Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68a1acd1-0da8-3935-abf0-fed5c3e7e59a.roa
File: 68a1acd1-0da8-3935-abf0-fed5c3e7e59a.roa (raw, json)
Hash identifier: er9wW2fVY/92435h/Dl3folV3Bk2suBIN9nj7g9EW94=
Subject key identifier: CC:30:46:57:A3:80:26:D2:ED:1D:44:88:D5:87:EA:BE:B8:5C:4A:CA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285847DDCA148DF9B841011C35DE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68a1acd1-0da8-3935-abf0-fed5c3e7e59a.roa
Signing time: Wed 13 Nov 2024 14:00:39 +0000
ROA not before: Wed 13 Nov 2024 14:00:39 +0000
ROA not after: Tue 11 Feb 2025 14:00:39 +0000
asID: 19905
IP address blocks: 156.154.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ca:14:8d:f9:b8:41:01:1c:35:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Nov 13 14:00:39 2024 GMT
Not After : Feb 11 14:00:39 2025 GMT
Subject: CN=740b7fef-4df5-4328-8b9f-da0011ba5742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:6c:80:82:8c:2a:9e:68:a9:24:6a:24:0f:
ae:a7:52:51:f2:a7:ad:db:ae:c2:43:9c:6a:e1:29:
c9:49:8c:28:3d:8d:0d:a0:de:37:4a:4c:fd:c1:55:
aa:40:5a:d7:0c:7d:0a:8c:76:23:d2:c6:00:6e:0e:
a6:72:72:74:6a:3e:19:e8:65:cf:08:64:6c:43:ba:
72:77:0f:c1:22:e4:d5:87:15:8e:26:7f:ad:a7:00:
35:dd:ff:e9:9e:d0:a2:05:1d:e5:6b:ea:3f:ea:b0:
65:1a:16:39:f4:b3:0b:37:11:ed:94:61:8b:0f:89:
f6:9a:ac:9e:e1:45:d5:5c:99:9c:ad:47:d5:21:16:
08:92:f3:53:e5:a7:08:b7:fe:df:a5:c3:a0:1a:b2:
a8:64:35:0e:1f:d2:21:bc:ee:4b:29:45:9e:77:80:
73:aa:b2:72:c9:2a:42:3a:79:f8:44:cb:88:af:c2:
9c:c7:34:88:cc:d8:31:6b:3f:2a:3a:c4:56:04:9c:
cf:71:ce:1f:ff:41:f0:a7:32:af:ec:dd:74:fa:de:
8f:42:94:20:16:f3:df:03:98:01:53:20:57:2c:42:
5f:b7:1b:e0:48:28:fa:74:f2:e8:70:b4:67:c6:91:
3b:4b:95:f3:f0:13:4d:f5:a4:54:12:8f:0c:e4:70:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:46:57:A3:80:26:D2:ED:1D:44:88:D5:87:EA:BE:B8:5C:4A:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68a1acd1-0da8-3935-abf0-fed5c3e7e59a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:ae:82:7c:91:87:c9:94:e7:4a:15:10:ae:81:9f:72:9a:c7:
2d:5a:02:a8:c1:15:8d:d0:58:57:1f:8c:9c:27:ed:4b:fd:44:
fd:30:47:c2:4d:32:7c:b2:26:d4:8f:66:fc:61:7d:6d:25:12:
87:0c:68:8a:d2:d5:6e:ab:97:46:3e:7c:a8:f5:08:f5:23:29:
9f:8a:14:55:85:c2:ff:1c:57:d9:8c:88:96:ad:30:5a:43:d3:
44:70:38:f7:eb:43:77:5c:bf:b2:91:3e:a9:d4:33:2d:24:d6:
9e:39:c2:bb:e3:37:a6:48:03:76:36:2a:4c:19:1b:6d:2d:d0:
14:4d:41:ae:9a:44:09:2c:a8:90:bc:0a:13:8d:31:d7:1a:6b:
d1:24:11:50:45:0d:0f:58:9d:21:2e:e1:db:2f:0d:b3:88:81:
73:18:8c:4a:bc:63:17:67:8c:ca:24:05:72:55:8a:f8:93:26:
66:6f:02:f5:42:15:06:0c:af:3e:c9:c0:0a:e9:3e:14:73:b8:
6e:6c:69:fa:ae:9b:f1:6b:47:7f:b7:de:b7:b3:bc:87:24:09:
e8:34:55:1c:75:69:08:2a:94:3a:b1:ee:5d:c7:94:ea:f0:c9:
fc:01:e6:2d:ef:49:88:89:ae:8e:17:9a:18:7b:de:6a:f8:7c:
1f:65:84:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdyhSN+bhBARw13gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTExMzE0MDAzOVoXDTI1MDIxMTE0MDAzOVowLzEtMCsGA1UEAxMk
NzQwYjdmZWYtNGRmNS00MzI4LThiOWYtZGEwMDExYmE1NzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP9sgIKMKp5oqSRqJA+up1JR8qet267CQ5xq
4SnJSYwoPY0NoN43Skz9wVWqQFrXDH0KjHYj0sYAbg6mcnJ0aj4Z6GXPCGRsQ7py
dw/BIuTVhxWOJn+tpwA13f/pntCiBR3la+o/6rBlGhY59LMLNxHtlGGLD4n2mqye
4UXVXJmcrUfVIRYIkvNT5acIt/7fpcOgGrKoZDUOH9IhvO5LKUWed4BzqrJyySpC
Onn4RMuIr8KcxzSIzNgxaz8qOsRWBJzPcc4f/0HwpzKv7N10+t6PQpQgFvPfA5gB
UyBXLEJftxvgSCj6dPLocLRnxpE7S5Xz8BNN9aRUEo8M5HBsIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwwRlejgCbS7R1EiNWH6r64XErKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjhhMWFjZDEtMGRhOC0z
OTM1LWFiZjAtZmVkNWMzZTdlNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6ugnyRh8mU50oVEK6Bn3Kaxy1aAqjBFY3QWFcfjJwn7Uv9RP0wR8JN
MnyyJtSPZvxhfW0lEocMaIrS1W6rl0Y+fKj1CPUjKZ+KFFWFwv8cV9mMiJatMFpD
00RwOPfrQ3dcv7KRPqnUMy0k1p45wrvjN6ZIA3Y2KkwZG20t0BRNQa6aRAksqJC8
ChONMdcaa9EkEVBFDQ9YnSEu4dsvDbOIgXMYjEq8YxdnjMokBXJViviTJmZvAvVC
FQYMrz7JwArpPhRzuG5safqum/FrR3+33rezvIckCeg0VRx1aQgqlDqx7l3HlOrw
yfwB5i3vSYiJro4Xmhh73mr4fB9lhOY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:10 2025 by rpki-client