Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/130c2f2e-c4a7-3e21-b132-2551c4086cac.roa
File: 130c2f2e-c4a7-3e21-b132-2551c4086cac.roa (raw, json)
Hash identifier: 2Zzm0/RzPZsyZsB1W1XDipstMyrYd7nXBMcp+3je0+Q=
Subject key identifier: 42:8E:82:84:2E:A6:32:86:FD:3C:B9:67:7E:ED:7B:1F:12:14:22:A5
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858485F9B0FF5F5F18C75E540F2C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/130c2f2e-c4a7-3e21-b132-2551c4086cac.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 399164
IP address blocks: 156.154.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9b:0f:f5:f5:f1:8c:75:e5:40:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=b048b378-edd5-4f93-a286-e8d253519dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:60:6e:9e:98:cd:bf:59:d7:f2:38:16:a0:
6e:74:78:e6:14:9e:03:ee:69:25:00:cf:00:f7:87:
a2:76:d8:32:d4:45:2c:03:03:d7:95:75:04:99:57:
dc:62:4c:ba:be:c0:f5:c2:54:cc:59:4d:06:11:6d:
28:d8:7b:dc:7a:37:3f:71:29:00:f9:1c:2b:d5:2f:
9a:ab:3b:78:43:5a:16:d6:a3:ec:71:ab:78:a9:44:
ab:fd:ff:cb:a9:e8:c9:cb:96:9a:a7:65:1a:c3:00:
b7:02:b6:ce:af:fc:ac:18:10:81:89:6f:11:c5:e4:
75:24:78:91:e8:fc:72:ad:37:b0:5a:56:c1:91:15:
dc:b1:65:8b:5c:38:40:47:b6:a3:b2:42:a5:a4:66:
78:9f:1a:85:87:c7:eb:7d:9c:49:89:d0:68:da:a0:
02:7c:a6:61:29:27:c1:9e:77:57:8d:09:2a:87:3a:
f5:47:4b:67:ab:ff:b6:b1:e9:58:e0:59:c6:6d:3b:
0e:1a:70:d2:04:ef:53:f8:e8:07:2b:ef:be:f8:42:
67:ea:02:b9:9f:62:b3:4b:99:95:fd:9d:72:c9:c0:
fa:7f:bd:6a:d6:bd:15:10:fe:ff:cf:a4:a5:48:85:
c0:69:6f:ab:b4:79:c1:8e:70:95:aa:0d:2b:fe:f9:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:82:84:2E:A6:32:86:FD:3C:B9:67:7E:ED:7B:1F:12:14:22:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/130c2f2e-c4a7-3e21-b132-2551c4086cac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:5a:8f:93:1e:a4:9f:46:ae:75:7b:8e:a1:14:ea:e6:3d:ef:
14:cc:ec:f9:e2:ed:55:44:d5:37:d2:91:6f:f4:54:be:ca:70:
0b:30:09:3e:0b:a5:33:54:df:06:1a:c9:89:b5:df:45:99:16:
63:cd:8d:99:bb:24:2d:cc:5c:5f:62:8e:5c:78:fc:dc:5e:ee:
18:74:48:2c:87:00:c7:7f:55:77:ae:56:0a:08:91:a6:a5:de:
34:db:dc:18:c8:59:41:48:02:81:0f:b7:ed:a5:15:3c:d8:a7:
3c:a8:10:03:9c:7a:28:eb:6e:14:a9:66:30:6b:10:85:79:5e:
3e:35:3f:ed:0f:39:17:2e:8a:3b:b2:16:c3:1a:41:6c:43:be:
e7:9e:87:94:47:ec:e7:8b:ac:86:43:35:46:2a:70:ac:31:3f:
a9:b5:3f:b0:bb:b0:2a:46:86:5a:09:47:7e:e3:05:c3:d9:98:
cd:8c:05:7d:16:cd:38:0f:d1:20:ad:12:d8:b4:d8:07:3f:2c:
87:0d:a6:26:8b:13:5a:93:1c:c0:a1:5e:15:a1:e1:93:72:41:
89:d7:79:59:2c:40:86:10:98:f9:ee:c6:ae:80:b7:b9:01:71:
9e:ac:36:db:14:fe:83:a9:e9:5a:99:84:7f:5c:38:23:ad:b8:
af:8a:ea:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmw/19fGMdeVA8sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
YjA0OGIzNzgtZWRkNS00ZjkzLWEyODYtZThkMjUzNTE5ZGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteZgbp6Yzb9Z1/I4FqBudHjmFJ4D7mklAM8A
94eidtgy1EUsAwPXlXUEmVfcYky6vsD1wlTMWU0GEW0o2Hvcejc/cSkA+Rwr1S+a
qzt4Q1oW1qPscat4qUSr/f/LqejJy5aap2UawwC3ArbOr/ysGBCBiW8RxeR1JHiR
6PxyrTewWlbBkRXcsWWLXDhAR7ajskKlpGZ4nxqFh8frfZxJidBo2qACfKZhKSfB
nndXjQkqhzr1R0tnq/+2selY4FnGbTsOGnDSBO9T+OgHK++++EJn6gK5n2KzS5mV
/Z1yycD6f71q1r0VEP7/z6SlSIXAaW+rtHnBjnCVqg0r/vm0gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKOgoQupjKG/Ty5Z37tex8SFCKlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTMwYzJmMmUtYzRhNy0z
ZTIxLWIxMzItMjU1MWM0MDg2Y2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9aj5MepJ9GrnV7jqEU6uY97xTM7Pni7VVE1TfSkW/0VL7KcAswCT4L
pTNU3wYayYm130WZFmPNjZm7JC3MXF9ijlx4/Nxe7hh0SCyHAMd/VXeuVgoIkaal
3jTb3BjIWUFIAoEPt+2lFTzYpzyoEAOceijrbhSpZjBrEIV5Xj41P+0PORcuijuy
FsMaQWxDvueeh5RH7OeLrIZDNUYqcKwxP6m1P7C7sCpGhloJR37jBcPZmM2MBX0W
zTgP0SCtEti02Ac/LIcNpiaLE1qTHMChXhWh4ZNyQYnXeVksQIYQmPnuxq6At7kB
cZ6sNtsU/oOp6VqZhH9cOCOtuK+K6tc=
-----END CERTIFICATE-----
Generated at Fri May 2 01:32:11 2025 by rpki-client