Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa
File: aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa (raw, json)
Hash identifier: uC7PPBuTH27GVPKNG9bnqYyPi16R5fHbvfOch1kTrBg=
Subject key identifier: 39:E8:DE:41:BD:98:3D:14:39:F9:C7:EC:3A:28:EB:37:7A:6C:59:5C
Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial: 010D0C9F4328584854702166A1654CFA624782C0
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 63023
IP address blocks: 104.156.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:21:66:a1:65:4c:fa:62:47:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=a376c67e-d356-4aec-828f-f42699c32485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:99:6e:e3:17:38:c9:32:5a:e5:0a:cb:6b:
52:76:22:1f:c6:61:8c:8e:ba:44:ab:fb:fb:bb:5d:
2a:27:2c:2b:f1:2b:71:db:5c:a4:a0:7f:5e:15:7b:
ba:db:83:db:ca:97:40:c2:d4:40:af:d0:a2:4e:a9:
17:00:75:bf:ea:2f:dc:c9:ed:1a:cb:15:02:58:aa:
01:cd:47:0a:65:78:46:84:a7:20:54:6d:de:a3:ce:
20:0b:ef:9e:b2:f7:12:7f:45:5c:87:23:66:3b:5f:
57:66:e0:3f:4d:93:27:7d:e6:d9:c9:d9:9d:dd:e4:
f7:fa:a7:22:96:69:dd:9e:1d:91:4a:68:f3:11:83:
a0:5c:8f:e4:18:fb:35:b7:b0:1e:90:fb:bd:39:e6:
79:91:81:35:1d:6e:56:0a:f9:24:56:29:2d:f3:5e:
3f:36:c7:a2:09:c2:3d:d9:04:d1:ea:a1:1a:fa:09:
7b:a2:84:1f:79:fc:2b:0d:18:9a:52:5e:f7:78:ce:
ca:7e:e8:d4:78:be:95:fb:71:a2:de:cb:37:16:ff:
f5:3d:7d:7b:de:48:3d:e9:c8:fb:7d:04:2c:44:30:
3c:52:67:7c:77:d1:03:08:98:88:a4:10:f8:07:64:
a1:d2:42:3a:2d:c2:4d:b9:39:61:23:c7:fe:69:f3:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:DE:41:BD:98:3D:14:39:F9:C7:EC:3A:28:EB:37:7A:6C:59:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
X509v3 Authority Key Identifier:
keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:16:1a:c1:17:22:b5:91:95:3a:42:68:bb:11:b8:bf:51:b9:
76:18:40:39:00:1d:33:71:fe:8a:d4:de:72:ec:97:3a:1c:61:
77:a1:82:fb:44:fb:c6:58:26:e7:6c:b4:3b:71:7a:cf:a0:a3:
45:85:af:e9:9a:71:23:e5:fc:d1:ae:b1:49:0b:7d:66:09:e2:
e0:3b:ad:e3:01:8f:69:6e:c5:32:15:49:33:1e:2c:cc:32:11:
12:96:f5:ee:42:1f:cc:d2:96:de:fc:ed:a2:c6:6f:b2:54:7c:
e9:c7:6f:63:96:b5:0b:0b:c0:0a:e2:a4:6a:3e:d1:95:c0:81:
40:41:72:1e:1e:bf:b3:06:7c:8a:49:7c:0e:dd:c6:2a:bb:0f:
1b:28:25:23:7e:d6:5f:84:ae:3d:dc:61:b6:c8:8d:15:c2:4e:
a5:2a:5b:54:85:65:7e:b8:a8:61:f0:6d:c1:e5:bb:99:8e:56:
ab:9d:fa:4a:5c:18:d8:00:fd:0e:8b:99:78:84:b5:0e:f0:1d:
23:83:cb:b1:bc:a2:9a:83:53:18:d2:31:b7:e2:da:29:42:bd:
fe:e1:69:34:5b:3b:80:f6:36:18:b0:b3:0d:73:f3:a7:55:40:
82:86:4b:d9:d5:0b:09:4f:8b:51:26:1d:69:61:e9:72:ea:33:
ab:d3:39:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcCFmoWVM+mJHgsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3
ZWFmMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
YTM3NmM2N2UtZDM1Ni00YWVjLTgyOGYtZjQyNjk5YzMyNDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O6ZbuMXOMkyWuUKy2tSdiIfxmGMjrpEq/v7
u10qJywr8Stx21ykoH9eFXu624PbypdAwtRAr9CiTqkXAHW/6i/cye0ayxUCWKoB
zUcKZXhGhKcgVG3eo84gC++esvcSf0VchyNmO19XZuA/TZMnfebZydmd3eT3+qci
lmndnh2RSmjzEYOgXI/kGPs1t7AekPu9OeZ5kYE1HW5WCvkkVikt814/NseiCcI9
2QTR6qEa+gl7ooQfefwrDRiaUl73eM7KfujUeL6V+3Gi3ss3Fv/1PX173kg96cj7
fQQsRDA8Umd8d9EDCJiIpBD4B2Sh0kI6LcJNuTlhI8f+afNQAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDno3kG9mD0UOfnH7Doo6zd6bFlcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk
OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYWJhNWE2YTEtZWFkOS0z
M2ZlLWExYjQtYTllMmZiOTAwODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl
NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2
N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1
ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEWGsEXIrWRlTpCaLsRuL9RuXYYQDkAHTNx/orU3nLslzocYXehgvtE
+8ZYJudstDtxes+go0WFr+macSPl/NGusUkLfWYJ4uA7reMBj2luxTIVSTMeLMwy
ERKW9e5CH8zSlt787aLGb7JUfOnHb2OWtQsLwAripGo+0ZXAgUBBch4ev7MGfIpJ
fA7dxiq7DxsoJSN+1l+Erj3cYbbIjRXCTqUqW1SFZX64qGHwbcHlu5mOVqud+kpc
GNgA/Q6LmXiEtQ7wHSODy7G8opqDUxjSMbfi2ilCvf7haTRbO4D2Nhiwsw1z86dV
QIKGS9nVCwlPi1EmHWlh6XLqM6vTOQY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:57 2025 by rpki-client