Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa
File: a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa (raw, json)
Hash identifier: kuJg+tKdh/nWqY3eJst4bi1evrr7mkW965S84EPsO70=
Subject key identifier: 09:23:36:73:37:2C:41:02:0B:60:FE:C3:A0:40:37:5F:6E:11:3E:F0
Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial: 010D0C9F43285848DEA11427C413D541B5E1CA80
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 1239
IP address blocks: 65.160.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:14:27:c4:13:d5:41:b5:e1:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=9105c154-63f1-48ab-be38-2fb44e35e063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:06:2f:35:75:af:95:bc:d5:45:b3:e8:91:
07:10:5c:fe:e9:42:fb:13:d8:d9:9a:58:ae:bf:e2:
ad:64:2b:32:e4:b3:c6:c9:fa:a0:c5:6b:4e:0a:1a:
6b:f2:2e:ad:4d:eb:cf:4e:9d:eb:8e:91:37:9f:91:
bd:72:6a:a2:f7:f9:93:d3:83:f3:e5:e9:10:33:88:
c2:c5:a0:c7:9f:1a:61:c3:f3:b7:92:6a:49:30:7f:
a3:78:1c:ed:39:22:ed:80:c8:a8:5f:74:1d:b9:f8:
5d:02:f3:31:b2:31:9b:c6:ce:de:35:58:0b:36:01:
65:99:4d:4a:6f:c4:c1:b9:47:58:cf:76:1a:ce:c3:
a2:15:3d:c2:bd:d8:7b:1c:92:fb:0b:94:5e:e7:48:
1a:22:dd:fa:51:35:30:7f:70:1e:5b:a4:30:b6:c4:
40:d3:a0:9a:ab:1f:ca:54:66:11:d9:45:6d:57:dd:
3f:ca:75:91:ed:d5:95:1c:2c:70:2e:06:bc:f6:39:
e5:e4:b1:66:d1:a0:87:87:8b:52:37:20:d8:44:2f:
18:dd:14:83:d9:df:97:98:be:55:53:36:d8:4d:3d:
ec:b3:98:ac:70:86:a0:70:4a:17:36:d2:0b:57:37:
63:c5:80:c7:97:9b:ee:f8:ef:3d:a4:0b:71:ff:38:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:36:73:37:2C:41:02:0B:60:FE:C3:A0:40:37:5F:6E:11:3E:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
X509v3 Authority Key Identifier:
keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.160.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:57:e6:9b:7b:9f:81:85:b2:51:7b:b1:e0:00:5d:52:75:5e:
53:47:d5:bb:70:07:92:3f:e5:06:de:cb:3e:9c:23:63:f5:7a:
6b:cc:e6:35:8a:e7:ff:85:d4:d4:ac:dc:17:b5:1f:09:87:91:
4c:c0:04:3e:9b:0d:df:ef:2e:2a:64:27:41:40:58:8b:53:a1:
47:9d:53:f3:d0:c4:9e:32:fc:fb:53:84:04:3a:67:f0:06:3c:
ff:e8:6c:4d:1f:67:75:dc:ba:5c:d7:ca:25:16:86:48:e2:f5:
83:d1:fb:03:da:74:9a:28:a4:51:88:99:e5:e9:74:e0:53:08:
22:85:00:a6:38:62:e6:2a:97:0f:a5:07:04:b8:4f:6c:ed:cf:
66:3c:d6:e5:13:73:a2:a6:e3:bf:3c:d1:d9:b1:64:68:d4:da:
cc:56:5f:28:b8:cb:c0:8d:bd:7b:56:80:b2:f5:e6:0d:60:07:
db:39:bf:93:f7:cb:a6:84:bd:ba:a4:b8:b5:73:f6:ba:db:41:
63:08:4c:f6:9c:cd:ee:c6:d4:cd:d0:ed:bb:ca:7e:06:c4:e7:
8e:3b:d2:97:16:fd:fa:f2:ab:52:57:48:de:2a:0e:35:58:4a:
99:3d:ac:cf:53:91:e3:5b:0f:0d:83:44:b3:1e:72:66:2a:69:
63:fa:4c:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoRQnxBPVQbXhyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
OTEwNWMxNTQtNjNmMS00OGFiLWJlMzgtMmZiNDRlMzVlMDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug0GLzV1r5W81UWz6JEHEFz+6UL7E9jZmliu
v+KtZCsy5LPGyfqgxWtOChpr8i6tTevPTp3rjpE3n5G9cmqi9/mT04Pz5ekQM4jC
xaDHnxphw/O3kmpJMH+jeBztOSLtgMioX3QdufhdAvMxsjGbxs7eNVgLNgFlmU1K
b8TBuUdYz3YazsOiFT3Cvdh7HJL7C5Re50gaIt36UTUwf3AeW6QwtsRA06Caqx/K
VGYR2UVtV90/ynWR7dWVHCxwLga89jnl5LFm0aCHh4tSNyDYRC8Y3RSD2d+XmL5V
UzbYTT3ss5iscIagcEoXNtILVzdjxYDHl5vu+O89pAtx/zh28QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAkjNnM3LEECC2D+w6BAN19uET7wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYTM5NWQ4YzUtMzViZS0z
YjM4LThhYTQtYTQ4YmEzZWZjMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQaBGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9X5pt7n4GFslF7seAAXVJ1XlNH1btwB5I/5Qbeyz6cI2P1emvM5jWK
5/+F1NSs3Be1HwmHkUzABD6bDd/vLipkJ0FAWItToUedU/PQxJ4y/PtThAQ6Z/AG
PP/obE0fZ3XculzXyiUWhkji9YPR+wPadJoopFGImeXpdOBTCCKFAKY4YuYqlw+l
BwS4T2ztz2Y81uUTc6Km47880dmxZGjU2sxWXyi4y8CNvXtWgLL15g1gB9s5v5P3
y6aEvbqkuLVz9rrbQWMITPacze7G1M3Q7bvKfgbE54470pcW/fryq1JXSN4qDjVY
Spk9rM9TkeNbDw2DRLMecmYqaWP6TMI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:59 2025 by rpki-client on console.sobornost.net