Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef93731a-ed1c-33c8-8915-f3d1b9679100.roa
File: ef93731a-ed1c-33c8-8915-f3d1b9679100.roa (raw, json)
Hash identifier: in5zoV27mkOLc9szwMZahy9KQN0AYO2troZ94MPF3vY=
Subject key identifier: E2:EA:8F:18:43:5A:D2:BB:5C:84:73:16:61:93:C9:49:8F:70:4D:FC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858484C12EF7DD84FDF9F569BB800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef93731a-ed1c-33c8-8915-f3d1b9679100.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 399155
IP address blocks: 156.154.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:ef:7d:d8:4f:df:9f:56:9b:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=23c1be6f-3503-42e0-b572-032001ec6c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:52:d0:e2:cc:e5:69:a1:5e:1e:9f:3e:2b:
c8:e2:07:37:4b:87:71:c6:c0:4f:cc:4c:5a:89:9b:
20:be:e0:cc:e0:69:bd:cc:25:b1:1e:ba:b4:57:40:
46:b2:46:d3:16:f8:ae:6b:9b:71:65:29:fd:ae:63:
01:50:c3:b9:5c:64:1f:db:89:0a:66:ef:18:de:4a:
cb:b0:00:d3:0e:97:1b:14:79:4f:05:99:09:e9:37:
33:9d:58:e8:f9:36:34:24:f5:d9:ea:4a:91:54:78:
47:66:7e:74:42:1c:cf:c1:f0:69:d1:a7:89:bf:83:
70:fa:6f:3e:a6:12:79:a2:fe:99:da:b1:a8:c0:03:
c7:cb:31:fc:35:ea:99:15:90:6f:f2:d7:8d:4d:f4:
9a:f0:e4:23:2f:da:54:6e:16:39:93:aa:b5:41:76:
3c:0e:3d:3f:15:ad:81:8f:6f:39:68:f4:26:c5:e1:
80:27:50:20:74:9c:33:23:ae:8c:63:86:48:9b:3d:
b2:08:23:1a:45:96:4a:c3:02:e8:60:bf:1f:71:4e:
87:89:85:77:1f:e4:b4:9c:49:19:da:fb:2c:6c:eb:
40:a4:fc:07:8c:ff:9f:5c:41:44:c3:ed:ea:0b:36:
dd:b2:ee:c5:64:ce:e2:86:10:c9:61:a8:48:ca:65:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EA:8F:18:43:5A:D2:BB:5C:84:73:16:61:93:C9:49:8F:70:4D:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef93731a-ed1c-33c8-8915-f3d1b9679100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:30:10:89:9e:7d:a0:4f:e2:6c:88:42:8f:db:7e:d6:db:14:
33:db:3a:d3:a3:28:58:ea:3a:45:0f:42:39:15:61:94:bf:97:
d8:54:31:d2:8f:51:6e:27:4b:3b:05:b6:6f:19:e3:92:5e:0d:
93:a7:75:ac:71:71:a8:f7:db:8b:8b:92:c9:69:57:62:8d:8c:
d8:e1:a5:c4:55:00:4c:36:cd:0d:4b:f2:a3:65:22:91:be:7f:
d3:19:aa:d5:6a:05:b7:60:3b:93:59:f1:69:e5:54:5c:f0:42:
13:f0:10:c2:ae:cb:ce:f2:10:22:f8:11:93:43:d2:c3:c5:fe:
f5:36:05:e2:50:62:18:46:74:16:ce:62:ec:ea:9b:2e:f7:02:
30:bc:ff:e9:f2:0d:83:3d:c7:96:af:ad:e5:26:64:2d:45:83:
22:62:97:f1:5f:c7:e7:8f:5c:0e:8a:69:90:29:ab:aa:46:e0:
85:de:7d:28:6d:f8:ec:41:48:68:59:93:4e:74:f2:b3:f1:fe:
af:45:42:1d:e4:a4:f7:61:4a:86:a9:c4:38:14:c1:d5:8a:dd:
33:47:fa:21:8f:46:d5:1f:cc:3d:50:9e:50:fe:0e:c9:31:88:
68:9e:4a:d1:e0:09:77:5a:a9:4c:f5:05:ce:88:d3:9c:ed:f9:
9e:c9:d6:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEu992E/fn1abuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MjNjMWJlNmYtMzUwMy00MmUwLWI1NzItMDMyMDAxZWM2Yzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMBS0OLM5WmhXh6fPivI4gc3S4dxxsBPzExa
iZsgvuDM4Gm9zCWxHrq0V0BGskbTFviua5txZSn9rmMBUMO5XGQf24kKZu8Y3krL
sADTDpcbFHlPBZkJ6TcznVjo+TY0JPXZ6kqRVHhHZn50QhzPwfBp0aeJv4Nw+m8+
phJ5ov6Z2rGowAPHyzH8NeqZFZBv8teNTfSa8OQjL9pUbhY5k6q1QXY8Dj0/Fa2B
j285aPQmxeGAJ1AgdJwzI66MY4ZImz2yCCMaRZZKwwLoYL8fcU6HiYV3H+S0nEkZ
2vssbOtApPwHjP+fXEFEw+3qCzbdsu7FZM7ihhDJYahIymUy2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLqjxhDWtK7XIRzFmGTyUmPcE38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWY5MzczMWEtZWQxYy0z
M2M4LTg5MTUtZjNkMWI5Njc5MTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4wEImefaBP4myIQo/bftbbFDPbOtOjKFjqOkUPQjkVYZS/l9hUMdKP
UW4nSzsFtm8Z45JeDZOndaxxcaj324uLkslpV2KNjNjhpcRVAEw2zQ1L8qNlIpG+
f9MZqtVqBbdgO5NZ8WnlVFzwQhPwEMKuy87yECL4EZND0sPF/vU2BeJQYhhGdBbO
Yuzqmy73AjC8/+nyDYM9x5avreUmZC1FgyJil/Ffx+ePXA6KaZApq6pG4IXefSht
+OxBSGhZk0508rPx/q9FQh3kpPdhSoapxDgUwdWK3TNH+iGPRtUfzD1QnlD+Dskx
iGieStHgCXdaqUz1Bc6I05zt+Z7J1oI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:56 2025 by rpki-client