Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
File: 6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa (raw, json)
Hash identifier: F6ADguCiPDjv1fG+OAgSb21ihikAokw5jFFRzUFyo0s=
Subject key identifier: 76:FC:7B:3F:4C:8F:1A:99:F8:4F:10:90:F4:81:73:3A:6E:1E:B1:66
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858496CE44568CC6D258952AF4780
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 33442
IP address blocks: 149.23.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:45:68:cc:6d:25:89:52:af:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=b2bb0105-eef2-442a-98d4-bdb7196177f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:9c:9b:42:16:5f:1e:ee:f3:d5:20:bc:13:
2e:7a:19:93:a4:18:d3:4d:d7:ec:6b:b9:13:6f:ef:
4c:52:a7:1e:28:1c:1b:07:34:ac:7e:63:c0:d8:34:
34:b1:88:ff:0c:72:0b:f6:bc:26:f2:a4:98:01:15:
28:a3:c0:71:a4:b0:53:37:f4:f6:c2:2a:0e:50:fa:
18:af:3d:68:1b:64:30:2e:2e:ea:96:50:3e:cc:7d:
1d:88:47:4c:a1:c6:a6:b6:16:a1:85:a2:d4:dc:db:
5d:3c:5e:09:c3:20:29:bc:d7:33:83:d4:d4:db:ca:
b0:17:81:f9:d3:c9:be:7f:55:69:95:ed:58:66:3d:
e3:e6:68:09:23:3d:81:1f:0e:ad:81:77:85:1a:c1:
0c:c4:ce:c0:07:8d:12:6a:56:46:15:f4:9d:32:62:
4f:0b:bb:20:9c:2e:55:0d:07:92:b4:69:e8:14:29:
2d:e6:5b:ad:eb:30:c0:64:2b:fb:f4:24:86:52:3a:
30:72:47:af:6d:c1:50:3e:3c:27:e1:c1:46:30:15:
3e:8b:09:34:28:9c:90:4d:e0:79:c4:d8:42:91:3c:
53:9c:f8:31:48:39:d1:b6:d7:6e:e0:9c:bf:80:51:
5c:6f:23:c4:8d:2b:66:64:49:7b:61:42:36:e9:b9:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:7B:3F:4C:8F:1A:99:F8:4F:10:90:F4:81:73:3A:6E:1E:B1:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:09:00:02:2e:8c:5d:6e:5d:b1:37:8e:7e:8e:84:a2:87:3f:
b4:97:3b:51:07:65:a2:ee:39:76:f3:d0:94:5a:38:c0:1f:ba:
65:75:27:79:4a:06:76:81:66:2c:8b:78:b4:d4:1b:2c:e4:85:
d4:12:f8:c5:ac:49:43:dd:80:38:de:87:b7:d8:bd:fb:e8:44:
60:7c:ce:d1:7b:bd:a5:ab:a1:87:4f:df:96:ef:bf:be:b2:00:
81:af:bd:1e:ed:5c:08:5d:dc:c0:a8:87:78:19:85:4c:23:a1:
13:c4:03:97:7e:26:49:0d:e7:3d:ff:2e:4b:c1:04:50:b9:69:
57:46:73:36:4b:86:79:92:e9:8b:6e:1a:46:84:cb:c0:a2:21:
10:53:a4:0b:c4:ad:56:13:ff:0a:80:09:c6:53:37:81:be:1e:
39:bd:30:6e:3e:2b:41:b6:2f:1b:fe:1b:d4:25:36:3b:bf:ba:
3b:d6:1c:04:cd:69:ca:8f:05:6a:ec:0f:f7:31:c9:0f:75:ea:
aa:39:26:72:28:2e:83:e5:ef:a0:76:4d:18:39:cf:07:ef:f3:
a7:05:88:9c:c6:2a:e8:9d:53:36:8b:8a:95:9c:7d:22:37:1e:
6c:f0:ca:00:e8:89:e6:98:8b:dc:4d:25:5e:c4:fa:3e:f7:98:
25:b7:34:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5EVozG0liVKvR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy
ZTA2MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
YjJiYjAxMDUtZWVmMi00NDJhLTk4ZDQtYmRiNzE5NjE3N2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0Scm0IWXx7u89UgvBMuehmTpBjTTdfsa7kT
b+9MUqceKBwbBzSsfmPA2DQ0sYj/DHIL9rwm8qSYARUoo8BxpLBTN/T2wioOUPoY
rz1oG2QwLi7qllA+zH0diEdMocamthahhaLU3NtdPF4JwyApvNczg9TU28qwF4H5
08m+f1Vple1YZj3j5mgJIz2BHw6tgXeFGsEMxM7AB40SalZGFfSdMmJPC7sgnC5V
DQeStGnoFCkt5lut6zDAZCv79CSGUjowckevbcFQPjwn4cFGMBU+iwk0KJyQTeB5
xNhCkTxTnPgxSDnRttdu4Jy/gFFcbyPEjStmZEl7YUI26blrVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHb8ez9MjxqZ+E8QkPSBczpuHrFmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk
NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNmQ3N2VhNGQtNDFhYi0z
ZDZiLWEyYmItMGUzMWE5OTdlMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0
YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm
MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0
OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcJAAIujF1uXbE3jn6OhKKHP7SXO1EHZaLuOXbz0JRaOMAfumV1J3lK
BnaBZiyLeLTUGyzkhdQS+MWsSUPdgDjeh7fYvfvoRGB8ztF7vaWroYdP35bvv76y
AIGvvR7tXAhd3MCoh3gZhUwjoRPEA5d+JkkN5z3/LkvBBFC5aVdGczZLhnmS6Ytu
GkaEy8CiIRBTpAvErVYT/wqACcZTN4G+Hjm9MG4+K0G2Lxv+G9QlNju/ujvWHATN
acqPBWrsD/cxyQ916qo5JnIoLoPl76B2TRg5zwfv86cFiJzGKuidUzaLipWcfSI3
HmzwygDoieaYi9xNJV7E+j73mCW3NI8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:49 2025 by rpki-client on console.sobornost.net