Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa
File: 4e395ad4-2d90-3ea0-8528-5883f02119d1.roa (raw, json)
Hash identifier: KdY2N0SDReLNHSop9qHs81ZbHtV04SMhR2v0y+bWUFU=
Subject key identifier: F7:54:59:BD:9B:1C:2E:5A:C4:86:1D:F2:E9:F8:63:3E:3B:89:07:71
Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial: 010D0C9F4328584953C449B18AFCF1E993F2FF40
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 950
IP address blocks: 23.140.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:49:b1:8a:fc:f1:e9:93:f2:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=bc2a74f4-ac4b-405a-ba82-e64229f9e79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:b5:81:7f:b3:91:38:d1:1e:57:fe:97:31:
ba:46:f2:c1:0b:23:59:4c:68:4c:b3:45:eb:ae:24:
19:b6:7c:9e:10:b1:c1:3e:b3:1f:1b:a8:db:fd:6e:
78:1d:05:ca:89:61:06:75:07:2a:a7:ed:8e:28:ff:
af:4a:d3:57:7f:1d:37:1c:41:ab:5b:1c:bf:ea:66:
49:c9:55:ff:da:e1:73:16:76:20:04:e1:2a:7b:0b:
86:02:5a:64:01:01:36:6d:e8:ef:7e:44:84:52:d6:
5f:a0:a4:19:ce:9b:bf:aa:d9:05:67:39:41:8e:82:
6a:ad:eb:93:46:0d:91:6a:88:7a:4f:9f:00:f5:2e:
7c:88:bd:13:fa:92:bf:3b:c4:d0:bb:ab:22:ec:73:
4e:a7:ed:42:45:f6:87:7a:5a:7e:65:5e:c9:8a:85:
02:d0:d4:8b:bc:06:1e:38:7c:4d:9f:d3:de:eb:72:
2b:4a:c6:d6:13:0c:7a:cb:6b:22:a9:cf:93:f8:9f:
83:9c:01:53:67:14:53:72:69:15:6d:7f:09:b1:0f:
0f:8e:9f:d1:dd:64:28:f2:4b:7f:cd:9c:f0:fa:8b:
51:f9:ff:02:de:1d:20:35:eb:cc:0f:32:01:d5:6b:
f5:98:75:aa:7a:2c:a9:be:e9:b3:4f:a7:81:4e:92:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:59:BD:9B:1C:2E:5A:C4:86:1D:F2:E9:F8:63:3E:3B:89:07:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
X509v3 Authority Key Identifier:
keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:73:f7:1f:35:c6:2c:62:7b:aa:f2:63:37:43:47:30:00:65:
c2:a3:33:32:af:a5:99:98:99:2d:af:05:73:f1:e8:e2:16:40:
b2:a1:3a:f6:33:27:04:b6:9d:84:ef:73:34:c6:26:d4:a9:14:
3a:d2:c6:e3:db:61:d5:0c:c1:c2:bf:9f:ef:69:b0:c2:c3:18:
e7:01:15:7b:3b:a5:69:45:c0:b5:20:25:b7:73:3d:cc:ec:a6:
0b:fb:bc:9e:a8:77:3d:b0:8e:f3:1c:e2:d8:0f:ea:b8:5a:9a:
0d:33:c3:98:51:68:5c:55:be:d5:e9:53:f1:1d:04:c8:a5:c2:
d6:a6:54:f2:ac:d8:ff:d2:93:d1:71:91:f8:ae:a4:c5:e9:82:
e8:c0:cf:c8:15:32:2f:a5:17:0d:b2:b9:36:1a:92:63:6e:0b:
51:20:64:05:60:87:54:50:19:bd:bf:6f:86:c0:5c:b8:0c:04:
45:07:9f:fa:ec:46:80:4a:83:3b:e1:f2:23:2d:c9:30:93:dc:
0f:ba:bf:b2:c6:da:02:01:39:61:c6:05:5f:d2:5e:3d:b5:9b:
27:98:65:dc:a0:d0:9f:ed:af:fa:2b:24:05:f1:77:a5:0f:21:
05:61:8a:5f:8e:e1:fd:9c:89:52:da:22:d5:66:94:32:c0:b5:
2a:69:b7:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEmxivzx6ZPy/0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3
ZWVlMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YmMyYTc0ZjQtYWM0Yi00MDVhLWJhODItZTY0MjI5ZjllNzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5+1gX+zkTjRHlf+lzG6RvLBCyNZTGhMs0Xr
riQZtnyeELHBPrMfG6jb/W54HQXKiWEGdQcqp+2OKP+vStNXfx03HEGrWxy/6mZJ
yVX/2uFzFnYgBOEqewuGAlpkAQE2bejvfkSEUtZfoKQZzpu/qtkFZzlBjoJqreuT
Rg2Raoh6T58A9S58iL0T+pK/O8TQu6si7HNOp+1CRfaHelp+ZV7JioUC0NSLvAYe
OHxNn9Pe63IrSsbWEwx6y2siqc+T+J+DnAFTZxRTcmkVbX8JsQ8Pjp/R3WQo8kt/
zZzw+otR+f8C3h0gNevMDzIB1Wv1mHWqeiypvumzT6eBTpIHbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdUWb2bHC5axIYd8un4Yz47iQdxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3
Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvNGUzOTVhZDQtMmQ5MC0z
ZWEwLTg1MjgtNTg4M2YwMjExOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy
ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw
N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk
N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4w4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJz9x81xixie6ryYzdDRzAAZcKjMzKvpZmYmS2vBXPx6OIWQLKhOvYz
JwS2nYTvczTGJtSpFDrSxuPbYdUMwcK/n+9psMLDGOcBFXs7pWlFwLUgJbdzPczs
pgv7vJ6odz2wjvMc4tgP6rhamg0zw5hRaFxVvtXpU/EdBMilwtamVPKs2P/Sk9Fx
kfiupMXpgujAz8gVMi+lFw2yuTYakmNuC1EgZAVgh1RQGb2/b4bAXLgMBEUHn/rs
RoBKgzvh8iMtyTCT3A+6v7LG2gIBOWHGBV/SXj21myeYZdyg0J/tr/orJAXxd6UP
IQVhil+O4f2ciVLaItVmlDLAtSppt0I=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:54 2025 by rpki-client on console.sobornost.net