Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5aece24-4b6e-32e2-a932-5d1ba5bbfe3b.roa
File: c5aece24-4b6e-32e2-a932-5d1ba5bbfe3b.roa (raw, json)
Hash identifier: pvfn8AppUdvDlba1WfMLEnKW5qr7k7VCdMGSxvi0zZI=
Subject key identifier: 0F:5B:48:DF:BB:09:C8:0B:2D:D5:CC:07:1D:07:FE:CE:55:E7:83:E4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9965391393C0903CF218940
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5aece24-4b6e-32e2-a932-5d1ba5bbfe3b.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397233
IP address blocks: 156.154.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:53:91:39:3c:09:03:cf:21:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=942e2029-e5ae-482f-b548-623bffc4fe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:18:8a:32:ca:ee:e1:3f:71:0f:54:8e:54:
ef:04:57:e3:36:31:a3:bb:80:d5:6a:21:50:2c:91:
84:95:0a:7b:8e:ea:df:69:43:16:8d:c9:b5:94:1b:
93:e8:74:a1:a5:95:76:22:fc:f9:dc:b6:85:26:65:
d3:ae:8f:cf:1a:91:19:db:f3:25:d1:44:21:a3:e4:
d1:7a:4d:cd:75:14:b6:3c:22:76:e9:fa:f9:af:ee:
b4:43:1d:ca:62:a6:f1:99:1a:d2:26:34:7b:da:fd:
6f:68:56:0e:36:c3:be:86:15:a3:3e:b8:6c:cd:a6:
a6:ab:5f:06:75:a2:96:7f:e6:b7:0a:8b:7b:3a:85:
b7:73:88:47:fb:f5:be:d1:e7:00:e1:67:43:88:34:
41:85:03:af:2a:96:c8:49:26:17:21:7a:61:50:fa:
0a:5f:b0:8d:84:67:f0:9c:1c:ae:62:f1:67:c9:b7:
68:cb:cd:9b:e0:3f:21:90:53:1e:dc:b0:ce:72:47:
fd:dd:a0:e1:4c:e8:3c:86:8c:f4:04:ce:82:9b:56:
68:c5:92:81:de:d5:c8:e4:9e:fe:4c:24:dd:0a:54:
30:67:18:e3:bf:1c:59:1f:fa:4d:49:4c:f5:6c:74:
db:05:3d:fd:21:85:69:50:ec:4a:2c:a3:bf:1a:7a:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:48:DF:BB:09:C8:0B:2D:D5:CC:07:1D:07:FE:CE:55:E7:83:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5aece24-4b6e-32e2-a932-5d1ba5bbfe3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:f1:26:7f:b5:ed:3e:82:8d:15:55:d0:5a:05:82:98:b9:37:
65:98:fa:04:09:f7:45:9f:97:f4:01:3c:d5:23:cb:3d:a8:b9:
33:24:6c:14:f1:84:eb:30:d8:03:e1:9d:a1:cb:6d:30:46:44:
11:71:bd:43:5b:8f:52:f4:d4:14:97:42:be:af:74:8c:1c:c8:
15:c8:eb:7c:10:de:7c:83:c4:38:70:1a:92:ae:ff:85:50:09:
9b:06:f5:e7:23:0e:4e:02:d8:16:70:df:56:c1:36:2e:af:07:
84:8a:49:a3:4b:fc:a9:d2:2d:1e:11:9a:cc:72:f2:e2:54:31:
12:f5:74:96:83:d1:1f:cf:36:01:8c:04:28:fa:cc:a7:29:a4:
2e:f5:c7:83:04:3d:87:fe:45:59:62:b5:01:94:12:9a:92:f2:
ab:ac:b8:20:24:ef:78:9a:91:2d:01:a7:61:83:9c:39:e4:ff:
e4:18:7a:1d:50:8e:03:51:3e:b5:be:50:c4:81:d7:3e:52:54:
72:5e:a0:fd:e1:43:5d:0c:21:fe:ca:43:52:bb:62:18:84:ce:
67:60:0e:79:3f:c6:c5:ef:63:2a:95:d7:a4:c9:98:8b:26:0f:
89:d4:26:5f:81:d9:59:ed:4c:32:4f:2d:f4:89:d8:39:10:cd:
5b:42:a3:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllOROTwJA88hiUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
OTQyZTIwMjktZTVhZS00ODJmLWI1NDgtNjIzYmZmYzRmZTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdIYijLK7uE/cQ9UjlTvBFfjNjGju4DVaiFQ
LJGElQp7jurfaUMWjcm1lBuT6HShpZV2Ivz53LaFJmXTro/PGpEZ2/Ml0UQho+TR
ek3NdRS2PCJ26fr5r+60Qx3KYqbxmRrSJjR72v1vaFYONsO+hhWjPrhszaamq18G
daKWf+a3Cot7OoW3c4hH+/W+0ecA4WdDiDRBhQOvKpbISSYXIXphUPoKX7CNhGfw
nByuYvFnybdoy82b4D8hkFMe3LDOckf93aDhTOg8hoz0BM6Cm1ZoxZKB3tXI5J7+
TCTdClQwZxjjvxxZH/pNSUz1bHTbBT39IYVpUOxKLKO/GnpjsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9bSN+7CcgLLdXMBx0H/s5V54PkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzVhZWNlMjQtNGI2ZS0z
MmUyLWE5MzItNWQxYmE1YmJmZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnxJn+17T6CjRVV0FoFgpi5N2WY+gQJ90Wfl/QBPNUjyz2ouTMkbBTx
hOsw2APhnaHLbTBGRBFxvUNbj1L01BSXQr6vdIwcyBXI63wQ3nyDxDhwGpKu/4VQ
CZsG9ecjDk4C2BZw31bBNi6vB4SKSaNL/KnSLR4Rmsxy8uJUMRL1dJaD0R/PNgGM
BCj6zKcppC71x4MEPYf+RVlitQGUEpqS8qusuCAk73iakS0Bp2GDnDnk/+QYeh1Q
jgNRPrW+UMSB1z5SVHJeoP3hQ10MIf7KQ1K7YhiEzmdgDnk/xsXvYyqV16TJmIsm
D4nUJl+B2VntTDJPLfSJ2DkQzVtCoz4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:05:04 2025 by rpki-client