Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa
File: a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa (raw, json)
Hash identifier: IgejdjDUDgbEB+GgKHkBxgwX12d29o/clVDIyKOTS2k=
Subject key identifier: 1A:FC:82:59:1F:95:21:B1:78:40:F9:FD:7F:DC:B9:56:24:48:8C:E4
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F432858496E498C2E8082043F0A18AC00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa
Signing time: Sun 06 Apr 2025 01:00:47 +0000
ROA not before: Sun 06 Apr 2025 01:00:47 +0000
ROA not after: Sat 05 Jul 2025 01:00:47 +0000
asID: 152700
IP address blocks: 72.14.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6e:49:8c:2e:80:82:04:3f:0a:18:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Apr 6 01:00:47 2025 GMT
Not After : Jul 5 01:00:47 2025 GMT
Subject: CN=cd80e01a-8a49-41b2-a31f-37dbf53f9d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:d2:e8:76:3a:c0:48:99:33:bf:d0:a0:03:
f0:88:48:69:e8:4b:06:7f:30:fc:53:d7:a8:fc:3e:
00:a3:44:70:a4:a8:fc:fd:b8:ea:cf:eb:04:69:4d:
aa:d9:f5:07:8b:b2:a2:a8:8e:4f:8a:53:eb:a8:77:
cf:6f:f8:33:b6:4a:19:fe:36:14:66:35:48:a0:b9:
84:a6:d5:6f:44:d5:cb:5a:ae:21:ba:5b:b4:72:ab:
af:e0:34:51:7b:95:e7:f5:01:8e:0b:dd:48:59:da:
47:8f:88:19:ae:b7:80:dd:ae:71:29:6c:ea:95:42:
21:53:7d:9b:06:d5:c5:e0:37:a0:b3:53:66:a6:31:
f1:51:f3:b1:50:dd:dd:66:f4:08:4d:54:3d:62:f8:
b9:38:9a:8b:59:e0:ee:0a:ec:14:ba:19:49:ea:7d:
dd:c4:6a:2c:d1:31:4d:63:51:34:be:86:12:a3:aa:
16:08:2d:a2:54:03:37:3e:45:ac:c6:fe:65:52:e1:
2f:35:12:00:d7:cf:1c:ba:17:49:56:aa:03:d8:51:
50:33:7c:e5:34:07:88:fa:78:8f:6f:48:31:f4:6e:
f7:3c:ed:44:c9:a1:85:55:58:b3:e7:c2:45:7d:08:
95:1d:19:d4:2b:47:d3:0a:ec:96:6d:ec:79:1e:3b:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FC:82:59:1F:95:21:B1:78:40:F9:FD:7F:DC:B9:56:24:48:8C:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:9e:fd:28:7f:0c:37:f8:58:b6:c1:24:bb:91:d0:11:27:16:
ce:22:9b:cd:fa:70:52:26:8e:ae:8f:bc:23:9c:a6:25:53:f6:
98:2c:1a:1c:9a:40:cd:d4:17:a9:42:64:48:35:5d:56:60:a0:
d2:6c:df:02:a8:e5:66:ed:3c:91:6e:81:86:9f:8c:35:32:f4:
25:6b:9b:cd:d7:81:7c:03:b4:ed:15:6f:09:63:59:59:1f:b7:
ed:de:e5:7d:e0:54:d9:00:5d:7a:c4:ac:0a:12:a4:89:95:15:
a0:41:0d:a8:b0:16:81:a0:36:48:ff:71:1c:d8:18:ef:20:88:
ce:af:69:c3:bf:8a:8d:5b:e4:ec:a7:4b:6e:74:fb:14:6a:b7:
c3:6a:a8:00:58:fa:3f:d6:84:1e:59:f5:05:b0:8c:c8:74:e7:
e2:8d:7a:9a:f5:78:19:a4:cf:d7:bc:56:af:b5:7e:ed:ad:6f:
78:eb:72:95:5c:79:d0:8e:7d:2f:f0:34:a3:bf:55:7e:70:0b:
77:cd:af:75:00:7b:5e:23:89:be:51:f4:c6:ac:5f:48:fc:e7:
12:24:a7:19:0e:2b:7c:1a:2c:bc:3d:2a:9b:99:50:1e:6e:d6:
f5:da:b0:e6:c0:bf:eb:37:be:61:3b:9c:cc:9d:de:e8:42:bf:
33:08:e2:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYwugIIEPwoYrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk
Y2Q4MGUwMWEtOGE0OS00MWIyLWEzMWYtMzdkYmY1M2Y5ZDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDLS6HY6wEiZM7/QoAPwiEhp6EsGfzD8U9eo
/D4Ao0RwpKj8/bjqz+sEaU2q2fUHi7KiqI5PilPrqHfPb/gztkoZ/jYUZjVIoLmE
ptVvRNXLWq4hulu0cquv4DRRe5Xn9QGOC91IWdpHj4gZrreA3a5xKWzqlUIhU32b
BtXF4Degs1NmpjHxUfOxUN3dZvQITVQ9Yvi5OJqLWeDuCuwUuhlJ6n3dxGos0TFN
Y1E0voYSo6oWCC2iVAM3PkWsxv5lUuEvNRIA188cuhdJVqoD2FFQM3zlNAeI+niP
b0gx9G73PO1EyaGFVViz58JFfQiVHRnUK0fTCuyWbex5HjtI1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBr8glkflSGxeED5/X/cuVYkSIzkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYTA1ZmRlNmMtZDJmZi0z
NzAxLTkyNTItZGRhOGRhNWI3OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqe/Sh/DDf4WLbBJLuR0BEnFs4im836cFImjq6PvCOcpiVT9pgsGhya
QM3UF6lCZEg1XVZgoNJs3wKo5WbtPJFugYafjDUy9CVrm83XgXwDtO0VbwljWVkf
t+3e5X3gVNkAXXrErAoSpImVFaBBDaiwFoGgNkj/cRzYGO8giM6vacO/io1b5Oyn
S250+xRqt8NqqABY+j/WhB5Z9QWwjMh05+KNepr1eBmkz9e8Vq+1fu2tb3jrcpVc
edCOfS/wNKO/VX5wC3fNr3UAe14jib5R9MasX0j85xIkpxkOK3waLLw9KpuZUB5u
1vXasObAv+s3vmE7nMyd3uhCvzMI4mk=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:40 2025 by rpki-client on console.sobornost.net