Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a87bd55c-e689-3109-b863-6c3f8f4b13f4.roa
File: a87bd55c-e689-3109-b863-6c3f8f4b13f4.roa (raw, json)
Hash identifier: 2vfpYr9AbMCUSGxJzR35NdkwW0+sXnB/PwRw+BCUopE=
Subject key identifier: 52:3E:19:00:D9:61:3C:79:BE:36:11:0F:C9:FC:58:8D:AE:01:C9:2F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964EA89C49C8BF275F6E10
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a87bd55c-e689-3109-b863-6c3f8f4b13f4.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397231
IP address blocks: 156.154.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:4e:a8:9c:49:c8:bf:27:5f:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=1d864bb9-2389-41c1-86b6-112a4e87d940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:49:78:cb:ad:82:77:93:b6:be:07:b3:d8:
0c:65:16:db:8c:f0:3c:67:d6:d7:6c:0c:7d:e4:8c:
9a:ae:0d:32:f5:5f:bf:b0:82:2b:2e:88:cc:6e:ab:
cb:62:59:45:6d:12:d5:18:46:21:6f:8d:dd:bf:8a:
ac:44:07:d0:14:08:f8:db:0c:5a:e2:7f:42:12:50:
5b:2f:94:8f:80:16:28:bc:6e:e6:a8:11:a0:2d:39:
2f:54:ec:79:4a:b9:be:83:9d:e1:8a:bd:0d:ae:d7:
51:95:54:d6:6a:a2:f3:62:79:b2:4b:75:39:79:57:
7c:63:7c:9b:dd:d3:f8:34:f6:bb:44:46:46:ca:a2:
2d:da:ca:29:e4:30:b5:26:e2:87:8c:30:3f:4a:66:
41:00:f6:13:2e:53:d1:1b:d2:e6:9d:26:7a:0d:a6:
aa:11:7a:7e:9e:f8:c1:8c:ff:79:d4:76:cb:11:4e:
f7:06:74:04:46:8f:75:79:19:da:69:4f:19:53:76:
21:0c:8b:1e:08:3f:15:b2:a3:69:9e:02:1a:2a:18:
34:1e:c1:a1:15:4c:1c:58:ab:43:55:24:7a:11:89:
34:d3:cc:ab:a2:f0:b1:c9:a0:4e:03:cf:d2:d9:76:
47:4d:00:4d:16:a4:86:d3:08:13:25:45:d4:f5:cf:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:19:00:D9:61:3C:79:BE:36:11:0F:C9:FC:58:8D:AE:01:C9:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a87bd55c-e689-3109-b863-6c3f8f4b13f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:21:4e:ef:7a:49:5f:7f:e0:b1:73:3f:4e:80:ad:9d:67:7a:
48:84:19:29:21:ee:a8:ff:64:68:a2:c0:58:18:cc:44:5a:3a:
3e:54:ab:d5:3c:35:00:46:70:0e:b4:28:fb:63:c9:c2:1c:43:
c8:86:76:a3:f1:e7:07:a0:c3:a9:aa:8a:a8:ae:a2:b8:b8:f3:
53:d6:9b:bf:0f:02:69:b6:96:6f:7e:73:07:ff:f8:c6:a6:55:
3f:58:84:c8:0e:32:19:36:ff:85:e5:cc:f5:98:cb:de:17:54:
16:4f:e0:60:33:c4:1a:ba:e1:29:cb:f0:aa:72:d7:d4:7f:3d:
d9:49:ac:f9:8c:45:01:52:88:72:ef:98:d2:59:7f:7e:97:5a:
f7:b6:67:d4:67:50:5c:04:c7:de:a1:25:b0:6c:44:a7:42:ed:
a5:a8:49:1e:15:ad:72:06:06:ef:68:f6:cc:18:c9:53:2b:a6:
48:5c:d9:f8:c5:b5:52:ce:eb:f4:04:2a:b8:12:38:69:91:aa:
b4:3a:28:0f:f2:ec:bf:c7:96:3d:b5:1e:cb:cb:0b:ed:93:69:
1e:3d:e1:42:23:c9:28:48:c5:22:18:af:70:5a:3c:48:db:a7:
46:f7:a4:16:ee:f6:1e:9c:c0:1e:40:98:e2:f8:17:52:02:99:
27:95:15:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplk6onEnIvydfbhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MWQ4NjRiYjktMjM4OS00MWMxLTg2YjYtMTEyYTRlODdkOTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3dJeMutgneTtr4Hs9gMZRbbjPA8Z9bXbAx9
5Iyarg0y9V+/sIIrLojMbqvLYllFbRLVGEYhb43dv4qsRAfQFAj42wxa4n9CElBb
L5SPgBYovG7mqBGgLTkvVOx5Srm+g53hir0NrtdRlVTWaqLzYnmyS3U5eVd8Y3yb
3dP4NPa7REZGyqIt2sop5DC1JuKHjDA/SmZBAPYTLlPRG9LmnSZ6DaaqEXp+nvjB
jP951HbLEU73BnQERo91eRnaaU8ZU3YhDIseCD8VsqNpngIaKhg0HsGhFUwcWKtD
VSR6EYk008yrovCxyaBOA8/S2XZHTQBNFqSG0wgTJUXU9c+OcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFI+GQDZYTx5vjYRD8n8WI2uAckvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTg3YmQ1NWMtZTY4OS0z
MTA5LWI4NjMtNmMzZjhmNGIxM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADchTu96SV9/4LFzP06ArZ1nekiEGSkh7qj/ZGiiwFgYzERaOj5Uq9U8
NQBGcA60KPtjycIcQ8iGdqPx5wegw6mqiqiuori481PWm78PAmm2lm9+cwf/+Mam
VT9YhMgOMhk2/4XlzPWYy94XVBZP4GAzxBq64SnL8Kpy19R/PdlJrPmMRQFSiHLv
mNJZf36XWve2Z9RnUFwEx96hJbBsRKdC7aWoSR4VrXIGBu9o9swYyVMrpkhc2fjF
tVLO6/QEKrgSOGmRqrQ6KA/y7L/Hlj21HsvLC+2TaR494UIjyShIxSIYr3BaPEjb
p0b3pBbu9h6cwB5AmOL4F1ICmSeVFTI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:04 2025 by rpki-client