Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa
File: e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa (raw, json)
Hash identifier: r/3dxQu1F10pqDDexL+P67QOpg/xtyrBT4PotQa8dVw=
Subject key identifier: 48:AE:DF:AF:7D:F8:D3:01:47:2D:B9:14:22:6A:42:69:01:E8:72:FB
Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a
Certificate serial: 010D0C9F4328584971143590DDBE980FB3569880
Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 400745
IP address blocks: 52.129.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:35:90:dd:be:98:0f:b3:56:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=972183d2-4f9b-4002-8433-d20293241bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:a1:53:28:36:57:6b:07:cb:0d:af:3c:22:
26:40:6d:0d:e4:e6:62:49:20:2d:4e:23:26:60:c0:
f2:29:e3:13:1f:be:c8:0b:b6:c6:86:70:b9:0b:ce:
d5:9b:49:b3:d8:4a:99:a2:64:17:79:1e:00:42:6d:
45:5e:8e:98:55:8c:f9:f2:49:9a:0f:c2:d3:8e:e4:
a8:ad:3e:e5:71:a9:a2:f3:8d:1b:53:8f:0b:c6:fb:
62:8c:75:49:fe:29:a3:c5:a5:3f:f2:e4:bd:5e:60:
7e:ff:bf:99:a1:d8:24:36:25:5b:9b:9e:6c:62:88:
72:36:91:4d:2a:dd:03:2f:cf:29:d4:32:33:91:6e:
03:94:6a:23:b6:c8:9f:73:57:39:2c:0b:4c:54:44:
1b:92:b5:9a:c6:7e:45:46:15:ba:a8:68:ca:79:b9:
67:66:89:1e:60:8b:04:c5:f2:01:8e:fe:05:01:d9:
77:05:be:80:84:24:c5:62:b6:23:93:29:0e:e2:b5:
52:ff:78:d9:a9:a2:88:f1:b5:97:5d:eb:08:78:3d:
ff:65:e0:9b:17:c0:77:30:8c:90:f7:4f:e4:8d:fc:
77:ab:b2:80:d7:29:90:75:2d:35:f9:29:8c:70:42:
34:fb:5d:bf:6d:da:c6:52:bf:f0:61:fd:a4:24:26:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AE:DF:AF:7D:F8:D3:01:47:2D:B9:14:22:6A:42:69:01:E8:72:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl
X509v3 Authority Key Identifier:
keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:71:a3:44:3e:a5:bd:a2:dd:ae:02:c5:1c:59:aa:08:42:56:
a8:6c:5b:2a:2d:48:d0:26:b7:ad:56:f1:d2:65:ea:91:63:2d:
94:12:1c:10:7e:71:43:b6:dc:14:b3:e1:4e:64:f7:b4:08:ca:
72:02:bb:6f:15:3b:a6:21:9e:93:f4:b2:2c:49:30:6a:20:a3:
60:26:2e:a2:5f:db:27:9c:b1:09:a6:36:be:4a:39:42:da:2e:
80:b6:e0:26:33:88:09:b3:cc:17:3d:26:67:b8:76:af:b3:74:
9f:1b:5d:bb:6c:8a:8b:ca:b3:01:ad:34:03:57:aa:10:05:01:
c0:85:00:85:61:6b:41:52:bb:b6:72:f6:43:e6:fb:5a:9a:97:
74:af:01:68:0c:d8:81:2e:58:91:64:c4:a4:44:f0:f8:4b:86:
13:cd:f2:f9:13:ac:95:60:44:8a:be:36:f1:e2:84:b6:84:a9:
48:93:73:11:88:3e:61:7d:b7:c1:93:cc:40:2e:d9:11:04:b9:
c4:d7:a7:ff:b4:02:92:86:f4:88:db:75:14:7b:d1:2a:16:7e:
24:50:a6:49:d0:72:a8:c0:21:f0:00:b8:d8:6e:cb:df:53:5e:
ed:7a:93:e3:07:90:c9:8e:ed:d0:b2:cf:71:31:8f:9a:a1:59:
fa:c4:b0:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFDWQ3b6YD7NWmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2
MDlhMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk
OTcyMTgzZDItNGY5Yi00MDAyLTg0MzMtZDIwMjkzMjQxYmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/qhUyg2V2sHyw2vPCImQG0N5OZiSSAtTiMm
YMDyKeMTH77IC7bGhnC5C87Vm0mz2EqZomQXeR4AQm1FXo6YVYz58kmaD8LTjuSo
rT7lcami840bU48LxvtijHVJ/imjxaU/8uS9XmB+/7+ZodgkNiVbm55sYohyNpFN
Kt0DL88p1DIzkW4DlGojtsifc1c5LAtMVEQbkrWaxn5FRhW6qGjKeblnZokeYIsE
xfIBjv4FAdl3Bb6AhCTFYrYjkykO4rVS/3jZqaKI8bWXXesIeD3/ZeCbF8B3MIyQ
90/kjfx3q7KA1ymQdS01+SmMcEI0+12/bdrGUr/wYf2kJCbr9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEiu3699+NMBRy25FCJqQmkB6HL7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4
NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZTNlMjg4MTktOTQ4Ny0z
ZmVhLWI1ZWEtYjRmM2RiYjRmOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx
OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl
NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2
OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVxo0Q+pb2i3a4CxRxZqghCVqhsWyotSNAmt61W8dJl6pFjLZQSHBB+
cUO23BSz4U5k97QIynICu28VO6YhnpP0sixJMGogo2AmLqJf2yecsQmmNr5KOULa
LoC24CYziAmzzBc9Jme4dq+zdJ8bXbtsiovKswGtNANXqhAFAcCFAIVha0FSu7Zy
9kPm+1qal3SvAWgM2IEuWJFkxKRE8PhLhhPN8vkTrJVgRIq+NvHihLaEqUiTcxGI
PmF9t8GTzEAu2REEucTXp/+0ApKG9IjbdRR70SoWfiRQpknQcqjAIfAAuNhuy99T
Xu16k+MHkMmO7dCyz3Exj5qhWfrEsEY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:08 2025 by rpki-client on console.sobornost.net