Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa
File: bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa (raw, json)
Hash identifier: v2k5MFXrVKsJ6B3vVU48TJ+6csG+j8xbQkNZJKgghSk=
Subject key identifier: 1B:2F:C6:C3:12:30:6B:4E:27:75:B5:97:50:D6:FA:EE:5D:01:02:C1
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F43285849685DCCEA1694F76A0C851040
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa
Signing time: Thu 03 Apr 2025 22:06:53 +0000
ROA not before: Thu 03 Apr 2025 22:06:53 +0000
ROA not after: Wed 02 Jul 2025 22:06:53 +0000
asID: 8075
IP address blocks: 152.38.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:68:5d:cc:ea:16:94:f7:6a:0c:85:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Apr 3 22:06:53 2025 GMT
Not After : Jul 2 22:06:53 2025 GMT
Subject: CN=8ffb537e-d8a0-450a-ad73-f3f6cb29357b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:7a:57:bf:7c:24:09:8d:31:c1:37:c0:c2:
2a:ee:dd:3d:76:9f:44:32:94:79:a4:31:5f:0a:32:
1b:55:d0:a7:60:9f:35:2f:71:2f:13:06:da:58:c7:
59:29:ae:39:42:90:11:e0:2e:9a:c6:12:6f:57:c8:
68:c3:19:94:b7:6e:37:1b:13:3b:c6:63:77:b1:d5:
a4:04:d2:1b:4b:dc:82:eb:b3:f6:50:c5:44:c0:0a:
44:d4:cb:74:39:05:74:32:e7:62:19:f6:b9:32:62:
0d:f0:86:5a:d6:c6:92:b1:ab:dc:f7:75:66:0d:6c:
a4:4f:83:3e:21:6e:90:87:29:b7:ef:43:a7:33:e2:
81:18:0e:65:ed:c0:a0:c1:08:4a:90:4d:6b:6d:b8:
19:9f:c5:f3:8d:c9:f0:07:93:88:55:83:63:2c:e5:
36:20:48:51:41:57:39:f1:4a:d2:3c:a6:ef:36:a6:
ba:72:d4:57:7b:5c:21:2a:a1:24:4a:d4:fc:a1:c6:
f0:3a:26:2d:88:5c:82:ba:f4:f9:89:8c:15:c6:11:
e4:39:7a:df:03:f4:e5:83:46:eb:f5:3f:54:b1:52:
7e:bc:34:d6:97:90:9f:f6:1b:dc:d6:9b:54:42:c4:
7d:93:21:a3:6f:75:fa:e1:30:74:ec:8d:ec:0a:63:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:C6:C3:12:30:6B:4E:27:75:B5:97:50:D6:FA:EE:5D:01:02:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:71:3e:d0:7e:b8:58:93:d2:c9:b1:6b:56:6b:8f:54:dd:bd:
20:1e:6c:c0:b5:a9:fe:02:51:99:a1:25:8b:05:f4:4f:9f:96:
a1:50:bb:d8:37:46:c6:64:1a:e8:9b:35:71:cb:9a:b3:e8:e0:
b7:69:c3:29:61:a6:1c:7e:2e:07:37:54:de:c8:dd:49:ad:29:
4f:15:6f:3e:46:1f:5a:54:37:c6:f4:8e:f2:d6:50:96:b7:01:
6b:ca:59:ce:f4:17:17:65:2c:8b:47:f9:a2:0f:fc:d2:83:20:
3d:08:63:96:9e:e6:3b:f3:a1:10:a5:c7:35:47:62:35:cb:ba:
68:69:85:02:f1:39:68:1f:3b:14:79:99:e4:60:d5:61:1d:04:
28:d2:72:72:e7:9e:d4:74:9f:85:30:00:4d:1a:f6:f1:3e:72:
96:f3:cb:47:c5:26:53:4c:3a:8c:c0:71:f0:c4:53:12:a0:8e:
0c:bb:33:5c:92:28:a7:6e:1c:06:06:fb:32:9e:b2:63:04:da:
c8:ca:9e:f9:81:19:27:42:3e:a2:02:ad:80:fe:3e:6e:3a:dd:
09:0b:5f:23:2f:07:79:9e:8a:5d:34:a6:8d:92:90:5d:eb:7c:
0a:1c:2e:aa:9d:1a:8a:f3:b2:c9:bd:8d:d7:a5:cf:c7:62:c1:
61:6c:f3:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEloXczqFpT3agyFEEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2
ZjIyMB4XDTI1MDQwMzIyMDY1M1oXDTI1MDcwMjIyMDY1M1owLzEtMCsGA1UEAxMk
OGZmYjUzN2UtZDhhMC00NTBhLWFkNzMtZjNmNmNiMjkzNTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLl6V798JAmNMcE3wMIq7t09dp9EMpR5pDFf
CjIbVdCnYJ81L3EvEwbaWMdZKa45QpAR4C6axhJvV8howxmUt243GxM7xmN3sdWk
BNIbS9yC67P2UMVEwApE1Mt0OQV0MudiGfa5MmIN8IZa1saSsavc93VmDWykT4M+
IW6Qhym370OnM+KBGA5l7cCgwQhKkE1rbbgZn8XzjcnwB5OIVYNjLOU2IEhRQVc5
8UrSPKbvNqa6ctRXe1whKqEkStT8ocbwOiYtiFyCuvT5iYwVxhHkOXrfA/Tlg0br
9T9UsVJ+vDTWl5Cf9hvc1ptUQsR9kyGjb3X64TB07I3sCmOlMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsvxsMSMGtOJ3W1l1DW+u5dAQLBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx
NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmJiNzU0NmUtZTAwYS0z
ZDFmLWE1ZWMtNzY2ZTM2OWUxZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk
YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi
NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl
NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCacMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdxPtB+uFiT0smxa1Zrj1TdvSAebMC1qf4CUZmhJYsF9E+flqFQu9g3
RsZkGuibNXHLmrPo4Ldpwylhphx+Lgc3VN7I3UmtKU8Vbz5GH1pUN8b0jvLWUJa3
AWvKWc70FxdlLItH+aIP/NKDID0IY5ae5jvzoRClxzVHYjXLumhphQLxOWgfOxR5
meRg1WEdBCjScnLnntR0n4UwAE0a9vE+cpbzy0fFJlNMOozAcfDEUxKgjgy7M1yS
KKduHAYG+zKesmME2sjKnvmBGSdCPqICrYD+Pm463QkLXyMvB3meil00po2SkF3r
fAocLqqdGorzssm9jdelz8diwWFs89g=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:36 2025 by rpki-client on console.sobornost.net