Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa
File: d2001e7d-c16b-3759-984b-235a50540d9b.roa (raw, json)
Hash identifier: vq9OaGP6ompw2X+NZliBZ25A1WiSnFZ2egECGm97v7I=
Subject key identifier: 36:72:1B:D4:57:7E:0C:35:6E:69:69:78:DD:47:31:43:CE:9A:EB:92
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848B4C0D7367058144BE38FAB00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 54113
IP address blocks: 157.5.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d7:36:70:58:14:4b:e3:8f:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=f7c2a2de-f436-4366-a10a-8ed1642b8b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a2:92:ac:37:5b:94:90:45:37:80:3e:66:a0:
ef:16:5c:40:0e:ab:02:28:ee:23:aa:e5:f4:0f:16:
70:d9:79:c8:2e:97:8d:fc:a4:e9:bd:4c:4b:ae:50:
ac:8e:38:c8:54:a2:83:8b:fe:61:6b:6d:46:57:e5:
07:b4:31:23:af:7f:58:cb:30:12:93:95:1a:f1:5a:
98:c5:77:3a:e1:bd:24:d4:9d:bd:62:bb:df:23:3f:
e6:cc:9d:53:ed:bc:1a:72:20:a2:ed:ac:07:26:2b:
14:7b:15:21:e3:3d:22:f1:db:b3:0a:25:83:03:59:
66:9b:b7:49:04:47:e0:44:ac:7b:ff:71:d6:70:08:
30:c5:20:73:98:a7:70:ef:94:38:c3:f9:d6:03:bb:
42:8c:3e:0f:5e:37:aa:a8:c5:4d:6c:3e:e5:8f:11:
81:1c:7b:fe:93:06:81:f8:88:20:84:a3:22:88:99:
03:ea:57:07:18:0a:de:c1:63:c5:b1:75:9b:47:6b:
d9:ee:f0:21:90:67:2f:09:d9:b9:d6:2f:2c:e2:aa:
7a:60:29:d4:bb:10:ab:df:b1:69:2d:de:2a:78:ce:
cb:ad:aa:ae:1c:f0:fc:07:05:4a:24:59:ab:c0:09:
1a:5e:94:30:8e:1d:f3:14:bd:b6:aa:f0:9a:dc:5d:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:72:1B:D4:57:7E:0C:35:6E:69:69:78:DD:47:31:43:CE:9A:EB:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:ee:8c:01:d3:b3:ed:3b:80:bf:68:42:e2:6e:60:33:72:68:
78:5b:72:0c:18:55:5a:7b:e0:99:50:68:7e:b6:fc:1e:b7:21:
b2:3a:69:f5:83:07:9a:fc:29:d0:85:29:d1:9f:0a:57:49:91:
73:8a:9f:53:87:a3:61:1b:23:f7:f0:2c:74:bc:5d:1d:94:b6:
69:c3:ad:54:26:21:56:c7:f3:7d:44:d8:39:e5:30:4c:b7:50:
e4:f8:ef:8e:4e:60:4f:8a:32:74:06:a3:99:45:66:5f:e6:57:
21:5e:37:ec:d1:d2:ec:1c:e7:a2:15:26:3f:d7:90:a8:e3:96:
fa:22:40:71:1e:8e:e9:a8:97:09:3e:e7:01:22:39:5a:18:0b:
bd:62:7d:25:63:c2:9f:c7:eb:80:94:8f:2c:0d:47:02:ad:3f:
8a:77:ce:b3:f6:3e:42:47:f4:9e:50:a7:86:b4:09:7f:31:15:
7b:6a:df:e9:bd:24:97:29:46:ff:b2:ca:23:13:2c:2c:c4:75:
ff:74:19:a6:ca:7f:44:8c:fa:3a:ed:db:39:17:5f:84:b6:be:
12:97:3a:f7:dd:b8:5f:08:ad:2e:16:1f:5b:00:9c:87:87:52:
fe:69:37:07:01:c9:7f:46:1e:1d:ca:14:63:36:6c:79:b8:7a:
96:1e:23:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNc2cFgUS+OPqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
ZjdjMmEyZGUtZjQzNi00MzY2LWExMGEtOGVkMTY0MmI4YjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaKSrDdblJBFN4A+ZqDvFlxADqsCKO4jquX0
DxZw2XnILpeN/KTpvUxLrlCsjjjIVKKDi/5ha21GV+UHtDEjr39YyzASk5Ua8VqY
xXc64b0k1J29YrvfIz/mzJ1T7bwaciCi7awHJisUexUh4z0i8duzCiWDA1lmm7dJ
BEfgRKx7/3HWcAgwxSBzmKdw75Q4w/nWA7tCjD4PXjeqqMVNbD7ljxGBHHv+kwaB
+IgghKMiiJkD6lcHGArewWPFsXWbR2vZ7vAhkGcvCdm51i8s4qp6YCnUuxCr37Fp
Ld4qeM7LraquHPD8BwVKJFmrwAkaXpQwjh3zFL22qvCa3F2MFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZyG9RXfgw1bmlpeN1HMUPOmuuSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDIwMDFlN2QtYzE2Yi0z
NzU5LTk4NGItMjM1YTUwNTQwZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQV1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/ujAHTs+07gL9oQuJuYDNyaHhbcgwYVVp74JlQaH62/B63IbI6afWD
B5r8KdCFKdGfCldJkXOKn1OHo2EbI/fwLHS8XR2UtmnDrVQmIVbH831E2DnlMEy3
UOT4745OYE+KMnQGo5lFZl/mVyFeN+zR0uwc56IVJj/XkKjjlvoiQHEejumolwk+
5wEiOVoYC71ifSVjwp/H64CUjywNRwKtP4p3zrP2PkJH9J5Qp4a0CX8xFXtq3+m9
JJcpRv+yyiMTLCzEdf90GabKf0SM+jrt2zkXX4S2vhKXOvfduF8IrS4WH1sAnIeH
Uv5pNwcByX9GHh3KFGM2bHm4epYeI1Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:47:38 2025 by rpki-client