Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba820f4c-2fb7-3dff-8d1d-6f5142b5407b.roa
File: ba820f4c-2fb7-3dff-8d1d-6f5142b5407b.roa (raw, json)
Hash identifier: HRfndHKujy3+xnbT2aoZ2Dj1beKLRCf8EbjdOeluitY=
Subject key identifier: F9:3D:D4:5F:06:5C:4C:B5:D8:7B:3C:9E:39:50:FD:FF:99:CF:AA:CE
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0137FA9A4B1DD53B1BB60
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba820f4c-2fb7-3dff-8d1d-6f5142b5407b.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397226
IP address blocks: 156.154.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:13:7f:a9:a4:b1:dd:53:b1:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=72a850f7-7ac9-4553-8472-310f7b97da0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:bb:98:0b:ce:af:94:86:7c:54:39:8f:82:
2b:4d:98:ac:a6:12:ca:4d:ac:9a:a9:57:6d:61:2e:
04:66:8f:01:cf:e2:d4:37:fd:08:2b:18:6b:1b:77:
75:2f:47:1e:9d:40:84:24:67:28:da:fb:ba:ec:53:
18:ec:02:b3:b8:00:81:11:9d:e8:8b:be:73:0b:92:
a4:98:2c:a7:83:6c:cb:85:b8:85:31:00:a1:58:bb:
7b:ed:35:ed:bb:e7:d7:39:8c:a4:99:c2:0f:7d:b6:
e1:1f:80:8d:16:9d:b1:90:02:03:d9:42:af:f4:86:
1d:9d:69:38:1e:58:8b:1b:f0:d4:e2:40:6c:4e:95:
49:c1:fc:b6:5d:6d:fc:14:ad:04:84:21:44:64:91:
47:b6:6c:15:7e:ef:e6:fd:9c:d9:87:59:a3:32:9d:
93:36:1c:77:53:36:56:a5:f6:24:47:10:58:d9:ad:
3a:cb:13:4c:8d:3a:ca:8d:be:f9:01:b4:8e:fa:7f:
b8:ea:a5:b9:b0:f8:4d:e8:30:ef:11:56:18:f1:e1:
30:83:f0:2c:ee:60:49:67:05:e7:6a:31:74:7f:67:
94:27:fa:27:b6:14:5c:7f:84:c8:90:4e:42:9a:2d:
9a:1d:4f:e6:d5:53:f2:8b:03:92:e6:8f:b8:2a:70:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:D4:5F:06:5C:4C:B5:D8:7B:3C:9E:39:50:FD:FF:99:CF:AA:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba820f4c-2fb7-3dff-8d1d-6f5142b5407b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:5b:d7:f6:81:2f:e3:d5:09:9c:13:9d:98:c8:27:ce:24:bd:
e7:5c:f8:e8:fe:f6:a7:86:9d:42:9c:92:bf:6b:ac:81:ba:fa:
f6:65:49:ef:f7:62:bc:9c:b9:55:5f:d6:be:49:57:cf:77:0a:
8f:3c:57:76:2c:79:6a:26:9c:0b:e4:48:2f:fa:f8:b4:41:1c:
ee:d5:4a:65:65:ae:25:da:f8:10:fb:08:dc:a0:60:e9:c2:5a:
d5:84:88:61:f8:ab:51:09:47:50:4d:49:26:e2:86:89:66:d5:
8f:86:1f:9a:f7:df:ea:02:fb:0f:6d:d9:fe:fa:fa:91:47:a1:
5f:8d:00:bb:67:6f:b9:17:0d:8b:0f:09:92:5b:db:30:34:7d:
b2:e6:28:c7:9f:af:04:ee:f3:ed:d2:f3:5a:c1:5c:59:5f:bc:
c1:ed:bf:4c:90:83:ea:f6:ad:4c:6d:30:70:6f:70:8a:30:dc:
82:38:fa:14:64:ef:60:ec:83:5c:0c:87:83:7a:6b:5d:7b:c4:
73:04:27:8a:a9:e8:64:ea:2e:8a:69:8f:db:f6:b8:fa:62:0b:
5c:b5:dd:f1:8a:c0:52:a5:ca:f2:67:ea:83:2c:ee:40:87:f0:
84:ab:18:b2:75:3c:8a:18:35:0c:d2:56:9e:6c:f8:f3:f9:f6:
7b:63:12:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8BN/qaSx3VOxu2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzJhODUwZjctN2FjOS00NTUzLTg0NzItMzEwZjdiOTdkYTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUu7mAvOr5SGfFQ5j4IrTZisphLKTayaqVdt
YS4EZo8Bz+LUN/0IKxhrG3d1L0cenUCEJGco2vu67FMY7AKzuACBEZ3oi75zC5Kk
mCyng2zLhbiFMQChWLt77TXtu+fXOYykmcIPfbbhH4CNFp2xkAID2UKv9IYdnWk4
HliLG/DU4kBsTpVJwfy2XW38FK0EhCFEZJFHtmwVfu/m/ZzZh1mjMp2TNhx3UzZW
pfYkRxBY2a06yxNMjTrKjb75AbSO+n+46qW5sPhN6DDvEVYY8eEwg/As7mBJZwXn
ajF0f2eUJ/onthRcf4TIkE5Cmi2aHU/m1VPyiwOS5o+4KnCMYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPk91F8GXEy12Hs8njlQ/f+Zz6rOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmE4MjBmNGMtMmZiNy0z
ZGZmLThkMWQtNmY1MTQyYjU0MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhb1/aBL+PVCZwTnZjIJ84kvedc+Oj+9qeGnUKckr9rrIG6+vZlSe/3
YrycuVVf1r5JV893Co88V3YseWomnAvkSC/6+LRBHO7VSmVlriXa+BD7CNygYOnC
WtWEiGH4q1EJR1BNSSbiholm1Y+GH5r33+oC+w9t2f76+pFHoV+NALtnb7kXDYsP
CZJb2zA0fbLmKMefrwTu8+3S81rBXFlfvMHtv0yQg+r2rUxtMHBvcIow3II4+hRk
72Dsg1wMh4N6a117xHMEJ4qp6GTqLoppj9v2uPpiC1y13fGKwFKlyvJn6oMs7kCH
8ISrGLJ1PIoYNQzSVp5s+PP59ntjEsI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:29:39 2025 by rpki-client