Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/665e4dee-f860-36da-94b9-6b6f176be0ca.roa
File: 665e4dee-f860-36da-94b9-6b6f176be0ca.roa (raw, json)
Hash identifier: KUHaKbu/4Lgq/VAVpGjXHsJFm+F0J7LsDg4LYxnGFdA=
Subject key identifier: 56:86:EC:10:77:82:E9:52:3C:A9:06:0F:44:5A:41:BC:B2:9A:07:41
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00873875A613B81E617A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/665e4dee-f860-36da-94b9-6b6f176be0ca.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397230
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:08:73:87:5a:61:3b:81:e6:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=06e61650-272d-43a9-8ed1-15cb348339dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:f3:38:b8:44:60:19:04:b4:8f:f0:0e:18:
ca:3a:95:88:97:f5:1b:57:ea:45:f9:3f:43:b3:e3:
0f:78:9a:f4:57:78:56:51:25:9a:54:be:1d:5c:70:
c8:16:9c:4b:8d:02:07:f7:2c:f8:26:82:2d:a4:0e:
07:ac:3c:e6:b7:db:4f:67:21:ba:85:73:a3:37:6f:
ab:0c:13:ec:59:60:c3:f1:77:73:ef:56:f2:11:9a:
d5:31:01:a3:63:95:ab:50:e5:a6:65:1e:4e:be:89:
70:71:b1:be:a0:e1:a4:69:77:97:73:00:2d:2f:04:
db:ef:df:86:06:c1:bb:f8:ca:1c:bc:2a:d8:37:eb:
aa:2e:67:84:35:0e:e8:23:d7:23:77:fe:82:17:ba:
fa:fb:59:fc:bc:5a:90:98:75:3d:ed:25:a6:07:ad:
c7:a8:21:95:29:76:ad:91:bf:e7:b9:b9:5b:72:6d:
d9:02:1e:89:85:f4:f5:99:b7:ed:81:3f:6f:71:d8:
4f:b7:59:01:ea:1e:31:69:75:09:0b:c3:fe:0f:0a:
d4:9a:e4:4e:13:49:5a:96:5f:21:9c:93:5b:35:66:
d2:d2:96:26:68:c1:64:bf:47:3e:0f:1b:12:68:18:
69:13:8a:fb:a3:3f:e4:fa:7b:bc:16:18:47:e2:07:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:86:EC:10:77:82:E9:52:3C:A9:06:0F:44:5A:41:BC:B2:9A:07:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/665e4dee-f860-36da-94b9-6b6f176be0ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:9a:6e:89:e6:96:7d:39:e7:16:31:cd:4e:5f:ba:ff:0a:b4:
22:3d:a6:4e:d2:05:7c:d6:94:d8:56:e8:27:1c:67:fc:25:27:
da:6e:1d:95:82:d6:cc:7f:ed:a5:48:05:f0:b1:0e:0d:86:ca:
1b:bc:8f:13:61:66:50:97:56:11:62:6d:85:9c:76:2c:d7:44:
ec:13:30:b3:ce:9d:5d:25:09:d1:bc:4a:d7:56:61:98:12:b5:
e2:36:1b:53:ad:6c:47:2d:76:f9:37:2d:87:d8:13:34:c0:7c:
57:c8:6b:96:00:c5:ac:bf:a2:fd:60:68:5e:e6:b8:f3:d9:d9:
c6:3d:eb:57:f5:0f:4b:0e:ac:3b:63:6b:d2:ab:8a:08:a3:34:
4e:ca:52:fc:00:f2:b9:43:7d:57:b9:62:97:13:bb:59:a2:92:
2a:c7:89:8d:c4:65:b4:7f:29:67:5b:b9:cd:ce:60:b5:5d:91:
f9:eb:74:e7:af:38:47:11:fb:6d:5d:3f:20:cd:bd:f4:87:a6:
03:b2:aa:24:7a:92:d3:5a:11:fb:78:ad:0f:95:30:66:61:73:
4a:81:7b:3f:82:d2:8e:ea:e0:74:e7:3f:23:37:bd:93:0e:d5:
d8:a7:ec:50:6a:c6:a7:cf:80:6d:61:a7:f4:16:fc:8a:90:7e:
f6:32:d9:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8Ahzh1phO4HmF6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDZlNjE2NTAtMjcyZC00M2E5LThlZDEtMTVjYjM0ODMzOWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh23zOLhEYBkEtI/wDhjKOpWIl/UbV+pF+T9D
s+MPeJr0V3hWUSWaVL4dXHDIFpxLjQIH9yz4JoItpA4HrDzmt9tPZyG6hXOjN2+r
DBPsWWDD8Xdz71byEZrVMQGjY5WrUOWmZR5OvolwcbG+oOGkaXeXcwAtLwTb79+G
BsG7+MocvCrYN+uqLmeENQ7oI9cjd/6CF7r6+1n8vFqQmHU97SWmB63HqCGVKXat
kb/nublbcm3ZAh6JhfT1mbftgT9vcdhPt1kB6h4xaXUJC8P+DwrUmuROE0lall8h
nJNbNWbS0pYmaMFkv0c+DxsSaBhpE4r7oz/k+nu8FhhH4gdVpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFaG7BB3gulSPKkGD0RaQbyymgdBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjY1ZTRkZWUtZjg2MC0z
NmRhLTk0YjktNmI2ZjE3NmJlMGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+abonmln055xYxzU5fuv8KtCI9pk7SBXzWlNhW6CccZ/wlJ9puHZWC
1sx/7aVIBfCxDg2Gyhu8jxNhZlCXVhFibYWcdizXROwTMLPOnV0lCdG8StdWYZgS
teI2G1OtbEctdvk3LYfYEzTAfFfIa5YAxay/ov1gaF7muPPZ2cY961f1D0sOrDtj
a9KrigijNE7KUvwA8rlDfVe5YpcTu1mikirHiY3EZbR/KWdbuc3OYLVdkfnrdOev
OEcR+21dPyDNvfSHpgOyqiR6ktNaEft4rQ+VMGZhc0qBez+C0o7q4HTnPyM3vZMO
1din7FBqxqfPgG1hp/QW/IqQfvYy2W8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:53 2025 by rpki-client