Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
File: fda8929c-8853-3deb-9937-6ac2a4d97c46.roa (raw, json)
Hash identifier: S3KIxJy894BwbKIuN4BBDLHy7XdmuNHAfqmRlc9DKLI=
Subject key identifier: B0:EA:79:74:60:F6:BF:BE:E5:13:04:35:9C:38:37:0C:2C:7F:F8:D4
Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
Certificate serial: 010D0C9F432858494CC94543FA2C0A6076F749C0
Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 198487
IP address blocks: 23.156.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:45:43:fa:2c:0a:60:76:f7:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=eaaaafab-f757-4527-bbea-a9eead5ec286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:2f:b8:52:23:84:7d:f6:0d:af:d3:27:fb:
6b:3d:29:43:0c:aa:e5:fa:16:31:14:50:c2:5b:a4:
6e:7a:d8:5a:b9:5c:bb:1f:ca:04:9c:bd:80:cb:e3:
42:7d:73:df:b0:50:ee:63:2e:4c:e7:2a:0b:06:c9:
d3:ad:a5:c6:82:b1:c7:7b:e8:8f:72:ea:ee:d1:47:
70:38:12:f2:16:e4:71:77:da:3a:b2:8b:9a:2b:d4:
cb:24:65:09:fa:b3:ac:cf:21:66:47:a4:bb:61:6a:
ca:c3:07:72:2b:ce:97:af:9e:3a:f3:64:ca:42:f4:
cf:90:c9:38:63:9f:cd:73:4c:d7:2f:cf:ae:bd:21:
3b:9b:e3:ed:e3:9e:56:0f:e0:f2:24:fa:2a:54:20:
29:8a:a6:83:3d:30:d0:8e:e8:7a:3c:2c:82:d8:02:
84:f8:58:e0:34:e3:db:35:d5:87:3f:52:d8:8e:f2:
6d:61:ce:ca:ef:4d:8a:c0:35:b4:35:70:24:f8:2a:
5e:7e:40:15:4a:95:d8:0a:ff:a6:71:3a:85:16:ee:
16:ad:02:2d:b6:77:7e:c8:32:68:6f:dd:1f:2f:09:
3a:80:39:62:ec:f7:62:f8:95:1d:14:42:3d:33:b5:
36:9e:38:02:88:48:fb:01:17:86:b9:be:fd:35:53:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:79:74:60:F6:BF:BE:E5:13:04:35:9C:38:37:0C:2C:7F:F8:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl
X509v3 Authority Key Identifier:
keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:3d:46:e6:05:1e:f3:25:23:79:75:06:79:c2:c1:6f:1a:b6:
b0:6e:99:e1:c0:a6:54:2c:99:1a:96:bc:b0:f8:ad:4f:dd:ee:
1d:60:4c:33:a6:c2:99:bb:e2:6b:4c:cb:bb:9f:94:2d:ae:ad:
63:87:44:2d:1b:2b:b3:30:51:13:a3:fa:ac:60:6a:be:c3:87:
e1:a6:bb:75:11:af:37:c6:9c:38:3d:98:2c:18:56:9b:3f:03:
b6:9d:ad:fa:b3:a2:7d:a5:f8:2e:ca:c8:bb:4d:48:fe:47:2e:
be:fd:44:86:cf:0b:ae:08:33:74:a5:c4:33:20:7d:ee:7c:3e:
72:d0:7a:7d:ac:2d:2a:24:a2:c0:23:5d:c0:cd:45:bb:be:cb:
15:92:ca:c1:22:dd:df:58:2b:69:04:0b:35:22:cf:47:e8:25:
59:01:08:79:a0:86:ab:61:35:4f:ca:b5:a1:86:f2:15:a2:80:
4f:38:56:88:a1:91:b5:1f:b4:25:d5:a3:e1:70:4d:9f:f2:6f:
42:fd:bc:c2:a2:1f:c9:9b:67:82:63:d7:11:c6:e3:63:d1:d6:
5e:7e:40:95:d8:de:d2:53:9a:4d:78:77:81:5a:a9:0b:41:6e:
92:e7:01:1b:34:07:e0:2c:94:55:4f:04:05:66:e4:81:c8:16:
ad:0a:c8:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUVD+iwKYHb3ScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2QxNzJhZjktMjU4ZC00N2QyLWI0ZTYtN2UwYzAyMTUy
ZmVhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZWFhYWFmYWItZjc1Ny00NTI3LWJiZWEtYTllZWFkNWVjMjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOAvuFIjhH32Da/TJ/trPSlDDKrl+hYxFFDC
W6RuethauVy7H8oEnL2Ay+NCfXPfsFDuYy5M5yoLBsnTraXGgrHHe+iPcuru0Udw
OBLyFuRxd9o6souaK9TLJGUJ+rOszyFmR6S7YWrKwwdyK86Xr54682TKQvTPkMk4
Y5/Nc0zXL8+uvSE7m+Pt455WD+DyJPoqVCApiqaDPTDQjuh6PCyC2AKE+FjgNOPb
NdWHP1LYjvJtYc7K702KwDW0NXAk+CpefkAVSpXYCv+mcTqFFu4WrQIttnd+yDJo
b90fLwk6gDli7Pdi+JUdFEI9M7U2njgCiEj7AReGub79NVOEywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDqeXRg9r++5RMENZw4Nwwsf/jUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3
MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBjMDIxNTJmZWEvZmRhODkyOWMtODg1My0z
ZGViLTk5MzctNmFjMmE0ZDk3YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2QxNzJhZjktMjU4ZC00N2QyLWI0
ZTYtN2UwYzAyMTUyZmVhLzdkMTcyYWY5LTI1OGQtNDdkMi1iNGU2LTdlMGMwMjE1
MmZlYS5jcmwwHwYDVR0jBBgwFoAUcQR+llhV3D3f6Qf17Duou2f8/NEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBj
MDIxNTJmZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA49RuYFHvMlI3l1BnnCwW8atrBumeHAplQsmRqWvLD4rU/d7h1gTDOm
wpm74mtMy7uflC2urWOHRC0bK7MwUROj+qxgar7Dh+Gmu3URrzfGnDg9mCwYVps/
A7adrfqzon2l+C7KyLtNSP5HLr79RIbPC64IM3SlxDMgfe58PnLQen2sLSokosAj
XcDNRbu+yxWSysEi3d9YK2kECzUiz0foJVkBCHmghqthNU/KtaGG8hWigE84Voih
kbUftCXVo+FwTZ/yb0L9vMKiH8mbZ4Jj1xHG42PR1l5+QJXY3tJTmk14d4FaqQtB
bpLnARs0B+AslFVPBAVm5IHIFq0KyOA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:51 2025 by rpki-client on console.sobornost.net