Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/05ff1344-8bcf-3dc8-a7bd-df5e47994d22.roa
File: 05ff1344-8bcf-3dc8-a7bd-df5e47994d22.roa (raw, json)
Hash identifier: UJqxGE9L+7V6CEgyG5rtMl0eym2hKvWd5LpCA17XdUM=
Subject key identifier: 11:0C:EC:73:6E:E2:AF:31:66:E1:11:ED:34:68:D3:35:6C:B8:2A:61
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F43285848E2D1073C7CFDD0E759826D00
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/05ff1344-8bcf-3dc8-a7bd-df5e47994d22.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 33442
IP address blocks: 157.235.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:07:3c:7c:fd:d0:e7:59:82:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c3c451e0-5f7e-4e78-a38b-c62cbd2afb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c7:81:8f:3d:ab:27:be:d5:87:69:3e:fc:e9:
aa:8b:a2:8f:3a:b1:43:0c:3a:61:c0:80:7b:ea:62:
e1:22:9a:50:41:e8:19:39:8d:cc:64:e2:ef:40:0f:
5a:39:bb:93:d6:90:25:59:c4:5e:da:36:89:33:15:
e3:df:f2:1f:90:49:9c:dd:41:66:4d:60:dd:ee:06:
f0:bc:1d:0c:49:0e:49:c9:89:a6:23:db:80:4e:7d:
51:f5:a3:15:89:fd:da:ca:90:5c:cc:4d:15:3e:26:
84:da:ab:f2:f7:39:be:ce:11:d8:e5:f9:e8:a6:89:
1e:eb:97:1a:6f:06:de:4e:72:4f:cf:17:f5:c1:9d:
cb:42:09:f7:19:02:5b:ce:8a:07:da:16:b0:4a:5e:
3f:60:c5:72:c6:0b:ae:6a:1d:01:39:ec:f6:6c:f9:
f7:84:de:58:2e:b0:63:b7:15:b2:a2:1d:c9:27:76:
0d:36:10:49:9f:e0:db:16:fa:b8:9a:f1:4f:df:b2:
b0:7a:b1:58:23:12:52:51:ff:3d:22:bf:a6:6d:ce:
1f:de:9e:6b:36:86:b2:16:17:ac:60:b8:c5:fb:7b:
44:be:2b:a0:76:b3:af:89:fd:aa:64:1e:a6:81:e4:
33:52:c5:cc:2b:4b:82:ef:2d:5a:db:b1:ec:05:42:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:EC:73:6E:E2:AF:31:66:E1:11:ED:34:68:D3:35:6C:B8:2A:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/05ff1344-8bcf-3dc8-a7bd-df5e47994d22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
157.235.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:e5:1b:76:c8:78:83:aa:cc:ed:d6:88:36:90:bd:05:bc:2d:
ab:d1:ca:f2:81:ad:42:b9:2d:c1:9b:98:8b:4d:ff:54:83:d7:
81:6d:0e:96:ed:ab:a2:3c:e7:b8:f7:66:52:cc:01:e6:80:5b:
30:60:e4:f8:1a:6c:cc:ea:af:c7:d5:fe:d9:b0:dc:97:99:cf:
1d:c3:ae:54:22:a7:89:d6:c2:e1:1c:3c:b8:87:0a:b9:5e:02:
cb:90:d9:32:a9:7f:60:d0:df:5a:c6:5f:9e:5a:ef:20:fa:8f:
17:e9:ae:49:f1:95:8c:f4:0f:e1:88:33:35:fd:b4:70:89:a9:
b7:bf:8e:11:21:cf:a5:10:dd:ba:52:a8:56:78:fd:f7:cc:bd:
2c:2b:50:52:ee:02:b5:14:0f:a6:6f:b8:fa:c5:f1:3f:6d:68:
b1:54:a9:ce:df:3a:78:97:42:f2:44:4f:d2:63:69:e6:27:59:
84:5c:63:a8:bd:de:c0:74:50:dc:3d:4c:92:2f:2d:28:05:92:
0c:89:00:35:be:6e:94:0f:0d:9b:3c:cd:30:51:aa:25:24:5d:
56:70:8f:2f:5c:45:30:db:2f:ba:3b:a1:ce:6b:b1:da:f3:e0:
15:24:b6:56:7f:ce:d0:ca:4e:01:5d:a8:44:b3:db:39:4a:f6:
8f:83:7f:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Qc8fP3Q51mCbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy
ZTA2MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YzNjNDUxZTAtNWY3ZS00ZTc4LWEzOGItYzYyY2JkMmFmYjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ceBjz2rJ77Vh2k+/Omqi6KPOrFDDDphwIB7
6mLhIppQQegZOY3MZOLvQA9aObuT1pAlWcRe2jaJMxXj3/IfkEmc3UFmTWDd7gbw
vB0MSQ5JyYmmI9uATn1R9aMVif3aypBczE0VPiaE2qvy9zm+zhHY5fnopoke65ca
bwbeTnJPzxf1wZ3LQgn3GQJbzooH2hawSl4/YMVyxguuah0BOez2bPn3hN5YLrBj
txWyoh3JJ3YNNhBJn+DbFvq4mvFP37KwerFYIxJSUf89Ir+mbc4f3p5rNoayFhes
YLjF+3tEviugdrOvif2qZB6mgeQzUsXMK0uC7y1a27HsBUKGMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBEM7HNu4q8xZuER7TRo0zVsuCphMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk
NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMDVmZjEzNDQtOGJjZi0z
ZGM4LWE3YmQtZGY1ZTQ3OTk0ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0
YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm
MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0
OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnetNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHflG3bIeIOqzO3WiDaQvQW8LavRyvKBrUK5LcGbmItN/1SD14FtDpbt
q6I857j3ZlLMAeaAWzBg5PgabMzqr8fV/tmw3JeZzx3DrlQip4nWwuEcPLiHCrle
AsuQ2TKpf2DQ31rGX55a7yD6jxfprknxlYz0D+GIMzX9tHCJqbe/jhEhz6UQ3bpS
qFZ4/ffMvSwrUFLuArUUD6ZvuPrF8T9taLFUqc7fOniXQvJET9JjaeYnWYRcY6i9
3sB0UNw9TJIvLSgFkgyJADW+bpQPDZs8zTBRqiUkXVZwjy9cRTDbL7o7oc5rsdrz
4BUktlZ/ztDKTgFdqESz2zlK9o+Df1A=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:05:34 2025 by rpki-client