Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11b8ca4f-3ccc-3728-916d-f0af9a44ecb9.roa
File: 11b8ca4f-3ccc-3728-916d-f0af9a44ecb9.roa (raw, json)
Hash identifier: Er8qA+rQxDS1oEHbs4fqCRfaOiMBP0JbbStEeBWUpNI=
Subject key identifier: 29:56:61:30:1A:F0:4B:E3:FD:B7:2C:AA:73:C4:D7:28:AC:78:DC:E4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F014835FC3802BB7561200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11b8ca4f-3ccc-3728-916d-f0af9a44ecb9.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 12008
IP address blocks: 156.154.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:14:83:5f:c3:80:2b:b7:56:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=11e88003-bcdc-4587-9e68-2f293361c824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:63:14:06:b3:99:63:05:ef:b0:10:85:9f:
80:52:1f:a2:45:cc:80:7b:db:b2:77:6b:12:02:ee:
44:b3:db:d7:f5:05:ae:29:a6:6b:ff:94:43:92:b7:
d8:07:68:ba:ad:2a:0c:17:6e:02:c2:0b:89:78:26:
fe:06:8e:58:41:c8:66:f2:79:d0:c5:47:3b:64:49:
15:60:24:3d:03:d2:0d:5a:1a:68:0a:55:24:ce:1e:
45:5d:57:0e:fd:07:58:ab:30:9e:13:de:6c:57:b9:
1d:65:42:c8:23:09:aa:90:cf:b5:ef:b6:f1:a9:31:
d5:56:5c:d3:e7:27:d7:96:16:12:26:6d:c9:c3:8f:
db:0a:dd:8e:ff:f5:f1:41:0d:e2:fa:73:15:5b:34:
30:25:0b:ff:4c:b6:99:6e:8d:bb:98:48:0d:79:db:
35:f3:f0:55:62:90:38:d4:f4:c4:28:49:57:02:d4:
9c:1d:1f:c1:90:69:98:d7:09:35:5e:b7:55:ec:c3:
5a:e5:94:8a:7a:dc:29:95:9d:e7:86:3a:22:59:fc:
27:ae:64:82:86:f1:5e:fa:e6:bb:42:c4:56:e2:c7:
b9:38:b4:ac:aa:53:ef:6c:be:bc:3e:f7:fa:cf:b0:
33:af:c8:01:8f:30:3d:2f:aa:bd:46:89:08:4f:8b:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:61:30:1A:F0:4B:E3:FD:B7:2C:AA:73:C4:D7:28:AC:78:DC:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11b8ca4f-3ccc-3728-916d-f0af9a44ecb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:9e:11:f1:00:ec:9e:07:7b:99:18:63:63:5a:a2:62:ce:3a:
2d:7f:14:53:86:d6:1c:e3:5f:87:06:8c:e5:cd:e3:4b:bc:e9:
da:c3:85:53:d0:96:c5:f3:39:a4:70:1f:df:1d:c2:1a:9e:4b:
e5:4b:e8:2d:df:80:8a:67:e4:65:b8:bb:e4:86:81:93:de:be:
cf:78:fd:6b:49:e3:f0:e7:c4:c3:db:de:23:b9:98:fa:b4:2d:
82:52:d2:53:f1:8f:eb:1f:d7:a6:bd:91:1c:d9:df:57:46:b1:
14:11:83:16:48:f6:00:41:d3:e1:94:de:8c:f9:00:1b:e4:f1:
59:da:98:55:74:60:17:e2:89:63:55:c3:7e:d0:2a:1a:f9:20:
b6:66:44:87:65:d3:60:ac:d9:64:03:4e:e7:55:6a:74:d9:bb:
97:e4:48:57:04:da:fd:a7:2f:33:5d:0f:db:07:e0:d4:3f:3d:
1a:7c:70:10:4f:23:b9:a1:a2:e5:1a:e7:82:1c:a9:a1:35:4c:
a0:20:f9:fc:4a:0b:f0:1d:cb:ad:f2:5d:f8:ac:a8:b6:6c:ec:
bd:6f:a5:6d:1c:79:44:6e:1e:b6:9e:b3:27:c9:a4:ab:83:7c:
fd:df:0b:09:f7:81:d3:84:3d:d3:57:cf:50:81:35:2c:7e:6f:
87:04:b1:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8BSDX8OAK7dWEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTFlODgwMDMtYmNkYy00NTg3LTllNjgtMmYyOTMzNjFjODI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr5jFAazmWMF77AQhZ+AUh+iRcyAe9uyd2sS
Au5Es9vX9QWuKaZr/5RDkrfYB2i6rSoMF24CwguJeCb+Bo5YQchm8nnQxUc7ZEkV
YCQ9A9INWhpoClUkzh5FXVcO/QdYqzCeE95sV7kdZULIIwmqkM+177bxqTHVVlzT
5yfXlhYSJm3Jw4/bCt2O//XxQQ3i+nMVWzQwJQv/TLaZbo27mEgNeds18/BVYpA4
1PTEKElXAtScHR/BkGmY1wk1XrdV7MNa5ZSKetwplZ3nhjoiWfwnrmSChvFe+ua7
QsRW4se5OLSsqlPvbL68Pvf6z7Azr8gBjzA9L6q9RokIT4uuqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClWYTAa8Evj/bcsqnPE1yiseNzkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTFiOGNhNGYtM2NjYy0z
NzI4LTkxNmQtZjBhZjlhNDRlY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByeEfEA7J4He5kYY2NaomLOOi1/FFOG1hzjX4cGjOXN40u86drDhVPQ
lsXzOaRwH98dwhqeS+VL6C3fgIpn5GW4u+SGgZPevs94/WtJ4/DnxMPb3iO5mPq0
LYJS0lPxj+sf16a9kRzZ31dGsRQRgxZI9gBB0+GU3oz5ABvk8VnamFV0YBfiiWNV
w37QKhr5ILZmRIdl02Cs2WQDTudVanTZu5fkSFcE2v2nLzNdD9sH4NQ/PRp8cBBP
I7mhouUa54IcqaE1TKAg+fxKC/Ady63yXfisqLZs7L1vpW0ceURuHraesyfJpKuD
fP3fCwn3gdOEPdNXz1CBNSx+b4cEsco=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:45 2025 by rpki-client