Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa
File: bfe8432c-0a39-369f-abd1-923404f53a2f.roa (raw, json)
Hash identifier: g/J1NvB7r1DrAQXYJvCCoI6Cv0Xww0noy5RSnR+nBQg=
Subject key identifier: 37:6F:F5:CD:BB:7A:54:FC:B1:95:D0:95:47:40:C4:F0:9B:9C:B4:7D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57FA23D53E40372DC225F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa
Signing time: Tue 04 Feb 2025 13:58:18 +0000
ROA not before: Tue 04 Feb 2025 13:58:18 +0000
ROA not after: Mon 05 May 2025 12:58:18 +0000
asID: 30036
IP address blocks: 173.28.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7f:a2:3d:53:e4:03:72:dc:22:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:58:18 2025 GMT
Not After : May 5 12:58:18 2025 GMT
Subject: CN=3735a52f-2804-45f8-ad38-b63cb9738947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:70:78:f0:00:01:27:6f:34:4d:01:f5:f0:
be:ef:2b:5b:d9:91:19:fb:2f:59:ec:a8:bd:d3:37:
af:af:1e:64:9c:99:44:84:a8:1d:93:eb:d2:d3:ea:
44:3d:b8:5c:9a:ba:24:f9:77:09:07:8a:7a:fc:17:
cd:76:81:f0:4b:99:4c:a9:40:16:1f:1f:b5:4c:62:
a9:0a:a3:38:b6:d1:26:19:d7:30:f6:f4:cf:73:84:
da:01:ad:3c:00:31:ed:81:1f:c8:d4:82:b8:ab:3f:
cf:e2:9d:cd:6c:4e:60:87:86:7a:d2:ad:47:ab:e0:
93:b8:62:1a:34:b4:49:7d:f8:f8:37:8b:c9:0b:4c:
35:a3:98:f4:1b:da:9e:d4:1a:d8:24:b9:52:27:c8:
37:54:79:fa:8f:57:31:93:d8:b1:a7:8d:4a:f5:7b:
9c:29:7e:6a:fd:c0:b3:75:5e:a9:54:48:57:97:eb:
50:e8:3e:92:50:c6:bc:31:fa:99:43:be:d5:8a:20:
cf:48:1f:aa:0c:8c:9a:18:05:f3:70:4a:09:a7:0b:
25:8d:96:d7:dc:09:41:bf:b9:ca:da:f9:3a:d2:e7:
1b:c2:b6:70:63:21:0c:ec:7b:77:cc:02:8f:c4:8b:
fb:43:bd:1b:bc:9d:01:4c:01:78:4d:a9:29:19:32:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:F5:CD:BB:7A:54:FC:B1:95:D0:95:47:40:C4:F0:9B:9C:B4:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:1a:90:c9:c2:e2:57:a8:53:8d:4f:fe:15:06:0c:6f:e7:63:
2c:99:16:b9:b6:e9:2f:99:c7:73:38:fb:fd:c4:34:4d:25:da:
ad:00:be:e5:b5:87:ec:b6:43:8d:a6:45:b2:b4:77:c8:a2:74:
fb:cf:06:a8:30:9d:01:72:bd:d9:16:ce:fa:90:be:cb:8f:2c:
dc:4c:b6:4e:72:cc:e6:fe:e2:93:6a:5d:43:af:07:16:ed:8f:
e3:e4:dc:44:34:60:6c:ef:dd:6c:38:3e:90:d0:2c:6e:80:27:
9f:59:1c:d8:21:98:b3:e3:62:9a:ba:d7:2b:8d:08:82:4a:7f:
e3:e1:fe:ec:3f:7c:b5:fa:2f:c1:86:34:1f:8b:cc:b0:d8:3d:
b2:03:df:ae:f0:d9:f6:7d:55:2d:30:7e:e0:b4:91:2c:1e:a6:
bc:c5:f0:0e:1b:12:26:b9:dd:29:fe:1d:2d:e6:87:a5:75:be:
36:7f:8f:b5:8e:2b:05:e3:e2:66:c0:c2:9d:90:a5:b9:04:76:
a0:b6:7a:20:85:42:08:56:46:c1:7a:04:4a:48:fb:06:5e:01:
3d:f5:10:0b:5e:4c:cb:9a:63:7f:a3:8b:50:97:98:85:93:c8:
ee:a6:9e:a9:12:e3:a9:b0:e4:34:14:9a:93:56:16:be:b3:25:
e0:7f:0c:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFf6I9U+QDctwiX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNTgxOFoXDTI1MDUwNTEyNTgxOFowLzEtMCsGA1UEAxMk
MzczNWE1MmYtMjgwNC00NWY4LWFkMzgtYjYzY2I5NzM4OTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUJwePAAASdvNE0B9fC+7ytb2ZEZ+y9Z7Ki9
0zevrx5knJlEhKgdk+vS0+pEPbhcmrok+XcJB4p6/BfNdoHwS5lMqUAWHx+1TGKp
CqM4ttEmGdcw9vTPc4TaAa08ADHtgR/I1IK4qz/P4p3NbE5gh4Z60q1Hq+CTuGIa
NLRJffj4N4vJC0w1o5j0G9qe1BrYJLlSJ8g3VHn6j1cxk9ixp41K9XucKX5q/cCz
dV6pVEhXl+tQ6D6SUMa8MfqZQ77ViiDPSB+qDIyaGAXzcEoJpwsljZbX3AlBv7nK
2vk60ucbwrZwYyEM7Ht3zAKPxIv7Q70bvJ0BTAF4TakpGTJOvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdv9c27elT8sZXQlUdAxPCbnLR9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlODQzMmMtMGEzOS0z
NjlmLWFiZDEtOTIzNDA0ZjUzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4akMnC4leoU41P/hUGDG/nYyyZFrm26S+Zx3M4+/3ENE0l2q0AvuW1
h+y2Q42mRbK0d8iidPvPBqgwnQFyvdkWzvqQvsuPLNxMtk5yzOb+4pNqXUOvBxbt
j+Pk3EQ0YGzv3Ww4PpDQLG6AJ59ZHNghmLPjYpq61yuNCIJKf+Ph/uw/fLX6L8GG
NB+LzLDYPbID367w2fZ9VS0wfuC0kSweprzF8A4bEia53Sn+HS3mh6V1vjZ/j7WO
KwXj4mbAwp2QpbkEdqC2eiCFQghWRsF6BEpI+wZeAT31EAteTMuaY3+ji1CXmIWT
yO6mnqkS46mw5DQUmpNWFr6zJeB/DBE=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:20 2025 by rpki-client on console.sobornost.net