Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
File: 20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa (raw, json)
Hash identifier: CNDK1rv3K4flHalJvLM1hFm35hfl9VBNhOeAqe/oK+c=
Subject key identifier: 04:B8:38:FA:28:55:2A:0A:29:CF:AE:CF:F4:C2:39:AD:10:90:C6:01
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584819CFE1637B1EDF9C4CD3FB60
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 54994
IP address blocks: 157.185.131.0/24 maxlen: 24
157.185.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e1:63:7b:1e:df:9c:4c:d3:fb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=51dcd478-677c-40e6-a5ac-f8c2962383eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:af:ef:26:76:84:09:fc:2c:f5:c3:f3:da:
9f:7d:6b:8e:f9:0f:e9:2c:e2:ae:68:22:b1:4d:f3:
bc:d8:39:f6:73:39:8b:03:3a:46:3a:87:53:ff:67:
37:32:69:f4:7c:36:9b:1e:73:93:07:d4:f4:e3:b8:
9c:84:05:84:ef:ea:db:d2:a5:fe:ee:ff:09:19:66:
78:ff:7d:5f:40:98:6d:3b:54:71:f6:1a:e8:27:55:
bf:75:9d:69:55:dc:e6:06:a2:ae:eb:d1:05:27:81:
1d:54:f3:af:57:8f:53:70:9b:53:30:58:94:b2:86:
f9:8e:7f:42:47:58:23:32:44:ec:bc:c6:bd:fc:08:
a0:2d:96:57:0b:a9:da:c6:d9:26:4c:82:9e:3f:59:
23:2b:19:06:ee:5f:28:32:04:58:0c:e3:01:5d:11:
be:4b:2e:e6:fb:83:16:44:23:99:59:9b:5c:7b:97:
59:ce:d9:be:aa:f4:e2:8a:0b:4f:cb:42:9a:c7:55:
8a:96:09:40:3f:ac:73:03:4b:1c:3f:d6:89:52:59:
57:d8:a9:75:4d:0c:f9:31:45:4b:eb:51:e5:db:a2:
82:35:30:15:6b:a4:96:82:bc:f4:5c:66:69:bf:08:
ca:b7:b4:e5:79:a8:2d:7e:fe:cd:55:91:5b:92:ca:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B8:38:FA:28:55:2A:0A:29:CF:AE:CF:F4:C2:39:AD:10:90:C6:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.185.131.0-157.185.132.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:56:a4:d6:2b:67:a2:a7:e7:e8:c9:e0:f3:36:31:2a:1f:9b:
e4:6f:a6:0b:b2:6b:f7:0b:09:b4:b0:20:a9:f4:db:c2:f5:f8:
68:c3:da:e1:8f:d1:d5:bc:77:23:6c:9a:c6:e2:ea:e0:21:7e:
37:92:17:84:59:69:d5:e7:fb:55:7b:a9:ba:38:fd:86:32:05:
45:ac:49:25:03:b8:09:e2:8e:2e:f2:60:b7:88:3f:96:5e:db:
24:b0:16:9f:11:87:9c:d0:7c:5c:c8:1e:2e:87:4e:61:f2:c3:
c7:3c:48:a5:06:08:1e:19:c0:18:7d:bb:5b:8c:4a:b2:07:8a:
5d:a0:1e:5d:b7:4b:08:9f:79:82:7c:b4:9f:da:9f:9e:70:88:
45:39:91:85:f1:8d:1d:64:15:31:ed:50:64:29:16:6e:6a:e0:
33:c7:3c:55:7d:1e:7b:b3:6e:c2:6e:b1:8d:67:85:38:20:e8:
f4:20:8b:fc:e7:41:27:ce:02:fb:03:27:6b:85:04:82:59:95:
30:f1:98:fa:ac:30:b5:fa:9b:42:8f:cc:54:b2:a2:57:ec:01:
49:b7:5f:00:0d:4f:31:f7:1a:43:b2:72:56:5f:0a:41:4a:48:
58:eb:23:d4:e6:77:da:90:77:bb:1c:2b:5f:82:b7:85:90:8a:
96:25:a4:84
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgZz+Fjex7fnEzT+2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
NTFkY2Q0NzgtNjc3Yy00MGU2LWE1YWMtZjhjMjk2MjM4M2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvSv7yZ2hAn8LPXD89qffWuO+Q/pLOKuaCKx
TfO82Dn2czmLAzpGOodT/2c3Mmn0fDabHnOTB9T047ichAWE7+rb0qX+7v8JGWZ4
/31fQJhtO1Rx9hroJ1W/dZ1pVdzmBqKu69EFJ4EdVPOvV49TcJtTMFiUsob5jn9C
R1gjMkTsvMa9/AigLZZXC6naxtkmTIKeP1kjKxkG7l8oMgRYDOMBXRG+Sy7m+4MW
RCOZWZtce5dZztm+qvTiigtPy0Kax1WKlglAP6xzA0scP9aJUllX2Kl1TQz5MUVL
61Hl26KCNTAVa6SWgrz0XGZpvwjKt7Tleagtfv7NVZFbksrD0QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFAS4OPooVSoKKc+uz/TCOa0QkMYBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjBlYjlhOGQtYmFiNS0z
ZTVjLWEwMzYtNzlhODM0OWFiODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACduYMD
BACduYQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAIlak1itnoqfn6Mng8zYxKh+b5G+mC7Jr9wsJtLAgqfTb
wvX4aMPa4Y/R1bx3I2yaxuLq4CF+N5IXhFlp1ef7VXupujj9hjIFRaxJJQO4CeKO
LvJgt4g/ll7bJLAWnxGHnNB8XMgeLodOYfLDxzxIpQYIHhnAGH27W4xKsgeKXaAe
XbdLCJ95gny0n9qfnnCIRTmRhfGNHWQVMe1QZCkWbmrgM8c8VX0ee7Nuwm6xjWeF
OCDo9CCL/OdBJ84C+wMna4UEglmVMPGY+qwwtfqbQo/MVLKiV+wBSbdfAA1PMfca
Q7JyVl8KQUpIWOsj1OZ32pB3uxwrX4K3hZCKliWkhA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:40:29 2025 by rpki-client