Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c0b3fec7-315b-3c44-beb5-e4f6420116e5.roa
File: c0b3fec7-315b-3c44-beb5-e4f6420116e5.roa (raw, json)
Hash identifier: oCLYY9hF6bhBSvqiaJ9rporuy3VqMbc+FSKP0SwPnsI=
Subject key identifier: 8C:EC:16:A5:E2:5C:1B:9F:39:45:5D:40:20:A6:8A:94:99:1D:B5:11
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965C4316D98AA1D92914C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c0b3fec7-315b-3c44-beb5-e4f6420116e5.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397216
IP address blocks: 156.154.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:5c:43:16:d9:8a:a1:d9:29:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=d0933efb-d743-4c54-8db7-8852f4fe3325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:01:03:fd:8f:45:57:5f:fe:22:e2:74:e9:
dd:3d:5b:4f:ae:a5:11:26:d9:7b:ca:14:ca:7e:74:
17:29:8d:0d:54:8e:22:1c:9b:23:68:1c:00:14:b2:
d4:01:66:e5:38:92:a7:f1:b2:a2:be:9d:5f:15:d9:
7c:00:5c:f0:97:33:36:09:11:8c:51:3c:e6:2d:45:
f3:f2:11:87:f5:3e:fd:ba:ed:79:66:84:14:d4:1a:
00:a8:c6:b3:a4:82:12:74:b5:e3:fd:7e:fd:a5:4a:
2e:68:0f:e1:4f:4a:32:1f:1a:84:0d:22:d8:0e:3a:
34:fb:95:93:d7:cc:5d:eb:5d:b1:6e:cf:66:28:cf:
ed:4d:a5:6e:5b:bf:bb:e2:ca:d3:3b:ec:16:d6:04:
8c:30:14:0d:0b:f1:5b:0c:86:6e:ef:a1:91:14:86:
f1:8f:6b:c9:f0:d7:7b:1f:72:81:13:4e:70:cb:db:
dc:e1:77:f1:80:67:2d:db:55:e7:12:a6:9e:94:d7:
78:7c:29:65:7c:77:1e:db:40:78:72:4f:0c:de:fb:
88:1a:85:c1:d8:e1:6a:7f:6d:a2:34:45:b4:0e:06:
8b:61:ac:aa:67:1c:8a:3f:a0:b0:97:a0:1f:e5:71:
76:73:4c:d4:03:f0:54:94:63:fa:65:73:24:e3:a7:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:16:A5:E2:5C:1B:9F:39:45:5D:40:20:A6:8A:94:99:1D:B5:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c0b3fec7-315b-3c44-beb5-e4f6420116e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:5d:13:85:10:17:ff:f7:af:97:8d:18:f8:12:06:c4:d1:1e:
fa:e6:48:49:f3:4a:33:2d:10:b6:f9:8e:db:cb:35:52:5c:db:
ae:16:f4:99:19:92:85:36:97:e4:69:47:03:0c:63:c3:61:a9:
29:e8:b0:5a:1c:00:07:46:c2:aa:29:cf:eb:4b:43:e2:d0:1b:
1a:96:c5:bd:5c:34:a1:88:c3:3f:ab:aa:73:2a:5b:82:57:2b:
ec:4b:cc:34:92:e6:b0:92:5d:f9:82:35:e1:45:45:a0:5c:d5:
c7:02:4c:4d:1b:93:55:30:d2:8f:7d:a4:68:f6:f8:56:ad:81:
0e:87:eb:a8:37:8a:0d:1e:fb:ed:ce:ec:85:64:56:79:e6:27:
40:b2:d3:b6:47:ab:8e:86:9d:31:8e:da:e4:6e:87:2a:b6:ab:
69:64:7d:94:64:e0:26:2c:68:7a:96:d7:49:1f:84:ed:62:d6:
db:0a:4c:e4:18:71:23:ac:29:56:5e:7e:00:62:26:21:50:ec:
28:a0:75:17:fa:03:a4:c5:b2:f1:fb:f3:61:01:3e:f0:91:1f:
e0:e9:ca:ce:04:29:a6:a1:35:02:7a:25:b2:78:fb:b6:f1:2f:
55:b0:74:d8:aa:a2:be:e2:9c:62:7e:62:0b:da:0f:37:2a:bd:
fb:48:01:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllxDFtmKodkpFMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDA5MzNlZmItZDc0My00YzU0LThkYjctODg1MmY0ZmUzMzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtoBA/2PRVdf/iLidOndPVtPrqURJtl7yhTK
fnQXKY0NVI4iHJsjaBwAFLLUAWblOJKn8bKivp1fFdl8AFzwlzM2CRGMUTzmLUXz
8hGH9T79uu15ZoQU1BoAqMazpIISdLXj/X79pUouaA/hT0oyHxqEDSLYDjo0+5WT
18xd612xbs9mKM/tTaVuW7+74srTO+wW1gSMMBQNC/FbDIZu76GRFIbxj2vJ8Nd7
H3KBE05wy9vc4XfxgGct21XnEqaelNd4fCllfHce20B4ck8M3vuIGoXB2OFqf22i
NEW0DgaLYayqZxyKP6Cwl6Af5XF2c0zUA/BUlGP6ZXMk46dV3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzsFqXiXBufOUVdQCCmipSZHbURMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzBiM2ZlYzctMzE1Yi0z
YzQ0LWJlYjUtZTRmNjQyMDExNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVdE4UQF//3r5eNGPgSBsTRHvrmSEnzSjMtELb5jtvLNVJc264W9JkZ
koU2l+RpRwMMY8NhqSnosFocAAdGwqopz+tLQ+LQGxqWxb1cNKGIwz+rqnMqW4JX
K+xLzDSS5rCSXfmCNeFFRaBc1ccCTE0bk1Uw0o99pGj2+FatgQ6H66g3ig0e++3O
7IVkVnnmJ0Cy07ZHq46GnTGO2uRuhyq2q2lkfZRk4CYsaHqW10kfhO1i1tsKTOQY
cSOsKVZefgBiJiFQ7CigdRf6A6TFsvH782EBPvCRH+Dpys4EKaahNQJ6JbJ4+7bx
L1WwdNiqor7inGJ+YgvaDzcqvftIAe8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:33 2025 by rpki-client