Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2bceb745-7b9c-357a-8f6d-71af9c14937b.roa
File: 2bceb745-7b9c-357a-8f6d-71af9c14937b.roa (raw, json)
Hash identifier: Vgm9rMnIzQB11kwXXrvVyhHilCUssmKAXmg+r3OSZrQ=
Subject key identifier: FD:72:86:9C:AA:02:07:E6:CF:B4:01:85:D1:4A:80:66:C1:13:F4:5A
Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial: 010D0C9F43285848EF6134343BE382ED7934CD00
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2bceb745-7b9c-357a-8f6d-71af9c14937b.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 40703
IP address blocks: 157.166.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:34:34:3b:e3:82:ed:79:34:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=be738895-449a-4a57-ae9f-0c0c44bb0e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:3b:27:bd:39:5b:3a:1a:f8:31:ce:44:77:
77:25:de:6d:6b:83:31:b1:94:b9:67:67:50:36:5e:
38:42:70:ef:da:bb:c2:a1:46:f8:1f:a9:22:59:29:
52:f5:9f:e8:61:d1:e6:1c:7d:a7:4b:19:12:19:98:
8a:c6:66:22:51:79:b3:70:29:c6:f8:49:d2:31:e9:
ca:1e:8a:fe:a2:b3:fc:11:11:82:f2:30:1b:69:d7:
5c:fa:94:5d:29:db:e4:59:85:3d:36:53:55:c3:e4:
a7:81:f6:b9:5b:40:95:5e:a5:94:b6:4c:5d:31:13:
c8:7a:e8:0e:d7:2a:25:20:70:21:75:35:26:b7:11:
26:60:e8:61:27:35:1e:af:7c:37:bf:07:60:ad:ac:
03:9b:db:a2:9d:f1:6f:2d:05:7c:d5:50:56:41:e0:
fb:0e:fe:3d:5c:b4:6f:ad:08:b9:48:0b:da:aa:db:
ef:72:45:04:9a:9d:b1:54:58:8a:90:b4:16:c1:69:
4b:5b:ea:34:8c:18:02:76:d0:b5:69:f1:c0:02:e9:
aa:4e:cd:e2:e5:4c:7f:2d:0d:b3:ff:44:16:5f:eb:
d1:6e:5d:13:f3:76:ad:90:47:08:d6:84:ae:43:8d:
c9:8a:62:fd:7c:34:d2:8e:e9:85:90:76:b6:c1:28:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:86:9C:AA:02:07:E6:CF:B4:01:85:D1:4A:80:66:C1:13:F4:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2bceb745-7b9c-357a-8f6d-71af9c14937b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
X509v3 Authority Key Identifier:
keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
sbgp-ipAddrBlock: critical
IPv4:
157.166.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:05:35:63:72:a5:fa:f3:0c:8d:70:d9:30:1a:b9:a0:39:d8:
0f:15:04:8e:5b:83:c5:c5:55:52:80:57:33:39:51:7c:7a:42:
35:b1:5e:5c:6b:f6:2c:a6:ea:5b:40:7a:16:70:38:62:92:61:
4e:c1:8e:50:9c:3d:cf:17:5f:68:4d:4c:a7:d3:32:08:03:25:
5e:16:3b:b1:60:65:bc:b4:f2:50:5b:d5:fb:76:28:27:ab:0a:
ff:55:c6:fd:6c:67:d1:32:9b:8a:5e:56:78:ce:df:aa:6a:3e:
74:1b:7c:0e:48:e0:f5:a4:02:35:b9:a0:1b:1c:ed:af:35:b1:
e4:e3:d9:52:05:bb:1a:18:af:f6:43:80:a5:b6:04:34:6f:e4:
96:f9:ec:d1:ea:cd:b5:7a:cf:a7:4e:4e:0b:c7:ed:3f:d0:ff:
80:dd:57:8d:cb:13:79:40:c1:e5:84:ff:23:cb:d5:aa:b8:21:
a2:38:d8:85:a2:bc:4d:37:db:a1:91:e9:aa:77:78:fb:7b:7e:
43:a1:ea:12:b2:fc:f9:eb:38:1c:e0:96:51:05:02:36:4e:61:
bb:6f:fc:d3:eb:aa:a3:09:37:02:4e:25:9e:03:05:25:4b:7a:
b4:22:9c:65:2c:54:4a:15:8a:fa:7a:50:e8:29:1c:6a:d3:ff:
9a:32:10:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTQ0O+OC7Xk0zQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi
OTU1MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YmU3Mzg4OTUtNDQ5YS00YTU3LWFlOWYtMGMwYzQ0YmIwZTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSg7J705Wzoa+DHORHd3Jd5ta4MxsZS5Z2dQ
Nl44QnDv2rvCoUb4H6kiWSlS9Z/oYdHmHH2nSxkSGZiKxmYiUXmzcCnG+EnSMenK
Hor+orP8ERGC8jAbaddc+pRdKdvkWYU9NlNVw+Sngfa5W0CVXqWUtkxdMRPIeugO
1yolIHAhdTUmtxEmYOhhJzUer3w3vwdgrawDm9uinfFvLQV81VBWQeD7Dv49XLRv
rQi5SAvaqtvvckUEmp2xVFiKkLQWwWlLW+o0jBgCdtC1afHAAumqTs3i5Ux/LQ2z
/0QWX+vRbl0T83atkEcI1oSuQ43JimL9fDTSjumFkHa2wSgALwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1yhpyqAgfmz7QBhdFKgGbBE/RaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz
NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMmJjZWI3NDUtN2I5Yy0z
NTdhLThmNmQtNzFhZjljMTQ5MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm
M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm
Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1
Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnaagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJgFNWNypfrzDI1w2TAauaA52A8VBI5bg8XFVVKAVzM5UXx6QjWxXlxr
9iym6ltAehZwOGKSYU7BjlCcPc8XX2hNTKfTMggDJV4WO7FgZby08lBb1ft2KCer
Cv9Vxv1sZ9Eym4peVnjO36pqPnQbfA5I4PWkAjW5oBsc7a81seTj2VIFuxoYr/ZD
gKW2BDRv5Jb57NHqzbV6z6dOTgvH7T/Q/4DdV43LE3lAweWE/yPL1aq4IaI42IWi
vE0326GR6ap3ePt7fkOh6hKy/PnrOBzgllEFAjZOYbtv/NPrqqMJNwJOJZ4DBSVL
erQinGUsVEoVivp6UOgpHGrT/5oyEO0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:31:10 2025 by rpki-client on console.sobornost.net