Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa
File: 7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa (raw, json)
Hash identifier: NX5rsLzgMc9dNrvKLzNizgS9arr0c1BEjFXoB5C5Kkw=
Subject key identifier: 6C:A4:71:DA:2A:9F:B2:51:3A:73:5A:9C:A3:5D:50:68:37:B7:B7:F2
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F43285849071BF2CCA62073B5E25C58C0
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 16789
IP address blocks: 104.156.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f2:cc:a6:20:73:b5:e2:5c:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=ff56b33a-3267-4231-8805-169060041a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:95:a8:bd:be:48:41:86:4f:41:c8:e1:1c:
aa:ed:3f:76:e3:db:d8:b2:6a:77:18:55:45:0a:e1:
bf:e8:58:34:64:c8:a2:6d:ce:04:dd:28:8c:5a:e9:
23:21:45:bb:0b:53:1e:65:58:13:70:12:d5:58:6e:
7a:aa:e2:3a:77:1c:20:a1:42:a4:4e:01:7d:56:98:
ad:76:b1:7f:f1:a6:71:96:60:59:da:4d:1b:96:aa:
cd:98:69:0f:cd:33:81:44:30:98:02:3f:99:47:0c:
00:03:bf:3f:12:2d:60:23:78:17:31:33:13:1e:79:
db:35:a9:ca:8d:fe:27:01:52:38:48:69:00:d0:fd:
d7:d5:a5:38:b5:ff:ac:6f:7b:38:7d:9f:f6:9b:11:
0c:c3:24:00:9a:54:7e:26:57:89:52:16:22:a5:d0:
27:7f:89:7e:35:b4:00:39:47:52:58:37:61:ad:f5:
96:5f:f8:00:ca:d6:de:68:c2:7f:ec:ae:25:02:ed:
d6:bd:f4:84:00:f8:68:a7:8c:3a:38:28:56:4e:66:
c8:64:42:76:a3:f7:3d:d6:dc:55:d9:eb:85:39:ac:
12:2e:6e:82:bc:57:96:7d:5b:ab:99:27:85:55:16:
97:11:ac:ef:27:e3:b2:8e:29:20:be:33:3f:38:ec:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A4:71:DA:2A:9F:B2:51:3A:73:5A:9C:A3:5D:50:68:37:B7:B7:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:a8:2b:4c:31:31:47:14:64:7a:c0:05:53:2e:2c:5f:9c:e4:
77:49:68:c8:8d:1c:79:5f:2c:dc:84:7b:fb:f5:53:4c:c3:ba:
18:dc:20:38:bd:4e:79:50:28:58:fb:d0:94:0e:86:d0:54:2c:
ff:1b:26:c0:84:6b:f7:09:8e:63:e1:f8:7e:ab:0f:57:bb:80:
15:05:9a:65:a0:0c:14:2a:50:ee:25:31:f5:10:00:06:b0:7d:
f1:f2:ba:35:f1:ff:f5:29:ce:9d:e1:47:70:0a:bf:4c:51:85:
b8:0d:2a:d0:36:2f:d1:30:70:3a:c7:41:ce:10:a0:a2:1c:60:
6e:71:16:02:ba:d2:a8:11:43:3f:9c:ab:55:c9:85:72:bc:98:
c4:63:d7:4c:7f:e0:0a:cb:a1:1f:2c:09:d4:3c:42:f0:0e:1c:
3c:f2:06:84:9c:84:31:e1:9f:b2:49:11:68:49:b8:46:23:38:
74:c5:2e:7b:4c:24:f9:d7:93:22:b8:53:7f:fa:7e:bb:be:da:
00:d4:ed:e8:e0:ea:87:84:55:52:ac:29:c5:88:85:55:da:5f:
86:db:98:70:bb:ce:aa:58:ed:7d:48:9b:d8:37:9b:2c:1a:af:
83:02:86:2e:6c:60:3c:63:d5:b9:87:e2:98:44:c3:d3:5f:81:
f9:94:5a:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/LMpiBzteJcWMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4
YjY4MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmY1NmIzM2EtMzI2Ny00MjMxLTg4MDUtMTY5MDYwMDQxYTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCqVqL2+SEGGT0HI4Ryq7T9249vYsmp3GFVF
CuG/6Fg0ZMiibc4E3SiMWukjIUW7C1MeZVgTcBLVWG56quI6dxwgoUKkTgF9Vpit
drF/8aZxlmBZ2k0blqrNmGkPzTOBRDCYAj+ZRwwAA78/Ei1gI3gXMTMTHnnbNanK
jf4nAVI4SGkA0P3X1aU4tf+sb3s4fZ/2mxEMwyQAmlR+JleJUhYipdAnf4l+NbQA
OUdSWDdhrfWWX/gAytbeaMJ/7K4lAu3WvfSEAPhop4w6OChWTmbIZEJ2o/c91txV
2euFOawSLm6CvFeWfVurmSeFVRaXEazvJ+OyjikgvjM/OOxdywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGykcdoqn7JROnNanKNdUGg3t7fyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy
ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvNzU3NGEzNWQtNzc3NC0z
MjI4LWE0ZjgtYzJiZGQ5Yzk5ZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5
YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk
OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy
ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJy8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaoK0wxMUcUZHrABVMuLF+c5HdJaMiNHHlfLNyEe/v1U0zDuhjcIDi9
TnlQKFj70JQOhtBULP8bJsCEa/cJjmPh+H6rD1e7gBUFmmWgDBQqUO4lMfUQAAaw
ffHyujXx//Upzp3hR3AKv0xRhbgNKtA2L9EwcDrHQc4QoKIcYG5xFgK60qgRQz+c
q1XJhXK8mMRj10x/4ArLoR8sCdQ8QvAOHDzyBoSchDHhn7JJEWhJuEYjOHTFLntM
JPnXkyK4U3/6fru+2gDU7ejg6oeEVVKsKcWIhVXaX4bbmHC7zqpY7X1Im9g3mywa
r4MChi5sYDxj1bmH4phEw9NfgfmUWu0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:08 2025 by rpki-client on console.sobornost.net