Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f475d0ee-4156-3c57-af43-fc84cd8df709.roa
File: f475d0ee-4156-3c57-af43-fc84cd8df709.roa (raw, json)
Hash identifier: oZHwFRSWOTX+G0BHl0fUXLcUd1DlU521gmfOLm+ARaA=
Subject key identifier: 4C:DB:72:E3:C9:AE:F7:8A:B1:55:2C:74:01:85:F1:19:BA:D8:75:D8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E734BC7B9B518627B940
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f475d0ee-4156-3c57-af43-fc84cd8df709.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397237
IP address blocks: 156.154.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e7:34:bc:7b:9b:51:86:27:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=666df28b-1c4b-4daa-91f4-941878ad87d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:bb:ce:3e:56:99:2f:f5:33:98:a1:f0:5f:
7e:53:04:57:96:34:50:f2:a5:bf:94:13:cb:3e:65:
e7:1f:90:de:d9:d9:54:c8:45:cb:ab:de:44:0f:61:
ba:46:b3:64:81:69:b7:8c:04:5a:9c:1c:87:80:fa:
db:b7:62:3a:e8:bb:82:d2:ba:d7:67:92:b1:29:2c:
b9:d8:17:ea:4a:44:5e:65:1b:b9:de:34:2c:32:0a:
2e:02:62:29:f6:81:16:d7:ba:9f:d9:41:2b:95:50:
1e:46:9d:f7:c2:fc:d9:5b:d1:89:72:54:c5:f4:ee:
d8:99:7e:b4:89:6e:41:ea:ae:b1:67:a3:79:9b:66:
ce:77:77:09:14:8c:6b:a9:fd:1b:2e:a5:cb:56:8e:
e6:c9:7d:cc:2b:44:a6:38:51:06:3f:fb:1d:17:a3:
c6:74:35:e4:71:f2:4f:56:57:d1:40:8e:44:b6:57:
37:ac:12:3b:f2:85:75:cb:11:11:9b:3b:b2:b8:02:
62:94:4d:01:69:f8:9a:a9:d7:1d:67:9d:2e:8a:87:
b8:9b:7e:5f:aa:b7:d8:83:db:7b:65:ee:a1:72:ea:
0e:6b:5a:99:57:7f:64:15:63:25:0b:dc:07:b3:79:
50:b5:45:ea:0e:b2:a8:97:02:b2:b1:79:de:1c:2d:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:72:E3:C9:AE:F7:8A:B1:55:2C:74:01:85:F1:19:BA:D8:75:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f475d0ee-4156-3c57-af43-fc84cd8df709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:9c:66:80:57:e7:ac:2c:98:51:06:b2:f9:21:18:b5:e6:5b:
93:55:c2:90:46:2f:45:af:b9:e3:0b:03:76:b6:c8:bb:95:25:
0c:6c:e9:14:27:ae:aa:aa:19:63:40:5c:1c:41:c6:a5:d7:f7:
3c:63:9b:ea:97:63:0b:ab:58:ff:53:84:ea:5e:f7:95:80:c1:
b6:66:59:68:45:5c:ad:6c:79:7b:8d:e0:7b:26:0f:fd:96:f3:
9f:2b:4b:ff:ea:97:d1:96:39:b0:9a:5f:62:e3:e3:38:12:b5:
96:52:af:3a:f3:2a:7c:08:05:c5:95:2d:94:e0:13:ef:23:f1:
31:cd:e7:ab:7d:9a:66:90:4c:54:63:19:42:63:a1:b4:19:e1:
cf:98:42:73:18:79:15:4b:5e:f6:21:7d:c4:89:10:e6:39:45:
ff:ee:ce:4c:15:de:2b:38:bf:c8:06:21:55:fe:f1:58:59:3c:
59:be:86:1e:96:07:d5:f0:9a:ae:a3:c4:24:52:bf:3f:a6:6e:
04:0e:9d:66:ad:79:b9:8e:99:5c:83:98:27:3e:c5:b2:35:5d:
93:5a:f4:c3:d5:a4:59:ab:98:e0:d9:0b:6e:7c:09:ad:1a:2a:
f9:db:2e:9c:8a:d8:9d:34:59:92:8d:54:8b:1b:78:88:e8:03:
f9:65:48:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuc0vHubUYYnuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NjY2ZGYyOGItMWM0Yi00ZGFhLTkxZjQtOTQxODc4YWQ4N2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkze7zj5WmS/1M5ih8F9+UwRXljRQ8qW/lBPL
PmXnH5De2dlUyEXLq95ED2G6RrNkgWm3jARanByHgPrbt2I66LuC0rrXZ5KxKSy5
2BfqSkReZRu53jQsMgouAmIp9oEW17qf2UErlVAeRp33wvzZW9GJclTF9O7YmX60
iW5B6q6xZ6N5m2bOd3cJFIxrqf0bLqXLVo7myX3MK0SmOFEGP/sdF6PGdDXkcfJP
VlfRQI5Etlc3rBI78oV1yxERmzuyuAJilE0BafiaqdcdZ50uioe4m35fqrfYg9t7
Ze6hcuoOa1qZV39kFWMlC9wHs3lQtUXqDrKolwKysXneHC3FCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEzbcuPJrveKsVUsdAGF8Rm62HXYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjQ3NWQwZWUtNDE1Ni0z
YzU3LWFmNDMtZmM4NGNkOGRmNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADycZoBX56wsmFEGsvkhGLXmW5NVwpBGL0WvueMLA3a2yLuVJQxs6RQn
rqqqGWNAXBxBxqXX9zxjm+qXYwurWP9ThOpe95WAwbZmWWhFXK1seXuN4HsmD/2W
858rS//ql9GWObCaX2Lj4zgStZZSrzrzKnwIBcWVLZTgE+8j8THN56t9mmaQTFRj
GUJjobQZ4c+YQnMYeRVLXvYhfcSJEOY5Rf/uzkwV3is4v8gGIVX+8VhZPFm+hh6W
B9Xwmq6jxCRSvz+mbgQOnWatebmOmVyDmCc+xbI1XZNa9MPVpFmrmODZC258Ca0a
KvnbLpyK2J00WZKNVIsbeIjoA/llSL8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:19 2025 by rpki-client