Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b40d2979-541b-36d4-8a65-3a8d7f2e7eed.roa
File: b40d2979-541b-36d4-8a65-3a8d7f2e7eed.roa (raw, json)
Hash identifier: z8BJ7RYxf2SiAjohgFPammMu85Nz0FMvynHnPpI1TtQ=
Subject key identifier: 41:EC:55:FE:E8:BD:9C:85:DC:A2:27:17:DD:7B:79:70:A6:9D:AA:62
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20ED659C1C453DD29AEE30
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b40d2979-541b-36d4-8a65-3a8d7f2e7eed.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397214
IP address blocks: 156.154.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:ed:65:9c:1c:45:3d:d2:9a:ee:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=0aaf5db2-df21-429f-90cf-5596b2b66d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:98:bb:c3:0b:5c:d9:98:e5:c6:90:13:f2:
37:77:08:04:e5:c9:a3:3c:a5:b7:fc:ae:5c:cc:c9:
a7:82:39:ce:22:1e:e0:ec:98:e7:b3:70:20:ea:40:
08:07:fb:2a:56:2c:75:06:af:ff:ac:6b:9e:ae:f4:
10:cc:3e:43:1a:73:0f:be:b0:b6:83:36:66:dd:07:
06:9a:dd:e5:bf:f9:d4:d1:30:b4:ba:9f:52:b3:aa:
66:f2:a5:53:9c:14:db:b5:b3:7a:ff:b5:77:ac:62:
e7:41:bd:5b:ee:23:78:b8:77:5f:be:38:e0:9c:33:
6a:30:31:8a:59:76:bf:4d:3d:ec:10:df:d9:1d:e3:
be:3d:5d:1e:20:19:4e:70:3f:ee:49:e8:be:52:4b:
fa:9d:ee:f0:dd:bb:2f:76:84:f5:a9:4f:93:d8:ac:
de:7d:6b:19:c0:ea:9a:7b:66:77:ca:c1:7e:ee:ae:
59:0d:b6:99:f6:f5:83:9c:02:a1:4c:5d:01:2e:84:
91:cd:e5:79:1b:a8:7f:40:7d:d9:22:10:20:22:9b:
f7:d8:34:b0:2a:4a:4e:9a:4f:7b:ed:2b:4f:76:d4:
8c:be:80:ec:06:24:96:05:5b:7f:ad:dc:ee:ab:8c:
c9:bc:f7:27:ff:c3:c7:39:f3:57:af:de:84:4e:62:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EC:55:FE:E8:BD:9C:85:DC:A2:27:17:DD:7B:79:70:A6:9D:AA:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b40d2979-541b-36d4-8a65-3a8d7f2e7eed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:3f:93:12:45:04:ee:34:73:8b:62:8b:9c:2a:84:51:1d:9f:
e3:2f:d7:89:37:82:f1:c2:f2:6b:d0:80:d3:59:f5:24:4a:4a:
8e:75:a8:a0:37:ec:46:af:f3:f7:e2:f3:19:aa:c8:b0:0c:97:
3e:97:88:49:41:85:3f:d0:d4:77:88:d5:5f:2c:4f:17:54:db:
9a:df:b7:9f:84:70:aa:8f:e8:d5:5e:19:9a:df:5c:75:0e:61:
27:68:aa:df:75:bc:ff:f0:10:97:1d:8a:9e:16:64:a8:2d:ac:
67:ee:f4:6f:a2:ad:c6:f9:2f:ee:a1:aa:ce:a5:9a:fb:6f:c6:
b1:29:0a:65:6d:92:d9:b1:08:10:2f:b9:42:bd:35:9a:26:2c:
8f:16:9a:a2:ff:cc:87:36:28:31:32:7a:30:76:67:23:74:d0:
0a:a0:0d:e3:e8:f8:fb:53:5e:a5:9d:7c:0e:d3:6e:2c:5d:20:
4f:67:30:83:e9:5e:fe:38:ab:df:0d:85:f2:1a:22:22:32:a8:
c6:58:c1:af:83:68:3e:a2:8d:e3:82:12:29:73:49:a1:9d:19:
9f:8e:65:97:5e:3d:30:d2:e4:59:33:4a:7f:c0:3c:60:c7:fd:
ec:d5:c1:32:59:96:77:df:4a:74:a2:fb:14:17:23:7a:1e:98:
7a:29:48:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IO1lnBxFPdKa7jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
MGFhZjVkYjItZGYyMS00MjlmLTkwY2YtNTU5NmIyYjY2ZDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6SYu8MLXNmY5caQE/I3dwgE5cmjPKW3/K5c
zMmngjnOIh7g7Jjns3Ag6kAIB/sqVix1Bq//rGuervQQzD5DGnMPvrC2gzZm3QcG
mt3lv/nU0TC0up9Ss6pm8qVTnBTbtbN6/7V3rGLnQb1b7iN4uHdfvjjgnDNqMDGK
WXa/TT3sEN/ZHeO+PV0eIBlOcD/uSei+Ukv6ne7w3bsvdoT1qU+T2KzefWsZwOqa
e2Z3ysF+7q5ZDbaZ9vWDnAKhTF0BLoSRzeV5G6h/QH3ZIhAgIpv32DSwKkpOmk97
7StPdtSMvoDsBiSWBVt/rdzuq4zJvPcn/8PHOfNXr96ETmJZgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHsVf7ovZyF3KInF917eXCmnapiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjQwZDI5NzktNTQxYi0z
NmQ0LThhNjUtM2E4ZDdmMmU3ZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACk/kxJFBO40c4tii5wqhFEdn+Mv14k3gvHC8mvQgNNZ9SRKSo51qKA3
7Eav8/fi8xmqyLAMlz6XiElBhT/Q1HeI1V8sTxdU25rft5+EcKqP6NVeGZrfXHUO
YSdoqt91vP/wEJcdip4WZKgtrGfu9G+ircb5L+6hqs6lmvtvxrEpCmVtktmxCBAv
uUK9NZomLI8WmqL/zIc2KDEyejB2ZyN00AqgDePo+PtTXqWdfA7TbixdIE9nMIPp
Xv44q98NhfIaIiIyqMZYwa+DaD6ijeOCEilzSaGdGZ+OZZdePTDS5FkzSn/APGDH
/ezVwTJZlnffSnSi+xQXI3oemHopSJo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:54 2025 by rpki-client