Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa
File: ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa (raw, json)
Hash identifier: TptaqdjZmq5F4i9bAw0c0+15HUu7lrdoK/iIcMLvIDY=
Subject key identifier: C7:27:F9:9D:DB:FB:DE:88:20:33:C5:9A:F7:D9:5D:18:9B:3F:EA:6D
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44D06D3463899E0ED9E00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 162.223.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4d:06:d3:46:38:99:e0:ed:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=53c08b3c-7c61-46cd-9464-eebca8294e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:6d:e4:55:f2:4a:59:d6:ef:1e:49:4c:21:
c0:cd:eb:ee:ec:22:d4:7e:08:88:19:d0:cc:83:5f:
83:94:f2:d7:11:38:aa:f8:ef:67:8d:b0:00:c8:4e:
56:da:4c:37:5e:7a:bb:48:47:e5:02:11:e9:b6:3d:
e1:43:17:43:3c:2b:17:de:1f:d4:0b:ac:93:82:11:
75:aa:39:2d:02:e1:04:87:b1:fb:e3:27:45:60:46:
b8:cc:c4:ba:0d:77:d7:26:88:62:5a:87:99:6d:a8:
72:cb:16:f1:4d:c8:19:82:25:a0:79:04:53:78:c9:
ff:3e:e7:5f:d1:68:5b:bc:7a:09:5d:7a:2f:66:38:
de:4a:3c:3e:ed:ba:bc:e1:51:15:f4:a1:0e:28:b3:
dd:95:17:a5:32:11:2e:03:8b:e8:81:49:5a:61:e4:
a4:59:02:94:ae:17:fb:11:f7:f6:07:27:68:6b:e1:
f6:4b:e4:d5:2c:84:ea:6e:f9:7a:c0:46:92:9a:3b:
a6:10:d1:6c:c1:b2:35:d2:98:41:f5:fc:96:30:19:
b9:bc:29:ae:07:a8:8c:47:9e:31:e7:01:ea:51:94:
dc:82:e0:7f:66:8c:bf:bf:2f:62:81:8e:24:07:91:
4f:1a:f9:d7:89:43:55:b6:30:0b:b2:ae:a6:df:d1:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:27:F9:9D:DB:FB:DE:88:20:33:C5:9A:F7:D9:5D:18:9B:3F:EA:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.223.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:97:5e:fa:b0:1a:73:c6:72:68:34:c1:e2:b4:17:bf:4d:b2:
b5:25:14:b8:24:8d:6f:e2:fb:14:b5:71:95:c8:a1:c1:09:3e:
34:37:3f:f3:44:66:3b:80:f3:ab:59:41:21:a1:f5:58:11:77:
cb:8e:99:af:e3:f0:12:86:c1:5b:81:cf:e8:a5:4a:94:8f:f2:
8a:54:cb:fd:06:fc:f1:4c:e2:8e:05:3d:ca:f8:09:18:b8:c0:
4d:be:3c:d5:40:63:d1:78:6d:27:30:18:be:fc:43:ce:49:a6:
f3:b1:1b:ae:c2:19:22:d6:ca:73:f2:9a:c1:0c:68:55:dc:ad:
44:af:81:67:11:e5:45:b7:8c:27:f4:66:f4:be:bf:ce:8c:d5:
91:e9:c4:bd:bc:0f:be:04:66:f9:09:5b:2d:4a:b6:88:8b:b7:
89:7a:3f:dd:a6:e8:93:a7:b2:7c:80:f5:57:39:72:cc:cc:1d:
2b:48:67:9a:46:5a:3b:1b:03:0e:a0:00:4f:2e:f7:3f:fd:fb:
37:ee:bb:db:c6:45:ef:1e:e0:06:cd:b5:15:94:53:b4:bd:09:
d5:31:d3:7e:bd:72:9e:d3:43:c8:0c:15:b7:b0:b6:5c:2a:e8:
47:8b:73:e7:40:55:e5:99:8d:39:01:ec:39:7d:20:fa:3c:3e:
00:ad:4b:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxE0G00Y4meDtngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTNjMDhiM2MtN2M2MS00NmNkLTk0NjQtZWViY2E4Mjk0ZTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/dt5FXySlnW7x5JTCHAzevu7CLUfgiIGdDM
g1+DlPLXETiq+O9njbAAyE5W2kw3Xnq7SEflAhHptj3hQxdDPCsX3h/UC6yTghF1
qjktAuEEh7H74ydFYEa4zMS6DXfXJohiWoeZbahyyxbxTcgZgiWgeQRTeMn/Pudf
0WhbvHoJXXovZjjeSjw+7bq84VEV9KEOKLPdlRelMhEuA4vogUlaYeSkWQKUrhf7
Eff2Bydoa+H2S+TVLITqbvl6wEaSmjumENFswbI10phB9fyWMBm5vCmuB6iMR54x
5wHqUZTcguB/Zoy/vy9igY4kB5FPGvnXiUNVtjALsq6m39FADwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcn+Z3b+96IIDPFmvfZXRibP+ptMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZWEyZTRjMGMtNDkzMy0z
OTVlLWFhOTctNGE2ZWJhYzg0ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICXXvqwGnPGcmg0weK0F79NsrUlFLgkjW/i+xS1cZXIocEJPjQ3P/NE
ZjuA86tZQSGh9VgRd8uOma/j8BKGwVuBz+ilSpSP8opUy/0G/PFM4o4FPcr4CRi4
wE2+PNVAY9F4bScwGL78Q85JpvOxG67CGSLWynPymsEMaFXcrUSvgWcR5UW3jCf0
ZvS+v86M1ZHpxL28D74EZvkJWy1KtoiLt4l6P92m6JOnsnyA9Vc5cszMHStIZ5pG
WjsbAw6gAE8u9z/9+zfuu9vGRe8e4AbNtRWUU7S9CdUx0369cp7TQ8gMFbewtlwq
6EeLc+dAVeWZjTkB7Dl9IPo8PgCtS4Q=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net