Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98bde892-ca2d-39dd-8fa6-a6a0b02178c3.roa
File: 98bde892-ca2d-39dd-8fa6-a6a0b02178c3.roa (raw, json)
Hash identifier: qCQNpZojzgWufs+8JwFSsCcidfZAGuaVgi8v0P5RLw0=
Subject key identifier: 06:E0:D7:B0:D5:C9:93:05:6C:E2:EE:D3:51:FA:80:12:08:15:5C:EE
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965B596C191875D675BE90
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98bde892-ca2d-39dd-8fa6-a6a0b02178c3.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397230
IP address blocks: 156.154.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5b:59:6c:19:18:75:d6:75:be:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=af5e4e1c-f9a8-423b-87f0-146da0f510df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:64:34:bc:b8:38:60:57:e6:9f:f4:bc:cd:
c6:ca:e9:21:a9:cc:ef:57:17:84:21:79:d4:5c:ac:
0a:e6:18:88:51:ff:c3:98:e8:cc:50:d4:d9:fd:38:
cc:4e:87:ae:88:14:5d:ad:70:ca:6d:36:77:f3:bf:
e6:a8:e2:a7:64:10:dd:9e:a8:37:40:8f:42:cb:58:
b9:1e:08:76:6a:05:af:12:88:69:11:0a:66:99:0a:
f1:28:fe:75:da:31:f8:34:7c:ca:ef:1c:b9:8a:eb:
58:98:ae:e2:e0:ce:0f:6e:0b:97:f9:22:5c:7f:1e:
c0:12:ff:8c:31:23:26:78:2a:ab:b3:77:57:f8:63:
4a:3a:a0:16:52:d9:2f:5e:fb:44:a8:56:2d:87:46:
41:e0:8c:29:03:ec:9d:fc:e9:a7:ca:0e:2b:4c:d1:
b8:7c:11:58:93:19:63:df:bf:7e:5c:85:0a:dc:6c:
6f:b6:67:c9:43:31:37:ba:b4:54:c7:78:0d:51:8f:
4d:1a:70:59:89:da:96:92:96:a4:0a:56:e5:1c:b4:
65:0b:09:b9:64:a4:ef:b5:6b:11:95:82:72:f7:38:
b5:7b:33:d4:e2:7f:18:9c:dd:f6:65:b5:93:ff:c9:
89:fe:06:60:c5:51:ac:66:56:67:19:3e:28:77:40:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:D7:B0:D5:C9:93:05:6C:E2:EE:D3:51:FA:80:12:08:15:5C:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98bde892-ca2d-39dd-8fa6-a6a0b02178c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:4b:75:b1:a9:35:a8:7f:17:4a:b4:e1:78:8b:e0:e7:77:1c:
24:9c:2c:0e:73:7c:86:c9:e0:fa:3a:4f:97:d5:fe:df:28:e1:
99:f9:73:73:f8:d4:25:0c:d1:c0:d5:01:89:9f:3d:38:1b:3b:
0e:79:e9:f8:80:b7:8c:d9:8c:91:32:9d:eb:07:ba:c9:ca:37:
2a:a8:16:96:e1:bd:a5:66:50:a0:4c:e5:e3:24:5e:1a:88:57:
d7:10:a6:ba:2b:1b:d9:06:2e:98:0e:25:e3:e2:01:64:ce:4f:
c0:24:83:b5:c8:c7:62:16:9c:fc:e1:50:91:d5:cc:02:a9:be:
5a:c8:ed:3f:9c:fc:e7:ae:07:6e:61:c9:ec:eb:37:82:a4:cd:
95:a0:d3:7f:58:04:7c:13:a7:52:cf:b3:89:dc:dd:79:a8:6f:
6d:30:c7:6d:c7:8f:b7:a7:15:94:93:7d:87:b5:f3:50:d8:c4:
5a:b8:eb:8a:6c:9e:27:2d:b8:18:3d:37:69:fd:64:7b:e7:1c:
26:ce:26:d9:ff:34:0b:48:2e:93:da:ad:bb:28:b2:a8:59:1a:
62:2d:85:b6:ed:a5:20:ca:48:bb:75:74:14:8e:c3:8a:a5:c0:
6b:5a:5b:4b:8a:2a:27:89:5b:9a:d8:96:ba:22:a2:30:a2:6e:
bf:c7:eb:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplltZbBkYddZ1vpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YWY1ZTRlMWMtZjlhOC00MjNiLTg3ZjAtMTQ2ZGEwZjUxMGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl41kNLy4OGBX5p/0vM3GyukhqczvVxeEIXnU
XKwK5hiIUf/DmOjMUNTZ/TjMToeuiBRdrXDKbTZ387/mqOKnZBDdnqg3QI9Cy1i5
Hgh2agWvEohpEQpmmQrxKP512jH4NHzK7xy5iutYmK7i4M4PbguX+SJcfx7AEv+M
MSMmeCqrs3dX+GNKOqAWUtkvXvtEqFYth0ZB4IwpA+yd/Omnyg4rTNG4fBFYkxlj
379+XIUK3GxvtmfJQzE3urRUx3gNUY9NGnBZidqWkpakClblHLRlCwm5ZKTvtWsR
lYJy9zi1ezPU4n8YnN32ZbWT/8mJ/gZgxVGsZlZnGT4od0BP/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbg17DVyZMFbOLu01H6gBIIFVzuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOThiZGU4OTItY2EyZC0z
OWRkLThmYTYtYTZhMGIwMjE3OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxLdbGpNah/F0q04XiL4Od3HCScLA5zfIbJ4Po6T5fV/t8o4Zn5c3P4
1CUM0cDVAYmfPTgbOw556fiAt4zZjJEynesHusnKNyqoFpbhvaVmUKBM5eMkXhqI
V9cQprorG9kGLpgOJePiAWTOT8Akg7XIx2IWnPzhUJHVzAKpvlrI7T+c/OeuB25h
yezrN4KkzZWg039YBHwTp1LPs4nc3Xmob20wx23Hj7enFZSTfYe181DYxFq464ps
nictuBg9N2n9ZHvnHCbOJtn/NAtILpParbsosqhZGmIthbbtpSDKSLt1dBSOw4ql
wGtaW0uKKieJW5rYlroiojCibr/H654=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:08:22 2025 by rpki-client