Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa
File: c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa (raw, json)
Hash identifier: Agrlj3kJg0/EpO5mWZIbXt0SWKTvHYJJ5O+t5AzGL0M=
Subject key identifier: DF:7E:E3:E4:E9:FD:DA:37:5F:1E:2F:A4:6D:AD:02:68:CA:89:71:6B
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F432858484EDABE69E476A3D14C7C5DE0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 0
IP address blocks: 157.133.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:be:69:e4:76:a3:d1:4c:7c:5d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=17f2e2e6-f11d-4bc1-97e2-b2397197baf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:0e:9b:ed:7a:76:3f:51:c3:a5:cd:0d:b9:
4c:fd:29:9f:67:9a:9c:33:c1:db:b1:35:5a:5e:af:
9e:35:eb:30:9a:53:7e:ac:84:eb:9f:e5:3b:52:95:
04:ff:ba:69:4c:e6:84:4b:a8:d9:7b:e7:6b:b4:11:
b9:6d:5d:1e:32:2d:2b:a4:ca:27:14:3f:1a:c9:08:
e1:79:22:1c:1b:ba:65:45:64:82:db:7c:7d:78:33:
d4:15:ac:cd:82:ac:db:3a:ce:f4:db:0a:71:cc:5b:
2e:fa:5a:dc:bf:93:de:f2:e2:8d:fd:9c:85:4a:ce:
0a:73:eb:6c:6e:b7:96:f8:2c:c5:cf:2f:9b:23:8a:
7f:ef:47:35:68:cd:0e:7d:2a:1b:70:86:bb:c8:1e:
1a:94:15:fa:4a:76:db:33:0e:b5:a5:03:f4:dd:92:
b3:f1:cf:96:84:85:f0:cb:dd:f4:34:f5:1c:7e:95:
1c:94:c5:b6:b4:5e:72:04:cd:55:42:ca:d9:dd:f3:
8b:f1:f9:07:7a:47:4c:7f:bd:d8:1a:4a:42:8b:d8:
a9:a9:56:82:99:57:88:7b:83:26:25:2e:d3:49:54:
80:59:c7:b5:af:18:48:43:51:52:90:79:da:53:10:
1e:ab:31:a5:cd:4e:23:17:06:ce:f6:46:39:57:99:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7E:E3:E4:E9:FD:DA:37:5F:1E:2F:A4:6D:AD:02:68:CA:89:71:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:57:a7:f1:a7:bf:26:7a:a0:29:67:e7:12:1d:93:ee:cd:5e:
8a:06:77:d8:b9:a2:53:8d:52:b4:4d:d0:cf:f9:5e:13:f5:52:
11:84:11:a9:8b:a0:5d:41:b9:14:7a:90:fb:92:9b:bb:e3:17:
f7:0c:88:72:7d:69:34:f1:d0:99:1d:db:36:6d:df:bf:82:35:
c6:d0:79:46:16:ba:71:00:f9:9c:4b:57:16:4d:25:9f:0a:25:
f5:ae:6b:ba:39:53:89:e2:d9:5e:56:78:79:f4:90:b0:17:5c:
d7:83:1d:76:7b:80:5b:5c:b4:8c:4c:5c:52:e4:29:80:ae:22:
35:22:0e:f1:f5:28:0c:90:cd:08:c2:96:66:04:a6:0d:e9:49:
c1:10:f4:d0:70:6d:1f:4d:01:3c:50:3c:6f:7e:80:8e:c8:5c:
69:a2:93:06:02:b6:d3:3f:65:93:9b:69:f9:02:ab:2b:d4:53:
c3:96:9f:8c:87:05:93:08:68:5a:cd:b9:4d:96:a5:6b:86:df:
0b:ad:b0:1c:1b:68:d5:de:f9:75:35:45:4c:73:39:d4:6e:48:
a5:ac:a8:ec:2e:92:f6:2e:f0:df:fc:a7:a9:6c:3c:cd:a9:b8:
1f:d8:59:f9:85:7d:9f:b1:c3:ee:6e:99:dd:b9:cd:9f:88:b0:
72:f8:a2:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2r5p5Haj0Ux8XeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
MTdmMmUyZTYtZjExZC00YmMxLTk3ZTItYjIzOTcxOTdiYWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL8Om+16dj9Rw6XNDblM/SmfZ5qcM8HbsTVa
Xq+eNeswmlN+rITrn+U7UpUE/7ppTOaES6jZe+drtBG5bV0eMi0rpMonFD8ayQjh
eSIcG7plRWSC23x9eDPUFazNgqzbOs702wpxzFsu+lrcv5Pe8uKN/ZyFSs4Kc+ts
breW+CzFzy+bI4p/70c1aM0OfSobcIa7yB4alBX6SnbbMw61pQP03ZKz8c+WhIXw
y930NPUcfpUclMW2tF5yBM1VQsrZ3fOL8fkHekdMf73YGkpCi9ipqVaCmVeIe4Mm
JS7TSVSAWce1rxhIQ1FSkHnaUxAeqzGlzU4jFwbO9kY5V5k5UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9+4+Tp/do3Xx4vpG2tAmjKiXFrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYzUzMWQ0MjktOWQ5ZC0z
ZTVlLThlZWYtZDk3NjY0OWYyY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5Xp/GnvyZ6oCln5xIdk+7NXooGd9i5olONUrRN0M/5XhP1UhGEEamL
oF1BuRR6kPuSm7vjF/cMiHJ9aTTx0Jkd2zZt37+CNcbQeUYWunEA+ZxLVxZNJZ8K
JfWua7o5U4ni2V5WeHn0kLAXXNeDHXZ7gFtctIxMXFLkKYCuIjUiDvH1KAyQzQjC
lmYEpg3pScEQ9NBwbR9NATxQPG9+gI7IXGmikwYCttM/ZZObafkCqyvUU8OWn4yH
BZMIaFrNuU2WpWuG3wutsBwbaNXe+XU1RUxzOdRuSKWsqOwukvYu8N/8p6lsPM2p
uB/YWfmFfZ+xw+5umd25zZ+IsHL4oiY=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:06 2025 by rpki-client