5e:6d:97:b5:56:45:a1:ee:3c:6b:50:20:4f:18:8c:
d2:40:15:04:0c:c9:00:ec:6d:e3:13:98:15:37:49:04:3a:df:
19:69:03:de:c7:4f:ca:dd:32:a6:e5:80:d2:90:4a:ae:0b:f3:
36:38:c8:63:e5:d1:e5:7f:d9:41:59:1f:26:e4:f5:c2:54:28:
b8:b7:4c:ad:0b:05:87:de:df:5d:9e:aa:f1:4a:c6:4c:b5:c5:
34:df:c8:91:af:15:60:f4:38:ec:93:39:96:b3:33:e7:26:c2:
5e:8b:6d:c8:f1:40:96:d1:4c:b6:f1:75:07:d6:f8:6f:5a:63:
56:b7:4e:0f:d2:10:6a:1f:9b:59:ba:76:73:21:d2:ef:c9:66:
4d:75:b6:2f:e9:9e:d3:a2:a4:e2:44:8f:00:a4:29:05:00:af:
bc:06:6f:8b:1f:55:b9:78:17:eb:ac:7c:e9:99:75:27:01:72:
e8:26:43:6f:2b:3b:6e:5b:05:48:f2:96:03:c7:7a:47:c6:8b:
bf:d8:71:8a:9d:a8:c9:2e:78:b5:23:c2:c9:d5:d8:bf:a9:c2:
fd:7d:18:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRt0syVyAiTVdpKcwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
ZWFkZTY0MzMtY2UzMi00NDE3LWFmZWUtMjQ3ZWM3MWIxMzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAbf1fGUE42MxeLQPKcR4D7phlkUBRXx36iP
VBk8Fn7hgk6INpFeEVRDkslw33tJ9CjLX8QKobXkkPKPdByq4ISvYgxu15w95nAk
S3qZG3+bjO41QAt4ZWagTnzekGQ2x0G7+nrJodfg5gzjGjfvZiTuyNZa1I6o8ZzS
QG0Oo+XTQGgENSOUpp4avnvh1LHtwNc8kbGgClMBUWVw/A/m4s4Qj4ZUUTGCBIgX
+O96aK71b7yjcy+0+EZAKyMIwh5hxd5yzonHaz5dEgbhnJn/Js4di4CxPK/5U+lk
W8xiiIC1m0SfOrm/3jNsQViJyOmUMVIqObuBCN9vRB5AGJDCzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNplNHv5viXlbzc8x5KoBCTLrAuIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODViNTQyYzgtNjAzYy0z
YTc1LTk4ZDgtMzU3ZjQwYzkzYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSv0sPZ6ORHNsIDHlomBdKNvDjYtpyJ/v/HvbYFjhpMDQX+AbS3wF5t
l7VWRaHuPGtQIE8YjNJAFQQMyQDsbeMTmBU3SQQ63xlpA97HT8rdMqblgNKQSq4L
8zY4yGPl0eV/2UFZHybk9cJUKLi3TK0LBYfe312eqvFKxky1xTTfyJGvFWD0OOyT
OZazM+cmwl6LbcjxQJbRTLbxdQfW+G9aY1a3Tg/SEGofm1m6dnMh0u/JZk11ti/p
ntOipOJEjwCkKQUAr7wGb4sfVbl4F+usfOmZdScBcugmQ28rO25bBUjylgPHekfG
i7/YcYqdqMkueLUjwsnV2L+pwv19GL4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:18 2025 by rpki-client