Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a38b2c87-59e5-333c-8e0c-410df26ccd42.roa
File: a38b2c87-59e5-333c-8e0c-410df26ccd42.roa (raw, json)
Hash identifier: kP1hbJiOcjegk9IsvocxUsvLFGpaQ+uUaidapa6pByg=
Subject key identifier: B8:45:2F:C3:C2:3C:7D:C7:AD:AC:E4:54:65:AD:D9:3F:F0:6B:1C:49
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584890760B81A1092BAB550C3500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a38b2c87-59e5-333c-8e0c-410df26ccd42.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397226
IP address blocks: 156.154.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0b:81:a1:09:2b:ab:55:0c:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=38c68183-6b7c-4b3c-b65d-8b01759a5374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:fb:18:68:95:b7:48:d7:5e:4f:ac:c9:5e:
72:da:59:51:5f:ec:fd:aa:26:4b:55:35:95:26:8e:
38:cd:b4:e0:e1:fa:a4:cc:c4:34:9e:99:52:ac:45:
db:e2:51:52:2b:08:76:65:c7:32:0a:fc:7b:f0:99:
a0:f0:73:53:79:8b:49:e6:3d:57:1e:71:2b:b8:ac:
d2:be:b0:71:19:43:8a:fd:78:32:0f:77:70:25:e4:
88:28:cc:d5:07:dd:54:c9:f7:fc:eb:c9:c4:ba:9f:
39:68:8c:26:0a:85:46:29:c6:4c:6b:08:b8:56:c0:
91:0e:b5:eb:25:ac:7d:f8:1b:b7:de:56:af:98:13:
0a:d4:8d:2b:b4:36:54:61:e1:1d:ea:76:0b:18:bb:
8b:4c:7b:85:3c:20:4c:6c:d4:7b:e3:7c:c4:0f:b1:
88:28:3f:59:e0:1e:10:7a:00:2b:21:87:a0:13:6a:
86:b3:aa:5d:2f:81:1f:d0:0d:73:70:f8:35:8e:06:
a7:85:df:e5:19:3f:34:a4:ae:80:b0:02:1c:ba:37:
92:bd:b6:53:15:bb:4f:5f:8b:25:de:fc:92:4a:dd:
83:50:f6:d4:1c:87:d4:35:a8:58:45:1d:7b:ae:85:
5a:da:b0:5a:c8:d7:a8:18:4a:35:a5:fd:49:8b:b6:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:2F:C3:C2:3C:7D:C7:AD:AC:E4:54:65:AD:D9:3F:F0:6B:1C:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a38b2c87-59e5-333c-8e0c-410df26ccd42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:8c:a0:c0:50:66:08:5c:7f:2d:04:d5:08:a7:44:76:da:3b:
76:ef:7d:83:4f:40:08:24:45:95:7a:07:d2:ac:1a:16:96:0f:
cb:11:67:74:09:9a:47:99:bd:9f:96:5b:74:a6:d2:79:ba:3b:
c4:a2:85:e2:00:d9:f9:e4:d0:bc:f6:31:ac:46:28:72:9a:1a:
9c:41:87:76:a3:7c:82:c6:7c:da:04:75:08:27:db:a6:6a:f8:
d4:50:fd:39:b3:0f:cd:7a:a6:d9:b7:39:bb:d1:b3:b4:99:e1:
e1:0c:73:48:af:6c:6a:fb:07:db:65:1d:b1:c3:41:91:04:d2:
f3:86:f6:06:1c:2c:65:60:8b:0c:f5:fb:7a:72:c7:0b:bb:1b:
58:3c:4c:20:9f:ec:e9:09:7c:5a:af:2b:6d:65:ef:44:e4:2e:
18:a1:52:d5:58:c9:53:5d:13:c6:de:7c:a2:a9:db:65:55:28:
05:71:99:3b:79:57:7c:c5:a4:24:ba:0f:dd:57:c8:02:1e:f6:
fa:22:2f:00:0f:97:97:9b:3b:8c:df:01:76:a2:d0:86:04:47:
6a:d3:2b:34:50:19:33:87:6a:dd:05:84:62:ea:9d:33:5d:54:
79:f2:76:83:0d:20:ae:2b:9f:58:b4:90:80:46:3b:35:14:a0:
ed:52:80:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdguBoQkrq1UMNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
MzhjNjgxODMtNmI3Yy00YjNjLWI2NWQtOGIwMTc1OWE1Mzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWD7GGiVt0jXXk+syV5y2llRX+z9qiZLVTWV
Jo44zbTg4fqkzMQ0nplSrEXb4lFSKwh2ZccyCvx78Jmg8HNTeYtJ5j1XHnEruKzS
vrBxGUOK/XgyD3dwJeSIKMzVB91Uyff868nEup85aIwmCoVGKcZMawi4VsCRDrXr
Jax9+Bu33lavmBMK1I0rtDZUYeEd6nYLGLuLTHuFPCBMbNR743zED7GIKD9Z4B4Q
egArIYegE2qGs6pdL4Ef0A1zcPg1jganhd/lGT80pK6AsAIcujeSvbZTFbtPX4sl
3vySSt2DUPbUHIfUNahYRR17roVa2rBayNeoGEo1pf1Ji7YjfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLhFL8PCPH3HrazkVGWt2T/waxxJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTM4YjJjODctNTllNS0z
MzNjLThlMGMtNDEwZGYyNmNjZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqMoMBQZghcfy0E1QinRHbaO3bvfYNPQAgkRZV6B9KsGhaWD8sRZ3QJ
mkeZvZ+WW3Sm0nm6O8SiheIA2fnk0Lz2MaxGKHKaGpxBh3ajfILGfNoEdQgn26Zq
+NRQ/TmzD816ptm3ObvRs7SZ4eEMc0ivbGr7B9tlHbHDQZEE0vOG9gYcLGVgiwz1
+3pyxwu7G1g8TCCf7OkJfFqvK21l70TkLhihUtVYyVNdE8befKKp22VVKAVxmTt5
V3zFpCS6D91XyAIe9voiLwAPl5ebO4zfAXai0IYER2rTKzRQGTOHat0FhGLqnTNd
VHnydoMNIK4rn1i0kIBGOzUUoO1SgPY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:24 2025 by rpki-client