Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/a3718297-4e81-307d-a271-7b4c3b10ef31.roa
File: a3718297-4e81-307d-a271-7b4c3b10ef31.roa (raw, json)
Hash identifier: sQ9yF3I4WF+O5ZfK/STPihEmutXsYfAkPgcvDfHyUAE=
Subject key identifier: BF:45:27:F3:26:DF:4D:ED:C0:D2:5E:B2:88:CF:12:75:98:2C:45:A5
Certificate issuer: /CN=e0cdac38-6681-4b09-b992-31d2030b8796
Certificate serial: 010D0C9F4328584965E9752674D44B37C09AF200
Authority key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/a3718297-4e81-307d-a271-7b4c3b10ef31.roa
Signing time: Thu 03 Apr 2025 01:00:46 +0000
ROA not before: Thu 03 Apr 2025 01:00:46 +0000
ROA not after: Wed 02 Jul 2025 01:00:46 +0000
asID: 16509
IP address blocks: 138.133.119.0/24 maxlen: 24
138.133.132.0/24 maxlen: 24
138.133.133.0/24 maxlen: 24
138.133.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:65:e9:75:26:74:d4:4b:37:c0:9a:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cdac38-6681-4b09-b992-31d2030b8796
Validity
Not Before: Apr 3 01:00:46 2025 GMT
Not After : Jul 2 01:00:46 2025 GMT
Subject: CN=a4f9e3e5-0cc0-4a92-ba4a-306f724a585a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:49:99:7c:b8:ca:94:a7:de:09:77:ac:56:
e5:cb:3e:27:cf:8f:d2:bd:b1:23:79:9b:33:3b:74:
f2:b2:9c:1e:32:58:4b:71:62:ca:35:36:31:91:8f:
10:2e:75:1d:f3:52:ec:4f:6d:09:a0:ac:24:14:b4:
a7:3f:06:8c:2c:86:4b:39:ed:47:0c:ad:db:95:21:
b5:ec:04:5e:aa:91:42:00:b2:39:85:86:13:69:4b:
1b:de:61:0e:af:53:e1:79:0a:e7:30:9d:94:9f:99:
23:73:6c:c1:75:19:54:8d:5d:d8:bb:da:8e:5f:a4:
cf:bd:74:50:c4:95:ba:a3:61:24:88:09:5d:5d:1b:
c1:81:f7:0b:b9:74:54:33:59:5d:2a:57:36:83:8c:
d6:ca:91:72:d9:33:c1:56:9c:85:e7:8b:08:c4:fd:
ed:ee:0d:1c:91:e9:21:ff:aa:04:3a:05:4a:1e:63:
f2:c1:4c:3f:93:ae:e8:b8:3e:5d:fc:3a:49:e1:6c:
5a:33:c3:a1:57:60:a7:e0:e2:eb:9c:34:2a:60:f6:
48:fa:77:d2:a8:eb:15:08:56:86:18:ac:bc:0b:1b:
e9:b3:7b:76:cf:20:b0:c7:4c:30:f7:5c:4b:4f:96:
37:7f:27:d0:11:26:b0:cf:a3:70:fb:e9:f0:db:c7:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:45:27:F3:26:DF:4D:ED:C0:D2:5E:B2:88:CF:12:75:98:2C:45:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/a3718297-4e81-307d-a271-7b4c3b10ef31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl
X509v3 Authority Key Identifier:
keyid:AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
sbgp-ipAddrBlock: critical
IPv4:
138.133.119.0/24
138.133.132.0/23
138.133.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:0a:e0:84:5f:a7:ec:ab:8f:5d:5f:30:c7:ec:8f:8e:5e:10:
b4:c9:d4:3b:b1:f7:30:f0:e5:b8:6f:30:b5:a7:2e:9d:67:a7:
98:73:5f:c5:0e:6f:80:a0:dd:0d:e2:e9:52:5d:b1:36:90:63:
6e:83:af:01:ae:7f:0f:93:9b:20:1f:0d:9f:11:33:72:88:1a:
bf:e6:fb:a6:88:31:c6:9a:d8:93:2b:29:09:dd:2c:c9:67:e8:
5b:d8:68:b9:2c:68:15:94:e1:56:40:72:4d:be:01:ab:ca:84:
ee:3f:66:17:a3:5f:85:25:c4:1c:11:2e:be:4b:6e:50:3f:24:
90:cb:9c:4d:76:76:d0:9f:fe:41:02:8f:e8:ef:75:87:76:7a:
79:93:ee:f6:74:af:14:5a:e4:43:44:c4:67:83:84:20:83:67:
e3:ed:ac:8b:6d:c7:aa:a9:ee:57:c2:33:01:52:ea:66:18:28:
21:f9:42:7b:37:d7:42:82:86:82:c9:0d:ea:94:6f:a2:85:69:
ac:52:46:d8:af:f5:fd:34:9d:b2:a2:cb:fb:e8:2f:f6:96:ce:
fb:f8:fd:5c:e2:7d:8b:0e:b9:de:42:df:a9:36:75:a0:8a:a5:
43:d1:3f:49:49:88:c4:b3:0c:b2:6b:1c:4d:69:c0:51:46:33:
86:76:56:fe
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEll6XUmdNRLN8Ca8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBjZGFjMzgtNjY4MS00YjA5LWI5OTItMzFkMjAzMGI4
Nzk2MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk
YTRmOWUzZTUtMGNjMC00YTkyLWJhNGEtMzA2ZjcyNGE1ODVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwZJmXy4ypSn3gl3rFblyz4nz4/SvbEjeZsz
O3TyspweMlhLcWLKNTYxkY8QLnUd81LsT20JoKwkFLSnPwaMLIZLOe1HDK3blSG1
7AReqpFCALI5hYYTaUsb3mEOr1PheQrnMJ2Un5kjc2zBdRlUjV3Yu9qOX6TPvXRQ
xJW6o2EkiAldXRvBgfcLuXRUM1ldKlc2g4zWypFy2TPBVpyF54sIxP3t7g0ckekh
/6oEOgVKHmPywUw/k67ouD5d/DpJ4WxaM8OhV2Cn4OLrnDQqYPZI+nfSqOsVCFaG
GKy8Cxvps3t2zyCwx0ww91xLT5Y3fyfQESawz6Nw++nw28cB2QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFL9FJ/Mm303twNJesojPEnWYLEWlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMGNk
YWMzOC02NjgxLTRiMDktYjk5Mi0zMWQyMDMwYjg3OTYvYTM3MTgyOTctNGU4MS0z
MDdkLWEyNzEtN2I0YzNiMTBlZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTBjZGFjMzgtNjY4MS00YjA5LWI5
OTItMzFkMjAzMGI4Nzk2L2UwY2RhYzM4LTY2ODEtNGIwOS1iOTkyLTMxZDIwMzBi
ODc5Ni5jcmwwHwYDVR0jBBgwFoAUrlCk86BeuGcsAzm4yau8K2sXNDkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lMGNkYWMzOC02NjgxLTRiMDktYjk5Mi0zMWQy
MDMwYjg3OTYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAioV3AwQB
ioWEAwQAioXDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACUK4IRfp+yrj11fMMfsj45eELTJ1Dux9zDw5bhv
MLWnLp1np5hzX8UOb4Cg3Q3i6VJdsTaQY26DrwGufw+TmyAfDZ8RM3KIGr/m+6aI
Mcaa2JMrKQndLMln6FvYaLksaBWU4VZAck2+AavKhO4/ZhejX4UlxBwRLr5LblA/
JJDLnE12dtCf/kECj+jvdYd2enmT7vZ0rxRa5ENExGeDhCCDZ+PtrIttx6qp7lfC
MwFS6mYYKCH5Qns310KChoLJDeqUb6KFaaxSRtiv9f00nbKiy/voL/aWzvv4/Vzi
fYsOud5C36k2daCKpUPRP0lJiMSzDLJrHE1pwFFGM4Z2Vv4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:33 2025 by rpki-client on console.sobornost.net