Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e6de9442-b73e-3f64-a866-237039e8c768.roa
File: e6de9442-b73e-3f64-a866-237039e8c768.roa (raw, json)
Hash identifier: 1onAbJ92oL0lYvk06QZOiUSRHUGYYHwkowExenVhNcs=
Subject key identifier: 38:5F:AF:22:81:84:00:2D:CB:CB:25:F6:6C:FE:C7:05:B0:B0:6C:67
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD210C3396688AC1F7AECB80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e6de9442-b73e-3f64-a866-237039e8c768.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397231
IP address blocks: 156.154.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:0c:33:96:68:8a:c1:f7:ae:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=968f4e1f-2f89-4253-a7e3-543e786fa73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:c1:a6:56:f1:98:46:d9:ec:b4:46:41:1a:
d1:53:ff:a1:96:44:80:fe:1f:e5:b1:3e:e7:e1:6b:
98:2e:35:c7:cc:39:ed:7b:92:9d:f5:08:da:08:84:
07:a2:90:78:e6:bc:44:f6:19:de:f4:af:28:87:03:
cd:5c:f9:5a:b6:e4:00:12:69:ed:bf:55:b9:56:54:
44:f9:f9:2b:0a:c2:8b:29:27:88:a1:c8:8c:cf:29:
4c:bd:a0:0c:7f:21:6e:24:83:d0:29:b9:6c:cf:8c:
e7:4a:cb:80:f8:47:2e:16:39:70:49:09:b3:49:c8:
f1:2c:39:aa:e7:0d:87:93:c4:06:76:5b:a9:ce:ab:
58:ff:4f:a3:01:55:a4:73:71:bb:64:9c:87:8a:02:
60:8b:78:bc:3b:02:1b:b9:30:df:9d:bc:1c:25:44:
1d:85:e2:59:48:6a:d4:bd:77:fe:c7:64:77:ba:5b:
5c:0c:d0:25:3b:ef:08:1c:dc:a7:75:64:45:d1:88:
ba:11:b3:e8:48:7d:33:04:7c:d5:3d:e5:eb:3c:26:
59:ae:19:d8:08:77:5d:a5:6f:58:b2:3b:86:cd:5e:
46:36:ee:a9:7a:22:b0:80:4d:77:34:fc:f1:9a:a9:
4a:7a:77:8c:fa:9f:21:e6:2c:d1:6b:c4:f5:bf:cb:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:AF:22:81:84:00:2D:CB:CB:25:F6:6C:FE:C7:05:B0:B0:6C:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e6de9442-b73e-3f64-a866-237039e8c768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:46:8b:b5:e8:88:72:ec:fd:cd:db:f9:45:6b:63:8a:4c:01:
2a:29:9c:8f:7d:0a:53:98:a1:81:a1:5e:da:20:f4:88:da:39:
19:bb:8f:cd:4a:7e:e6:23:01:4f:41:1f:21:38:c9:d6:0e:f0:
2f:11:a3:53:ce:05:ac:fb:c7:35:4f:4a:83:e1:a1:a6:7b:1c:
f0:d3:dc:da:7a:c9:dc:e5:cb:fd:ec:1f:d6:52:e2:f0:c5:a9:
3e:55:68:fc:49:ad:4c:c9:e7:78:05:62:a9:e9:0c:7a:cc:4e:
22:6f:c6:4a:03:41:21:b6:4d:ab:af:68:27:1e:5b:bf:0b:03:
98:c3:6b:c8:b8:91:a4:cf:e0:bb:2b:9d:a4:f4:d2:d3:c0:e8:
b4:86:2d:07:0c:f0:c2:70:34:77:a4:0e:86:d1:ae:2b:04:dd:
65:93:22:c5:38:dc:d3:d3:c1:88:dd:f0:d1:c4:1f:3a:74:79:
a9:88:15:b2:89:b2:b2:24:d4:0a:de:60:dd:68:91:c4:87:70:
86:9d:2e:74:2c:d2:24:4e:9e:13:75:98:e3:89:5b:ff:80:b7:
6a:93:ec:85:f9:07:6f:92:26:e4:07:a2:2d:d4:f1:16:e6:80:
26:ec:53:a0:b0:f4:76:35:56:73:48:2c:e4:16:78:4b:97:87:
8a:00:e3:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQwzlmiKwfeuy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
OTY4ZjRlMWYtMmY4OS00MjUzLWE3ZTMtNTQzZTc4NmZhNzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN/BplbxmEbZ7LRGQRrRU/+hlkSA/h/lsT7n
4WuYLjXHzDnte5Kd9QjaCIQHopB45rxE9hne9K8ohwPNXPlatuQAEmntv1W5VlRE
+fkrCsKLKSeIociMzylMvaAMfyFuJIPQKblsz4znSsuA+EcuFjlwSQmzScjxLDmq
5w2Hk8QGdlupzqtY/0+jAVWkc3G7ZJyHigJgi3i8OwIbuTDfnbwcJUQdheJZSGrU
vXf+x2R3ultcDNAlO+8IHNyndWRF0Yi6EbPoSH0zBHzVPeXrPCZZrhnYCHddpW9Y
sjuGzV5GNu6peiKwgE13NPzxmqlKeneM+p8h5izRa8T1v8sXQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhfryKBhAAty8sl9mz+xwWwsGxnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTZkZTk0NDItYjczZS0z
ZjY0LWE4NjYtMjM3MDM5ZThjNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9Gi7XoiHLs/c3b+UVrY4pMASopnI99ClOYoYGhXtog9IjaORm7j81K
fuYjAU9BHyE4ydYO8C8Ro1POBaz7xzVPSoPhoaZ7HPDT3Np6ydzly/3sH9ZS4vDF
qT5VaPxJrUzJ53gFYqnpDHrMTiJvxkoDQSG2TauvaCceW78LA5jDa8i4kaTP4Lsr
naT00tPA6LSGLQcM8MJwNHekDobRrisE3WWTIsU43NPTwYjd8NHEHzp0eamIFbKJ
srIk1AreYN1okcSHcIadLnQs0iROnhN1mOOJW/+At2qT7IX5B2+SJuQHoi3U8Rbm
gCbsU6Cw9HY1VnNILOQWeEuXh4oA4y8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:27:30 2025 by rpki-client