Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/01ad1863-27f1-38ca-bf7c-de7f8a7f3d67.roa
File: 01ad1863-27f1-38ca-bf7c-de7f8a7f3d67.roa (raw, json)
Hash identifier: sL5vBfNm4TMjjy1yVtLNqxmpFiZaRdWKNAbQ2K8cyv0=
Subject key identifier: D3:CA:0C:09:89:3E:B8:0C:97:89:39:DA:90:BF:C2:52:57:D5:8E:E7
Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Certificate serial: 010D0C9F432858495C24310156C0A2E20A90BF00
Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/01ad1863-27f1-38ca-bf7c-de7f8a7f3d67.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 396982
IP address blocks: 209.133.250.0/24 maxlen: 24
209.133.251.0/24 maxlen: 24
209.133.252.0/24 maxlen: 24
209.133.253.0/24 maxlen: 24
209.133.254.0/24 maxlen: 24
209.133.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:31:01:56:c0:a2:e2:0a:90:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=a66b33f7-27b4-45bc-b636-9a228679c237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6e:a3:97:39:fd:6f:ed:38:e6:82:67:a5:bc:
70:9a:7c:1d:cc:56:16:19:21:e6:6e:46:68:25:6c:
ed:e5:40:18:a9:7f:2c:11:04:67:fc:f8:86:f4:78:
41:e5:8f:b7:68:d9:14:38:8d:fc:dd:6e:0a:b1:fb:
b3:34:c5:6c:c7:34:ff:ff:7e:5c:b6:3b:09:06:16:
72:cd:81:87:3b:c0:7f:c9:af:42:27:5a:0d:8f:4f:
94:54:82:2e:1f:22:64:19:42:71:55:c8:d9:77:5d:
69:21:c9:d3:27:78:8b:fd:15:12:a5:93:51:3b:30:
0e:38:30:a5:a8:48:98:ba:6e:0e:2a:57:68:f8:f9:
62:79:e4:50:0f:72:2d:6e:76:99:11:a9:02:a2:d2:
95:51:f7:26:a5:73:ef:92:9e:b7:bd:21:dc:7b:17:
8a:88:66:e6:31:c1:fd:2b:dc:33:36:a7:88:fb:a4:
34:90:51:bf:15:f0:4f:6b:bf:e5:38:16:97:fb:6b:
6d:5f:3b:b0:b4:8a:0e:c0:4e:ca:91:f4:3e:aa:99:
05:62:18:40:dd:02:ef:29:c9:eb:25:88:44:01:39:
66:26:be:5d:da:8b:9a:c9:90:75:93:3a:c3:f0:fe:
d4:03:62:9f:8a:33:6c:96:22:66:7d:1a:2b:eb:2f:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:0C:09:89:3E:B8:0C:97:89:39:DA:90:BF:C2:52:57:D5:8E:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/01ad1863-27f1-38ca-bf7c-de7f8a7f3d67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl
X509v3 Authority Key Identifier:
keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.133.250.0-209.133.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:02:d8:2f:db:4d:5e:d0:d6:b8:b3:de:ae:1f:32:cf:b7:c1:
98:69:86:d5:71:d8:66:d6:22:29:de:31:8f:bb:da:dc:01:8f:
61:e3:59:ca:d4:46:6e:e4:56:05:bd:c8:0c:5a:b5:f5:2e:22:
98:1c:ab:d1:a9:cc:0c:c4:ee:d0:53:70:da:bc:b1:9d:46:82:
9b:44:bc:f2:72:58:63:46:78:75:fc:68:01:92:74:ea:63:bb:
90:33:73:3b:62:8f:dc:65:95:c5:6f:b8:78:51:77:39:c0:fd:
69:8b:1a:e6:af:ab:22:87:dd:c0:63:c4:c8:2f:22:2d:b1:eb:
70:02:7c:e8:9a:4c:2e:49:39:ba:5c:eb:14:70:a6:9f:08:fe:
9d:d2:b6:a2:f6:73:cc:60:5a:4b:37:aa:32:09:f9:6b:9b:75:
2f:72:60:86:62:df:65:cc:ea:b1:a6:29:c7:ae:df:73:67:34:
c4:63:36:0a:eb:fb:25:4f:93:b2:6e:76:dc:c2:ab:1a:a2:43:
94:3d:3a:b8:f3:48:ef:da:b3:bf:2a:52:0b:e2:72:a4:dd:d6:
6f:85:4b:d0:82:09:b0:2c:93:57:42:13:86:c0:e5:1a:86:87:
47:6f:27:60:4e:31:5c:fb:a0:f7:96:60:f3:79:ea:bd:10:0c:
24:3e:8b:f6
-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWElcJDEBVsCi4gqQvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1
NmY5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
YTY2YjMzZjctMjdiNC00NWJjLWI2MzYtOWEyMjg2NzljMjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW6jlzn9b+045oJnpbxwmnwdzFYWGSHmbkZo
JWzt5UAYqX8sEQRn/PiG9HhB5Y+3aNkUOI383W4KsfuzNMVsxzT//35ctjsJBhZy
zYGHO8B/ya9CJ1oNj0+UVIIuHyJkGUJxVcjZd11pIcnTJ3iL/RUSpZNROzAOODCl
qEiYum4OKldo+PlieeRQD3ItbnaZEakCotKVUfcmpXPvkp63vSHcexeKiGbmMcH9
K9wzNqeI+6Q0kFG/FfBPa7/lOBaX+2ttXzuwtIoOwE7KkfQ+qpkFYhhA3QLvKcnr
JYhEATlmJr5d2ouayZB1kzrD8P7UA2KfijNsliJmfRor6y9XTQIDAQABo4IDXDCC
A1gwHQYDVR0OBBYEFNPKDAmJPrgMl4k52pC/wlJX1Y7nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3
YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvMDFhZDE4NjMtMjdmMS0z
OGNhLWJmN2MtZGU3ZjhhN2YzZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm
NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1
NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk
MmRkNTU2ZjkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAHRhfoD
AwHRhDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQBLAtgv201e0Na4s96uHzLPt8GYaYbVcdhm1iIp3jGPu9rc
AY9h41nK1EZu5FYFvcgMWrX1LiKYHKvRqcwMxO7QU3DavLGdRoKbRLzyclhjRnh1
/GgBknTqY7uQM3M7Yo/cZZXFb7h4UXc5wP1pixrmr6sih93AY8TILyItsetwAnzo
mkwuSTm6XOsUcKafCP6d0rai9nPMYFpLN6oyCflrm3UvcmCGYt9lzOqxpinHrt9z
ZzTEYzYK6/slT5OybnbcwqsaokOUPTq480jv2rO/KlIL4nKk3dZvhUvQggmwLJNX
QhOGwOUahodHbydgTjFc+6D3lmDzeeq9EAwkPov2
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:18 2025 by rpki-client on console.sobornost.net