Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/741ee977-8053-35a0-a477-50c699027a79.roa
File: 741ee977-8053-35a0-a477-50c699027a79.roa (raw, json)
Hash identifier: EdYEe2+mcv4VRHFGbTOM4XcPY6+0h65YPOZB3mDDmuo=
Subject key identifier: 14:03:CB:D6:C4:4E:4C:6D:9D:DC:6E:F5:61:0E:8B:A8:6F:D3:B2:7D
Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial: 010D0C9F432858491511562D47D9CAD27582AE80
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/741ee977-8053-35a0-a477-50c699027a79.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 393559
IP address blocks: 157.96.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:56:2d:47:d9:ca:d2:75:82:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=33f7658e-5fe1-4624-8ec0-e42af05a90ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:cd:5d:d2:11:31:d4:51:0f:83:59:a0:72:
1d:67:8c:32:5b:f2:37:6e:ae:0e:c3:8f:24:72:fa:
db:f6:91:ba:7c:3c:86:f1:d9:4e:40:34:3f:12:f8:
db:9f:37:ce:0f:c3:cc:4e:db:31:6f:22:2f:c5:d1:
84:95:53:e6:60:54:37:7d:c9:66:1b:29:f8:60:ce:
e2:57:a6:c7:d0:c7:6d:a3:b3:f3:95:17:9c:f1:ef:
84:ed:3b:d6:38:55:7c:10:9d:a0:38:8a:c8:1f:53:
2c:0e:57:5f:3e:c7:d0:e3:22:93:e9:52:e3:a3:01:
46:b2:81:c3:3f:ae:32:c1:93:3e:0d:99:87:75:b8:
f9:a7:02:a8:58:38:86:47:98:85:63:e7:ab:cf:65:
5c:b9:97:51:46:22:5d:48:50:ca:9c:14:0d:29:ac:
55:b5:48:07:80:bc:b8:41:99:09:3d:8a:e6:e5:2b:
fa:94:d9:57:c6:c9:26:41:de:cd:5c:a9:6e:94:fc:
b8:da:f5:ff:c7:4c:29:72:5e:88:91:64:86:ed:a5:
9e:39:43:b6:6b:5f:58:34:ce:d7:54:b7:33:75:58:
46:fd:bb:a6:31:85:7a:76:94:c1:a2:09:14:4d:37:
1b:75:ab:17:fc:fe:8b:3c:89:12:c1:b6:de:35:c0:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:03:CB:D6:C4:4E:4C:6D:9D:DC:6E:F5:61:0E:8B:A8:6F:D3:B2:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/741ee977-8053-35a0-a477-50c699027a79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
X509v3 Authority Key Identifier:
keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
sbgp-ipAddrBlock: critical
IPv4:
157.96.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:9c:ce:ba:99:27:b7:b6:4d:b4:20:95:97:9f:c1:06:dd:82:
df:7a:52:b2:0e:95:a5:26:4f:9a:f2:2d:cd:ae:10:fe:cf:e5:
8b:36:a1:f1:b7:33:9b:0e:06:85:66:20:92:eb:0b:86:2b:57:
5f:4c:2b:5a:88:b2:d5:4f:26:28:7a:63:87:e7:43:f9:8f:e0:
d2:bf:dc:8a:0e:da:aa:97:b0:65:48:ad:cd:84:08:12:7b:cc:
8b:60:d4:f6:d4:fb:72:50:f4:19:48:e5:49:8e:e5:57:57:53:
08:21:58:8e:67:4f:cd:14:20:29:6f:1f:74:5e:5e:7c:56:63:
32:bf:ee:e2:ef:64:69:86:76:7a:84:75:4c:53:51:0d:43:bf:
52:9f:fc:66:12:09:28:76:1e:27:a9:25:53:f7:ae:b3:4a:d9:
d1:e7:13:a3:d6:86:f9:77:46:d2:08:de:73:5c:dc:c0:5f:ac:
cd:58:4a:ee:dc:f2:e0:a9:03:16:1c:4e:17:28:ce:d7:17:54:
80:72:35:79:60:fa:f2:4a:93:a4:71:5a:be:88:65:50:64:e3:
81:61:a0:5e:0c:59:54:da:82:78:ae:ca:d3:8b:0a:4c:23:b8:
38:85:ad:f1:ef:6d:e9:39:43:a9:4d:f5:b4:9b:2b:e4:07:f0:
76:ca:b4:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEVYtR9nK0nWCroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw
YWVlMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk
MzNmNzY1OGUtNWZlMS00NjI0LThlYzAtZTQyYWYwNWE5MGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjXNXdIRMdRRD4NZoHIdZ4wyW/I3bq4Ow48k
cvrb9pG6fDyG8dlOQDQ/EvjbnzfOD8PMTtsxbyIvxdGElVPmYFQ3fclmGyn4YM7i
V6bH0Mdto7PzlRec8e+E7TvWOFV8EJ2gOIrIH1MsDldfPsfQ4yKT6VLjowFGsoHD
P64ywZM+DZmHdbj5pwKoWDiGR5iFY+erz2VcuZdRRiJdSFDKnBQNKaxVtUgHgLy4
QZkJPYrm5Sv6lNlXxskmQd7NXKlulPy42vX/x0wpcl6IkWSG7aWeOUO2a19YNM7X
VLczdVhG/bumMYV6dpTBogkUTTcbdasX/P6LPIkSwbbeNcBICQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQDy9bETkxtndxu9WEOi6hv07J9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl
OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvNzQxZWU5NzctODA1My0z
NWEwLWE0NzctNTBjNjk5MDI3YTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0
M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy
MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2
ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnWAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiczrqZJ7e2TbQglZefwQbdgt96UrIOlaUmT5ryLc2uEP7P5Ys2ofG3
M5sOBoVmIJLrC4YrV19MK1qIstVPJih6Y4fnQ/mP4NK/3IoO2qqXsGVIrc2ECBJ7
zItg1PbU+3JQ9BlI5UmO5VdXUwghWI5nT80UIClvH3ReXnxWYzK/7uLvZGmGdnqE
dUxTUQ1Dv1Kf/GYSCSh2HiepJVP3rrNK2dHnE6PWhvl3RtII3nNc3MBfrM1YSu7c
8uCpAxYcThcoztcXVIByNXlg+vJKk6RxWr6IZVBk44FhoF4MWVTagniuytOLCkwj
uDiFrfHvbek5Q6lN9bSbK+QH8HbKtKs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:08 2025 by rpki-client