Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de32abf6-dded-30c3-b049-8e15bee16b11.roa
File: de32abf6-dded-30c3-b049-8e15bee16b11.roa (raw, json)
Hash identifier: JGBttwdfx95AYAYTGItE9llDD/Zkutddc27eCsGPpOw=
Subject key identifier: E6:AB:C3:CB:D5:12:E4:6F:DE:4C:45:9D:5E:04:F7:83:99:95:AF:86
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9963FB45503707A70CEA300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de32abf6-dded-30c3-b049-8e15bee16b11.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397220
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:3f:b4:55:03:70:7a:70:ce:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=d4403923-5c71-4a57-be43-bd46df162071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:19:c5:87:58:af:f7:71:6f:d8:d9:ef:04:
33:67:b8:39:49:6b:e8:74:4b:9d:09:58:f8:14:00:
e6:5b:e1:2b:79:11:85:c8:f3:66:bf:5e:22:e6:be:
28:f9:a7:26:3b:b9:57:c9:be:15:36:55:6a:c2:4a:
c5:ad:53:25:9e:2a:97:de:b3:7b:56:c7:ee:1e:7d:
56:bc:2d:5f:67:ac:b8:b3:31:1f:5e:d2:f3:cb:9e:
d8:6c:b0:d1:5d:3b:ad:1f:94:6c:29:ad:05:0f:ad:
eb:7f:2c:d9:7f:6a:10:d8:2b:90:72:e9:ec:d9:07:
e0:8d:a8:50:a3:7b:bc:1f:85:50:4b:06:2f:b8:a8:
7c:63:65:ae:00:ec:68:27:53:67:8a:8e:53:2a:8c:
d7:5d:47:ab:78:74:fb:61:d5:67:8e:ac:33:69:b0:
16:a1:79:c1:e2:1c:d1:6a:8c:d9:7c:55:84:4a:be:
06:e6:8b:82:8d:d4:44:c9:c1:47:c4:5c:6e:4a:23:
6b:7d:c5:cf:89:f4:70:df:ae:5e:37:e1:bb:03:3f:
03:22:4c:98:63:4b:34:88:72:94:2c:a7:df:34:a5:
f4:1d:38:60:42:57:52:9c:b9:3b:ff:1e:7e:2d:e8:
64:dc:36:f4:6b:08:ef:e5:c8:62:e4:53:fd:d7:f3:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AB:C3:CB:D5:12:E4:6F:DE:4C:45:9D:5E:04:F7:83:99:95:AF:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de32abf6-dded-30c3-b049-8e15bee16b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:94:36:40:4b:21:38:7e:94:72:57:87:36:8b:ab:7a:0a:73:
da:61:43:f7:9a:a3:b5:da:4d:cd:20:fb:8c:57:6d:7a:5a:45:
82:7b:e2:af:3a:de:59:b0:28:bc:d7:28:87:9c:ae:37:8a:27:
12:bf:cb:25:ab:e7:86:41:40:82:0f:02:1f:aa:c3:f7:4c:3c:
1b:91:ea:0b:bc:a8:d2:b8:86:46:d4:d0:e8:0b:dd:5f:36:9f:
d8:e7:1e:e6:fe:56:a4:5b:2b:89:f8:9d:22:58:e4:40:8d:4e:
d5:93:b4:d6:4d:23:6c:33:92:e2:16:71:bb:7e:83:68:3f:2e:
a6:0b:29:b8:e0:e4:a3:89:22:c3:68:70:40:5d:98:d8:dd:20:
39:10:22:90:45:35:c0:c7:8f:35:3e:d3:e8:a9:25:94:9c:f1:
cd:b8:5c:04:ba:57:6c:6f:eb:28:bf:3b:0d:1c:01:56:03:d2:
55:31:6e:2f:93:20:24:24:bf:54:1d:54:9f:6f:33:6a:91:93:
42:8c:22:e5:42:fd:de:f7:1d:05:d3:3d:71:ea:26:5c:f9:52:
5c:c0:d3:b7:7b:30:12:73:e7:2d:49:9f:ca:2f:14:5f:3a:47:
b6:2b:b6:00:f5:ed:cb:85:5d:2c:e8:ab:c9:81:06:d5:bb:72:
a8:c9:7e:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplj+0VQNwenDOowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDQ0MDM5MjMtNWM3MS00YTU3LWJlNDMtYmQ0NmRmMTYyMDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/EZxYdYr/dxb9jZ7wQzZ7g5SWvodEudCVj4
FADmW+EreRGFyPNmv14i5r4o+acmO7lXyb4VNlVqwkrFrVMlniqX3rN7VsfuHn1W
vC1fZ6y4szEfXtLzy57YbLDRXTutH5RsKa0FD63rfyzZf2oQ2CuQcuns2QfgjahQ
o3u8H4VQSwYvuKh8Y2WuAOxoJ1Nnio5TKozXXUereHT7YdVnjqwzabAWoXnB4hzR
aozZfFWESr4G5ouCjdREycFHxFxuSiNrfcXPifRw365eN+G7Az8DIkyYY0s0iHKU
LKffNKX0HThgQldSnLk7/x5+Lehk3Db0awjv5chi5FP91/MgKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOarw8vVEuRv3kxFnV4E94OZla+GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGUzMmFiZjYtZGRlZC0z
MGMzLWIwNDktOGUxNWJlZTE2YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKUNkBLITh+lHJXhzaLq3oKc9phQ/eao7XaTc0g+4xXbXpaRYJ74q86
3lmwKLzXKIecrjeKJxK/yyWr54ZBQIIPAh+qw/dMPBuR6gu8qNK4hkbU0OgL3V82
n9jnHub+VqRbK4n4nSJY5ECNTtWTtNZNI2wzkuIWcbt+g2g/LqYLKbjg5KOJIsNo
cEBdmNjdIDkQIpBFNcDHjzU+0+ipJZSc8c24XAS6V2xv6yi/Ow0cAVYD0lUxbi+T
ICQkv1QdVJ9vM2qRk0KMIuVC/d73HQXTPXHqJlz5UlzA07d7MBJz5y1Jn8ovFF86
R7YrtgD17cuFXSzoq8mBBtW7cqjJft4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:11 2025 by rpki-client