Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e40da5f-0495-362f-b203-5ffb7172d733.roa
File: 9e40da5f-0495-362f-b203-5ffb7172d733.roa (raw, json)
Hash identifier: Bk/MiRZbxw6xrV61M1LYRo63565BRZGgQQmgZcE7/ck=
Subject key identifier: 0B:E6:03:E9:AE:F7:B5:84:D1:35:D9:F8:BE:96:7F:64:8C:E6:84:0C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584940397754AA4F109C86A28300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e40da5f-0495-362f-b203-5ffb7172d733.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 397221
IP address blocks: 156.154.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:77:54:aa:4f:10:9c:86:a2:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=884a075e-4251-4aea-a52a-2b157303ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a8:e4:bb:d3:6a:87:63:93:4a:52:45:5b:ab:
ed:4b:0c:66:0f:9f:b9:7e:cd:b8:42:1f:4a:28:53:
9a:b9:77:57:26:9a:71:0c:41:3e:b5:6c:92:15:d0:
6b:af:cf:ff:17:da:f9:83:db:28:64:e5:6a:1e:bc:
e0:1a:bd:21:3f:af:3e:2a:b6:7e:7f:5a:bb:b4:c1:
25:f5:7a:8a:ec:b3:f0:9f:df:9f:84:76:be:43:02:
b4:ba:93:25:ac:43:55:83:51:30:32:ce:03:8a:f1:
81:00:a4:a1:f2:9c:db:9b:93:c7:6f:50:c1:35:63:
d6:e8:59:96:58:2f:7e:47:4b:e3:e8:46:f9:12:89:
e0:22:fd:8f:0b:b7:be:e5:f2:db:0e:cd:f6:76:0c:
3b:c8:a3:54:f9:41:a3:33:d5:59:a8:27:87:d4:00:
e0:66:fb:ba:1c:7f:f7:09:43:32:02:d7:b4:38:55:
84:a1:55:6a:28:ee:a2:a4:23:01:f7:63:f5:b6:a1:
2b:9f:24:7f:9d:7d:7e:20:f4:3a:7c:3b:f2:7e:a0:
d2:f0:d7:ed:b9:88:07:89:bb:fc:31:d2:82:7a:c3:
13:50:a9:ab:2f:c2:2e:3f:1d:f9:f8:01:eb:fa:6e:
7c:92:ac:24:b8:28:48:81:aa:32:e7:ca:b5:e9:59:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E6:03:E9:AE:F7:B5:84:D1:35:D9:F8:BE:96:7F:64:8C:E6:84:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e40da5f-0495-362f-b203-5ffb7172d733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:01:66:83:d9:56:ab:f5:00:2a:9b:c4:3b:0e:37:2f:0d:b1:
ce:00:70:e1:f6:63:0b:63:14:56:71:5d:55:79:46:e7:1c:ad:
f9:77:92:73:27:46:11:23:c4:4e:8a:6e:45:aa:9b:0e:8a:8b:
21:8d:c3:7c:a6:22:f9:ab:e8:93:c8:ec:29:5c:b1:d8:56:d6:
f6:df:2d:0c:2c:f1:c6:03:4f:ed:96:c3:88:9e:1c:99:64:6c:
be:fb:93:3e:d5:7b:25:28:77:1d:6f:e7:0b:2e:20:4b:36:fc:
c4:45:a0:dc:cb:26:4c:ac:2f:e3:4a:e4:25:93:3d:0f:3a:bc:
01:3a:d1:76:3b:5f:d0:65:67:99:95:af:01:ab:b3:c0:4f:ee:
ea:dd:9a:1a:bb:cb:c7:68:07:09:0a:3c:d5:03:ae:d0:4d:fb:
36:d8:3d:21:e4:c2:0d:23:ae:be:12:da:90:79:b5:4d:4a:f5:
7b:82:a9:95:83:b7:e5:79:71:1c:5e:26:aa:2c:f8:18:46:83:
af:c7:b8:3d:7f:ce:9d:14:a5:80:6c:b4:25:85:c6:2d:99:d1:
3b:73:8e:9f:48:95:f2:cf:26:ab:80:2d:08:2a:6c:50:82:e5:
a4:1a:ee:d6:dd:f1:bc:ef:5a:fd:2e:76:9f:e5:4c:b2:a0:7a:
5e:a4:10:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXdUqk8QnIaigwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
ODg0YTA3NWUtNDI1MS00YWVhLWE1MmEtMmIxNTczMDNhZDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46jku9Nqh2OTSlJFW6vtSwxmD5+5fs24Qh9K
KFOauXdXJppxDEE+tWySFdBrr8//F9r5g9soZOVqHrzgGr0hP68+KrZ+f1q7tMEl
9XqK7LPwn9+fhHa+QwK0upMlrENVg1EwMs4DivGBAKSh8pzbm5PHb1DBNWPW6FmW
WC9+R0vj6Eb5EongIv2PC7e+5fLbDs32dgw7yKNU+UGjM9VZqCeH1ADgZvu6HH/3
CUMyAte0OFWEoVVqKO6ipCMB92P1tqErnyR/nX1+IPQ6fDvyfqDS8NftuYgHibv8
MdKCesMTUKmrL8IuPx35+AHr+m58kqwkuChIgaoy58q16VlPUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAvmA+mu97WE0TXZ+L6Wf2SM5oQMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWU0MGRhNWYtMDQ5NS0z
NjJmLWIyMDMtNWZmYjcxNzJkNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABABZoPZVqv1ACqbxDsONy8Nsc4AcOH2YwtjFFZxXVV5Ruccrfl3knMn
RhEjxE6KbkWqmw6KiyGNw3ymIvmr6JPI7ClcsdhW1vbfLQws8cYDT+2Ww4ieHJlk
bL77kz7VeyUodx1v5wsuIEs2/MRFoNzLJkysL+NK5CWTPQ86vAE60XY7X9BlZ5mV
rwGrs8BP7urdmhq7y8doBwkKPNUDrtBN+zbYPSHkwg0jrr4S2pB5tU1K9XuCqZWD
t+V5cRxeJqos+BhGg6/HuD1/zp0UpYBstCWFxi2Z0Ttzjp9IlfLPJquALQgqbFCC
5aQa7tbd8bzvWv0udp/lTLKgel6kEKk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:40:18 2025 by rpki-client