Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/103e920d-3da6-33df-9807-8d30787407b9.roa
File: 103e920d-3da6-33df-9807-8d30787407b9.roa (raw, json)
Hash identifier: LwZpLosbcLMRtiKGi1GeXm9iXtzQDB0uA7kL2yCcqP8=
Subject key identifier: AA:C9:F3:13:9E:F2:4F:C1:DE:66:86:A3:0C:20:3C:13:B3:91:79:A6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285847DDCA356B5F042C05BB9EB4C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/103e920d-3da6-33df-9807-8d30787407b9.roa
Signing time: Wed 13 Nov 2024 14:00:39 +0000
ROA not before: Wed 13 Nov 2024 14:00:39 +0000
ROA not after: Tue 11 Feb 2025 14:00:39 +0000
asID: 397233
IP address blocks: 156.154.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ca:35:6b:5f:04:2c:05:bb:9e:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Nov 13 14:00:39 2024 GMT
Not After : Feb 11 14:00:39 2025 GMT
Subject: CN=14254832-b599-4831-8ccb-eafb8c2a1dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:9e:15:97:10:24:fb:62:6c:44:ea:25:e5:
fc:61:81:ea:11:1b:e4:29:b8:07:71:47:28:c9:c8:
ec:f2:97:8c:a9:79:de:34:b0:4c:a6:ca:ab:e5:43:
4e:d7:79:5e:2c:08:c0:7e:b1:7f:4b:47:3b:07:43:
96:b4:ac:8d:a6:e9:7c:83:05:4b:17:84:82:b7:9f:
a8:50:e5:c8:a8:b4:ca:51:87:de:8e:7c:df:2d:fc:
0f:52:47:36:89:53:d8:9c:0d:84:60:c4:0e:0c:3c:
16:c7:ed:b0:f7:34:df:31:b9:0d:90:52:b0:ad:e8:
a2:dc:4c:86:78:4e:6b:17:23:8b:af:a9:43:90:1d:
e4:4d:1a:71:60:77:20:d2:8e:0c:d4:5d:3f:d9:12:
20:83:77:67:b5:07:d4:d2:b7:ae:f3:86:29:1b:24:
df:e8:25:a4:b7:07:40:0f:d1:e3:a7:94:1c:d0:ec:
73:b4:e2:b3:f4:29:a8:0e:f3:fe:b4:ad:f4:bb:32:
fb:b1:ee:d0:bf:2f:d6:63:02:59:f5:af:cc:16:5d:
4e:ca:c5:bb:e8:be:1b:35:9e:5b:b4:d0:8b:87:a2:
eb:fb:e3:26:68:14:11:20:13:3b:53:c2:a5:06:95:
9f:b1:35:fe:fa:4a:c5:07:76:16:9a:12:d4:26:3f:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C9:F3:13:9E:F2:4F:C1:DE:66:86:A3:0C:20:3C:13:B3:91:79:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/103e920d-3da6-33df-9807-8d30787407b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:50:dd:ca:14:4a:87:89:f8:31:14:b8:90:3e:d2:5c:9a:f1:
e8:68:fa:f4:58:b4:a4:57:06:61:de:06:b7:c2:53:26:4b:67:
d9:c6:c6:0e:72:92:9b:00:18:3c:79:04:60:15:ff:be:55:41:
f7:4c:57:05:45:0d:9f:75:de:f3:cf:f8:77:ed:b4:7c:5b:80:
63:c6:98:81:2d:77:9c:e5:b4:ce:a3:d5:3b:02:ae:d3:b4:6b:
36:dc:0e:09:63:a7:db:94:96:fd:2c:47:c6:f6:6a:58:7a:03:
d0:84:32:49:42:25:28:c0:fb:96:69:53:ee:2b:1f:ad:e9:e3:
6d:aa:c8:ee:fe:57:88:a6:66:78:25:e6:0d:ff:6c:63:cd:40:
77:6b:1f:45:e1:29:47:13:05:f4:fd:78:86:2d:18:43:ef:ea:
6b:6b:ab:f6:ae:18:d0:4b:60:18:36:2d:04:88:3c:a8:cf:ea:
5f:a1:cc:d2:15:70:9e:37:8f:f3:8b:79:87:dc:3e:75:7c:3f:
31:c1:16:69:c7:b0:e3:e3:09:ae:e0:f5:08:b4:08:c1:1e:f1:
05:c3:a5:c8:83:8d:8f:bb:eb:fb:ac:9d:30:88:19:49:70:6d:
a1:50:07:7a:1c:82:07:8e:de:87:16:1b:7e:ec:25:17:eb:2d:
2c:b5:6b:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdyjVrXwQsBbuetMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTExMzE0MDAzOVoXDTI1MDIxMTE0MDAzOVowLzEtMCsGA1UEAxMk
MTQyNTQ4MzItYjU5OS00ODMxLThjY2ItZWFmYjhjMmExZGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRGeFZcQJPtibETqJeX8YYHqERvkKbgHcUco
ycjs8peMqXneNLBMpsqr5UNO13leLAjAfrF/S0c7B0OWtKyNpul8gwVLF4SCt5+o
UOXIqLTKUYfejnzfLfwPUkc2iVPYnA2EYMQODDwWx+2w9zTfMbkNkFKwreii3EyG
eE5rFyOLr6lDkB3kTRpxYHcg0o4M1F0/2RIgg3dntQfU0reu84YpGyTf6CWktwdA
D9Hjp5Qc0OxztOKz9CmoDvP+tK30uzL7se7Qvy/WYwJZ9a/MFl1OysW76L4bNZ5b
tNCLh6Lr++MmaBQRIBM7U8KlBpWfsTX++krFB3YWmhLUJj/djwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrJ8xOe8k/B3maGowwgPBOzkXmmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTAzZTkyMGQtM2RhNi0z
M2RmLTk4MDctOGQzMDc4NzQwN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBQ3coUSoeJ+DEUuJA+0lya8eho+vRYtKRXBmHeBrfCUyZLZ9nGxg5y
kpsAGDx5BGAV/75VQfdMVwVFDZ913vPP+HfttHxbgGPGmIEtd5zltM6j1TsCrtO0
azbcDgljp9uUlv0sR8b2alh6A9CEMklCJSjA+5ZpU+4rH63p422qyO7+V4imZngl
5g3/bGPNQHdrH0XhKUcTBfT9eIYtGEPv6mtrq/auGNBLYBg2LQSIPKjP6l+hzNIV
cJ43j/OLeYfcPnV8PzHBFmnHsOPjCa7g9Qi0CMEe8QXDpciDjY+76/usnTCIGUlw
baFQB3ocggeO3ocWG37sJRfrLSy1a4I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:44 2025 by rpki-client