Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa
File: 0cb626ec-8048-350f-9f19-eb8f88558842.roa (raw, json)
Hash identifier: m6rbOJmOqUYWJ9GBPd5jjXYPHIY7tZIqHsRLgaJoc74=
Subject key identifier: 71:AB:C1:4D:2C:41:CE:D0:31:D0:6B:A1:FB:9A:A8:04:AC:04:29:0F
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584957F4095D28F8BCF95F62D300
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11290
IP address blocks: 24.138.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:09:5d:28:f8:bc:f9:5f:62:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=7d40d5c4-2d3c-4708-934d-d5929b3d57b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:fd:e5:6e:c6:d5:b0:f7:30:8f:2b:10:0e:
db:ae:a6:63:dc:67:1e:09:25:19:71:17:f2:3c:3e:
91:69:51:6f:f5:20:af:73:61:69:44:3b:0d:79:5f:
6a:50:62:17:38:11:ff:4a:dc:d7:42:ab:ea:28:79:
d6:a2:d2:6f:64:ee:c9:38:01:4a:3a:07:40:62:28:
5a:d0:0d:63:f5:03:e3:3e:c8:d1:81:62:66:a2:fd:
82:bc:73:67:a1:60:67:47:63:d9:41:58:b2:41:30:
24:17:f3:3a:d4:68:19:ad:c3:5f:2e:fa:d6:09:13:
70:fb:ed:af:b6:3c:bd:5e:67:76:c1:32:e1:f8:4c:
63:a6:c4:38:78:79:f1:5d:34:2a:e6:90:31:25:51:
52:0e:82:90:7d:fd:72:31:66:c2:5c:c6:6c:6c:a8:
94:2e:17:e1:84:2f:a6:3d:1b:a2:5a:a7:fe:4c:25:
81:a9:7d:ac:97:95:12:8b:38:8e:69:f5:e9:e3:91:
64:ca:3a:12:8e:39:ee:eb:db:57:26:2b:2d:2b:85:
96:c4:74:b5:e6:b5:8f:a3:e2:d0:b8:87:4d:fe:31:
e9:5c:f3:21:a6:b4:6a:f8:33:1c:0b:47:0d:d4:d7:
1d:5e:95:04:51:5c:ab:71:86:2e:34:3f:1c:54:ab:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:C1:4D:2C:41:CE:D0:31:D0:6B:A1:FB:9A:A8:04:AC:04:29:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.138.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:ba:73:bd:87:3e:6a:f3:1d:69:cd:ef:6a:0c:04:f8:89:13:
ea:72:b8:79:57:20:4a:86:72:35:7c:df:2e:67:9c:b6:9a:40:
d1:95:54:a3:8f:b7:f6:15:53:98:dd:50:4c:2e:ae:0a:bd:9d:
78:44:49:80:c7:f9:5d:1f:51:2e:5e:d4:f7:3e:f2:ba:0e:5b:
d3:6c:23:93:35:08:8d:79:97:db:4f:3c:b4:80:f4:ca:8a:d0:
0b:dd:50:37:e5:16:fd:35:d2:6a:29:9e:ec:31:0b:ef:51:0a:
24:3f:30:93:88:21:1a:fc:ae:bb:23:ad:7e:9b:e9:ac:96:b6:
0b:58:12:66:2a:83:23:b4:b3:6f:05:af:de:e4:24:d9:45:39:
a4:9f:ac:6d:0f:54:52:30:91:0d:c9:08:89:85:cc:62:3d:17:
d9:6e:21:60:ce:a4:56:e2:92:28:53:85:51:2d:d5:14:ed:55:
6a:12:5b:ce:5e:b0:24:99:63:98:10:f7:9a:7e:26:30:dd:19:
b2:0f:86:63:f2:e9:7a:d6:68:08:69:81:2a:eb:86:03:29:7b:
76:f1:f4:8b:0c:1d:74:1a:db:25:f0:98:58:e4:85:09:e1:16:
f6:99:4c:a9:f9:6c:fe:f7:06:70:de:b3:1b:af:85:41:32:55:
0b:53:42:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AldKPi8+V9i0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
N2Q0MGQ1YzQtMmQzYy00NzA4LTkzNGQtZDU5MjliM2Q1N2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjL95W7G1bD3MI8rEA7brqZj3GceCSUZcRfy
PD6RaVFv9SCvc2FpRDsNeV9qUGIXOBH/StzXQqvqKHnWotJvZO7JOAFKOgdAYiha
0A1j9QPjPsjRgWJmov2CvHNnoWBnR2PZQViyQTAkF/M61GgZrcNfLvrWCRNw++2v
tjy9Xmd2wTLh+ExjpsQ4eHnxXTQq5pAxJVFSDoKQff1yMWbCXMZsbKiULhfhhC+m
PRuiWqf+TCWBqX2sl5USiziOafXp45FkyjoSjjnu69tXJistK4WWxHS15rWPo+LQ
uIdN/jHpXPMhprRq+DMcC0cN1NcdXpUEUVyrcYYuND8cVKsB+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGrwU0sQc7QMdBrofuaqASsBCkPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMGNiNjI2ZWMtODA0OC0z
NTBmLTlmMTktZWI4Zjg4NTU4ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIpQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+6c72HPmrzHWnN72oMBPiJE+pyuHlXIEqGcjV83y5nnLaaQNGVVKOP
t/YVU5jdUEwurgq9nXhESYDH+V0fUS5e1Pc+8roOW9NsI5M1CI15l9tPPLSA9MqK
0AvdUDflFv010mopnuwxC+9RCiQ/MJOIIRr8rrsjrX6b6ayWtgtYEmYqgyO0s28F
r97kJNlFOaSfrG0PVFIwkQ3JCImFzGI9F9luIWDOpFbikihThVEt1RTtVWoSW85e
sCSZY5gQ95p+JjDdGbIPhmPy6XrWaAhpgSrrhgMpe3bx9IsMHXQa2yXwmFjkhQnh
FvaZTKn5bP73BnDesxuvhUEyVQtTQi4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net