Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/967f0d87-1b49-3fe7-b66f-3c7f97e1432d.roa
File: 967f0d87-1b49-3fe7-b66f-3c7f97e1432d.roa (raw, json)
Hash identifier: ee5xYyHiZW1Rbq+djyoVymz+AFhhBB9nWq6g6DNqTGk=
Subject key identifier: CB:57:B1:55:DB:13:8D:F9:8D:4A:4E:77:70:B1:77:35:1E:D9:05:01
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F432858496CE455356BE666F355FEA580
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/967f0d87-1b49-3fe7-b66f-3c7f97e1432d.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 54538
IP address blocks: 147.185.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:55:35:6b:e6:66:f3:55:fe:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=5dc532f7-09d9-4e6b-b116-fa0a7b5c73a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:97:c9:9e:c3:92:b2:98:a0:90:03:42:5e:
be:97:1c:d1:25:96:a4:95:d1:9c:bf:1f:f1:19:58:
3f:d4:2b:06:a5:8a:35:f4:8f:2e:61:46:6a:ae:11:
78:b5:d3:97:ca:5d:47:46:f4:4e:bc:a9:b0:c5:ce:
8c:5a:05:e9:8b:ad:2e:9a:f1:30:81:88:3b:ce:ea:
66:de:50:b3:16:fe:ca:98:58:c0:0e:9f:0b:32:6c:
6e:16:db:a3:06:1e:ee:49:0d:a9:42:03:d9:57:72:
cb:ee:b6:c8:a4:07:a5:98:9d:19:59:21:74:29:6c:
08:9a:d7:56:85:e1:cb:0f:e0:fc:f3:c3:09:35:b7:
d2:e0:fb:57:5a:d7:39:62:0a:9d:bd:eb:77:b4:07:
8c:07:48:77:b3:c7:7f:59:cb:2e:7f:8a:d8:04:2d:
fa:11:a7:2c:ef:d2:09:bc:ba:7e:94:0e:b6:a1:05:
87:93:51:58:70:04:2b:84:88:6e:a0:d8:de:32:26:
05:b2:7e:06:e8:86:1f:93:6b:7c:65:cc:a3:83:8b:
7c:01:7a:07:2c:5f:0c:d9:0f:94:7f:2a:d0:a3:70:
96:24:71:52:6e:85:69:fc:72:e3:cf:ad:a8:bf:69:
49:01:cc:3a:43:cb:db:8b:ea:c3:22:dc:86:55:9e:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:57:B1:55:DB:13:8D:F9:8D:4A:4E:77:70:B1:77:35:1E:D9:05:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/967f0d87-1b49-3fe7-b66f-3c7f97e1432d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
147.185.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:d7:15:1c:b4:64:4c:38:7e:ac:33:48:ef:32:1d:0f:20:c2:
b0:1b:40:a7:39:59:f6:3a:2b:51:14:f7:09:aa:8b:e8:2c:ec:
94:1b:3b:78:2b:9c:cc:86:f1:3f:cd:77:eb:bc:bc:b3:3e:7a:
4f:e0:06:00:ad:6e:6b:72:7d:23:1f:54:b7:ce:b2:26:4b:89:
41:97:a6:6b:b6:b7:7b:13:8b:7b:c3:4d:eb:f7:37:3d:26:f1:
32:08:1f:4c:9f:18:81:34:db:6c:d7:72:a6:60:f4:0c:70:34:
ca:c8:b3:80:cc:8e:c4:34:89:27:78:f5:f0:4f:16:d3:6d:88:
1c:b3:38:4c:15:47:38:36:b0:2c:a6:6a:55:6f:cb:91:74:8f:
e5:d3:a0:b5:a0:a6:c9:5c:df:11:cb:72:b5:d0:10:4d:96:5e:
41:de:06:15:46:d4:03:ec:14:ee:01:ce:b5:9e:a2:9b:c3:02:
12:6a:17:10:e5:29:cd:e1:e0:98:15:f5:61:47:39:18:13:ec:
ea:b4:ba:a0:a6:61:b0:d9:fc:71:51:93:e7:ac:ff:ab:cf:a6:
7b:e1:18:d4:d0:b8:32:d0:88:f4:fd:b5:48:33:a7:72:d8:d3:
38:ae:47:d6:8f:d9:9a:d6:81:b4:80:b5:b0:bf:70:77:df:73:
1e:b7:58:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FU1a+Zm81X+pYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
NWRjNTMyZjctMDlkOS00ZTZiLWIxMTYtZmEwYTdiNWM3M2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9aXyZ7DkrKYoJADQl6+lxzRJZakldGcvx/x
GVg/1CsGpYo19I8uYUZqrhF4tdOXyl1HRvROvKmwxc6MWgXpi60umvEwgYg7zupm
3lCzFv7KmFjADp8LMmxuFtujBh7uSQ2pQgPZV3LL7rbIpAelmJ0ZWSF0KWwImtdW
heHLD+D888MJNbfS4PtXWtc5Ygqdvet3tAeMB0h3s8d/Wcsuf4rYBC36Eacs79IJ
vLp+lA62oQWHk1FYcAQrhIhuoNjeMiYFsn4G6IYfk2t8Zcyjg4t8AXoHLF8M2Q+U
fyrQo3CWJHFSboVp/HLjz62ov2lJAcw6Q8vbi+rDItyGVZ6SFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtXsVXbE435jUpOd3CxdzUe2QUBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvOTY3ZjBkODctMWI0OS0z
ZmU3LWI2NmYtM2M3Zjk3ZTE0MzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7mIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLXFRy0ZEw4fqwzSO8yHQ8gwrAbQKc5WfY6K1EU9wmqi+gs7JQbO3gr
nMyG8T/Nd+u8vLM+ek/gBgCtbmtyfSMfVLfOsiZLiUGXpmu2t3sTi3vDTev3Nz0m
8TIIH0yfGIE022zXcqZg9AxwNMrIs4DMjsQ0iSd49fBPFtNtiByzOEwVRzg2sCym
alVvy5F0j+XToLWgpslc3xHLcrXQEE2WXkHeBhVG1APsFO4BzrWeopvDAhJqFxDl
Kc3h4JgV9WFHORgT7Oq0uqCmYbDZ/HFRk+es/6vPpnvhGNTQuDLQiPT9tUgzp3LY
0ziuR9aP2ZrWgbSAtbC/cHffcx63WCA=
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:40 2025 by rpki-client on console.sobornost.net