Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c039b0a-d539-3980-b111-7f48e21e1f7f.roa
File: 3c039b0a-d539-3980-b111-7f48e21e1f7f.roa (raw, json)
Hash identifier: 3jTlrI0oIkxbE94bmU4drSUlr1xxAmGPXEjkpxuIw5I=
Subject key identifier: 91:2D:13:17:C4:FA:96:37:C5:1E:06:3E:8A:9F:5F:77:89:20:0C:BF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA5EEC8B445D3615778A820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c039b0a-d539-3980-b111-7f48e21e1f7f.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 22909
IP address blocks: 174.161.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a5:ee:c8:b4:45:d3:61:57:78:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=bb41f5a0-5439-4376-8774-dec744c1bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:bd:2a:7c:25:a6:a9:32:37:45:e3:ac:11:
7a:27:69:89:8d:78:47:a6:47:58:2b:f3:8c:ff:1d:
52:c0:92:38:b4:4c:02:cf:ee:b3:6a:e2:ea:25:cb:
af:06:8e:83:cd:ba:d6:39:68:17:3e:2d:29:f5:dc:
40:69:12:ed:90:7d:ba:11:64:02:66:f0:93:66:b7:
0b:b9:8e:07:7d:38:3a:54:5f:76:9e:54:cc:c6:41:
ae:7c:0d:63:df:d2:a2:15:13:ef:b7:48:85:97:75:
0d:64:91:1e:04:d7:64:d3:ce:d2:f2:21:b7:de:75:
59:be:6a:2c:48:d3:13:eb:f8:96:4e:fd:52:e1:0c:
63:97:eb:eb:be:e7:12:6f:f7:31:9d:b6:1a:c8:c7:
14:cc:ab:96:f7:04:37:6c:53:19:77:70:a7:11:c1:
b2:6c:a8:70:a7:45:52:00:74:ed:5c:0a:b8:6a:de:
17:80:85:2d:e6:22:af:80:f2:e9:3e:c6:59:04:53:
57:49:4a:cf:c9:22:22:9d:8f:9a:79:fd:bf:7f:60:
5a:25:6d:80:11:f1:a8:ff:ef:25:31:39:8f:b2:ce:
c9:fb:23:a3:bb:d2:be:f1:70:ba:65:85:7f:e3:b8:
89:7f:70:85:15:64:08:06:ce:9e:21:ba:ea:c2:45:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:13:17:C4:FA:96:37:C5:1E:06:3E:8A:9F:5F:77:89:20:0C:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c039b0a-d539-3980-b111-7f48e21e1f7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.161.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:cf:ea:97:0c:b5:c0:c8:34:fe:0b:2a:fb:d2:7d:39:ed:84:
bd:19:ad:a7:13:0e:ff:96:4b:f3:41:a9:cf:31:24:e1:9a:be:
fa:67:14:d0:90:70:e4:d6:d0:3b:56:40:c2:cf:a3:7d:65:71:
4e:c0:dc:d5:a2:27:61:b3:f9:94:f6:e9:72:f9:25:f3:1b:f2:
71:de:d0:e4:8f:97:1f:8d:19:b1:f7:5b:bd:b4:b4:78:64:33:
de:80:c2:65:8a:38:bf:d8:90:cc:e6:10:e8:0a:05:ff:5a:ec:
08:47:d9:3e:9f:85:2f:d1:18:f7:e2:9c:46:69:cc:34:f9:05:
92:81:ac:3d:ce:8d:96:31:9b:d6:09:90:b2:8c:e2:42:e2:a0:
e6:24:cf:44:c2:0c:76:fd:81:fd:75:a8:8e:98:fb:98:d2:d6:
cb:a7:47:41:21:c3:b3:43:36:93:dc:c1:2f:fc:19:43:e0:c0:
e6:f3:d6:77:56:1f:c6:fa:63:2e:36:d9:61:dc:65:01:c1:ef:
ba:49:ad:cb:4d:88:45:31:7c:86:c4:f6:a8:f2:18:0f:8b:b1:
d8:2a:79:a9:c5:e2:a3:4f:1a:5e:d8:85:fb:06:b6:f9:e2:5b:
ea:99:de:d5:22:fd:b1:4a:b6:7c:81:79:f7:2a:02:c8:f0:a6:
ff:60:e3:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pe7ItEXTYVd4qCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YmI0MWY1YTAtNTQzOS00Mzc2LTg3NzQtZGVjNzQ0YzFiZDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0q9KnwlpqkyN0XjrBF6J2mJjXhHpkdYK/OM
/x1SwJI4tEwCz+6zauLqJcuvBo6DzbrWOWgXPi0p9dxAaRLtkH26EWQCZvCTZrcL
uY4HfTg6VF92nlTMxkGufA1j39KiFRPvt0iFl3UNZJEeBNdk087S8iG33nVZvmos
SNMT6/iWTv1S4Qxjl+vrvucSb/cxnbYayMcUzKuW9wQ3bFMZd3CnEcGybKhwp0VS
AHTtXAq4at4XgIUt5iKvgPLpPsZZBFNXSUrPySIinY+aef2/f2BaJW2AEfGo/+8l
MTmPss7J+yOju9K+8XC6ZYV/47iJf3CFFWQIBs6eIbrqwkVUUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJEtExfE+pY3xR4GPoqfX3eJIAy/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2MwMzliMGEtZDUzOS0z
OTgwLWIxMTEtN2Y0OGUyMWUxZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqEUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM/P6pcMtcDINP4LKvvSfTnthL0ZracTDv+WS/NBqc8xJOGavvpnFNCQ
cOTW0DtWQMLPo31lcU7A3NWiJ2Gz+ZT26XL5JfMb8nHe0OSPlx+NGbH3W720tHhk
M96AwmWKOL/YkMzmEOgKBf9a7AhH2T6fhS/RGPfinEZpzDT5BZKBrD3OjZYxm9YJ
kLKM4kLioOYkz0TCDHb9gf11qI6Y+5jS1sunR0Ehw7NDNpPcwS/8GUPgwObz1ndW
H8b6Yy422WHcZQHB77pJrctNiEUxfIbE9qjyGA+LsdgqeanF4qNPGl7YhfsGtvni
W+qZ3tUi/bFKtnyBefcqAsjwpv9g4yw=
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:39:47 2025 by rpki-client on console.sobornost.net