Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/980c27f1-7286-33e6-b287-f2eaef87b326.roa
File: 980c27f1-7286-33e6-b287-f2eaef87b326.roa (raw, json)
Hash identifier: MboZzYWfwSxTYuWt7979Fg9eR3Bl1xAYrXGSTt/IgO0=
Subject key identifier: D0:EA:DB:7E:66:80:43:86:5B:B7:81:0C:AA:5F:7B:2D:BC:75:64:AF
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F43285848C6E6347E6AF74A2D8EF82C80
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/980c27f1-7286-33e6-b287-f2eaef87b326.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 22885
IP address blocks: 199.0.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:34:7e:6a:f7:4a:2d:8e:f8:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=276c20a9-2bb4-47be-9cbd-1c6c48b451b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:21:eb:09:28:93:5c:28:94:37:56:76:bc:
7c:55:1c:d9:d9:20:0e:fa:75:58:80:2d:4a:14:32:
f6:55:8f:cf:e6:48:24:55:55:64:4d:cf:f4:84:d9:
b5:a3:c3:3d:db:ea:31:c4:5c:59:ae:09:d3:6f:0d:
da:7f:2a:73:ce:cf:b2:a8:63:a6:bd:7a:bd:7b:9c:
7f:6f:d7:30:0f:31:89:e9:56:02:d0:29:df:68:61:
06:7b:e8:1f:06:e5:4e:15:a3:24:ca:db:1f:4e:6f:
0e:e1:8e:1c:59:e7:4d:9c:c4:df:ce:67:57:bc:2f:
16:d7:d7:e9:f4:50:34:1b:ef:85:65:1a:f9:8c:99:
da:0d:e2:20:2c:c6:41:21:04:1c:7a:82:f1:84:b3:
93:82:d1:89:7e:d8:3f:c6:17:c9:25:01:75:26:9f:
15:43:91:7e:c8:f5:a6:b4:51:97:6c:9a:cf:94:5d:
49:14:f9:f4:5f:32:a4:74:24:a7:66:7e:7d:d7:e6:
2f:42:e9:9d:b4:96:5b:03:89:8a:17:d0:94:a0:fc:
54:cc:4e:60:0c:5f:74:76:1b:8d:61:61:18:a2:59:
95:e4:71:f7:52:4a:04:e6:8b:65:e7:c0:ee:a1:c1:
6b:8b:fa:d6:24:e0:95:d9:a8:84:f7:68:d3:0b:82:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:DB:7E:66:80:43:86:5B:B7:81:0C:AA:5F:7B:2D:BC:75:64:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/980c27f1-7286-33e6-b287-f2eaef87b326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.0.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:29:e5:ab:e7:33:c0:a9:cc:b4:5b:b0:aa:04:88:5a:57:ff:
15:90:2e:fa:bc:8f:41:55:4e:20:0c:2d:c6:dc:e9:c4:15:e8:
44:6d:91:5e:3e:2a:67:98:b1:12:ca:56:f1:ce:75:67:95:5e:
78:20:88:5f:bc:04:8c:17:ad:89:2b:86:b1:48:20:fa:be:d0:
7a:54:93:4d:d9:69:83:b4:37:cd:0b:5e:30:07:05:96:ac:dd:
85:ab:23:b6:1c:64:63:30:09:49:72:2f:ff:4b:04:96:af:6e:
10:68:eb:66:5b:c5:2a:e0:b4:b2:95:a8:2b:b0:12:d2:86:2a:
42:e8:f1:27:5e:43:d7:7e:ae:1a:3d:44:60:46:b6:f1:8c:1e:
34:a0:54:ce:96:bc:a1:27:29:ba:d8:58:b3:22:e5:47:e7:53:
fa:02:e1:01:b7:d4:07:8a:42:38:04:b5:9b:ec:0a:2e:14:47:
73:77:d8:47:e2:1e:cc:8b:33:74:b7:7c:50:b2:58:d9:41:6d:
96:55:56:a8:aa:69:7c:fb:7e:54:b1:62:86:1f:20:d4:63:71:
d2:b6:c9:e1:18:1f:3d:7d:c6:28:c2:95:e7:4a:95:93:0c:38:
87:91:69:61:9b:e4:d3:c7:3b:32:70:4f:a5:05:65:c1:45:e7:
ad:d7:0e:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jR+avdKLY74LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
Mjc2YzIwYTktMmJiNC00N2JlLTljYmQtMWM2YzQ4YjQ1MWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnQh6wkok1wolDdWdrx8VRzZ2SAO+nVYgC1K
FDL2VY/P5kgkVVVkTc/0hNm1o8M92+oxxFxZrgnTbw3afypzzs+yqGOmvXq9e5x/
b9cwDzGJ6VYC0CnfaGEGe+gfBuVOFaMkytsfTm8O4Y4cWedNnMTfzmdXvC8W19fp
9FA0G++FZRr5jJnaDeIgLMZBIQQceoLxhLOTgtGJftg/xhfJJQF1Jp8VQ5F+yPWm
tFGXbJrPlF1JFPn0XzKkdCSnZn591+YvQumdtJZbA4mKF9CUoPxUzE5gDF90dhuN
YWEYolmV5HH3UkoE5otl58DuocFri/rWJOCV2aiE92jTC4JEiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDq235mgEOGW7eBDKpfey28dWSvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvOTgwYzI3ZjEtNzI4Ni0z
M2U2LWIyODctZjJlYWVmODdiMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIop5avnM8CpzLRbsKoEiFpX/xWQLvq8j0FVTiAMLcbc6cQV6ERtkV4+
KmeYsRLKVvHOdWeVXnggiF+8BIwXrYkrhrFIIPq+0HpUk03ZaYO0N80LXjAHBZas
3YWrI7YcZGMwCUlyL/9LBJavbhBo62ZbxSrgtLKVqCuwEtKGKkLo8SdeQ9d+rho9
RGBGtvGMHjSgVM6WvKEnKbrYWLMi5UfnU/oC4QG31AeKQjgEtZvsCi4UR3N32Efi
HsyLM3S3fFCyWNlBbZZVVqiqaXz7flSxYoYfINRjcdK2yeEYHz19xijCledKlZMM
OIeRaWGb5NPHOzJwT6UFZcFF563XDvg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:37 2025 by rpki-client on console.sobornost.net