Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af254d16-e698-393e-9cd3-e39bd484cccd.roa
File: af254d16-e698-393e-9cd3-e39bd484cccd.roa (raw, json)
Hash identifier: YM77b92Ggl/ZS1Atd9YiVvTEjrheLw2QYUkvt+ZHO2g=
Subject key identifier: EF:BC:00:94:3C:F8:30:19:08:E9:A0:8D:6A:93:AF:EE:FF:8F:01:E1
Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial: 010D0C9F432858493243E47F8EFA7DB37DA88720
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af254d16-e698-393e-9cd3-e39bd484cccd.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 26744
IP address blocks: 150.252.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e4:7f:8e:fa:7d:b3:7d:a8:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=4431393f-468a-445f-bae0-62697d293a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:29:b0:6f:de:18:77:35:e2:f6:14:9f:d5:
df:83:48:ea:4a:09:99:90:3f:77:79:a9:ac:6f:46:
3b:e8:2b:10:d4:f4:e8:63:6e:a7:28:51:d6:a9:f3:
bc:3f:d2:6d:ed:b0:43:24:2d:9e:7d:d9:c7:76:c2:
a3:44:e6:37:f8:96:1e:90:6e:18:eb:db:63:ad:05:
72:49:41:71:3a:41:a3:2a:d5:e6:49:8e:73:bb:1a:
86:6f:7c:8b:79:8c:22:6e:f9:56:bf:2c:9b:8c:d5:
4a:d2:08:0a:b4:4e:14:1d:05:ac:a6:46:ef:e7:94:
c5:09:9a:4e:29:fd:64:18:a8:4b:d5:a4:e1:30:5b:
71:9f:b9:6f:f1:ab:cb:b8:08:e9:ad:a1:75:81:a9:
ce:6d:93:73:81:10:9b:e8:89:a5:b3:66:24:7f:5b:
97:f4:bc:0d:52:10:9a:23:f7:30:40:f3:55:5e:d6:
a9:d1:dc:66:69:41:44:ac:9c:d8:4e:2a:cb:89:54:
3e:df:32:fe:87:2b:81:a0:48:3e:cf:62:e9:08:01:
fe:ff:ca:af:e0:a1:86:d0:71:0b:8c:73:7a:5a:82:
bd:45:9f:5a:90:54:db:d5:74:be:d9:71:f8:b3:33:
22:18:62:27:15:72:20:58:b5:81:6f:b1:cd:44:09:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BC:00:94:3C:F8:30:19:08:E9:A0:8D:6A:93:AF:EE:FF:8F:01:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af254d16-e698-393e-9cd3-e39bd484cccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
X509v3 Authority Key Identifier:
keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
sbgp-ipAddrBlock: critical
IPv4:
150.252.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c6:2e:7b:d9:be:c2:72:4d:e3:cc:d6:38:9a:47:83:4f:42:
6f:cb:50:fb:0c:22:32:83:b3:68:e8:d3:8e:9f:0d:01:4a:03:
ea:79:da:bb:29:37:a4:df:2d:9a:a2:29:33:d1:33:9a:9b:91:
56:c3:11:07:14:7f:55:7d:d5:c4:78:58:5b:9d:cd:36:3c:4f:
e4:aa:28:41:cc:a6:5f:cc:ef:74:c7:3c:b9:bc:04:c5:38:b8:
0e:e5:e5:19:24:90:e2:a0:11:51:b9:ea:ff:26:78:33:7f:4a:
e4:dc:2e:6c:25:28:0d:12:36:44:bc:af:3d:3a:30:69:91:e7:
5a:d1:b0:6f:e7:ae:73:58:2c:3e:95:61:f6:2f:d2:1b:92:a4:
ef:eb:4f:e0:b1:65:04:f9:03:1d:12:dc:de:0a:a2:34:93:04:
45:3a:60:b1:07:0a:88:00:ed:ee:0a:6e:ec:d3:10:e1:9e:38:
f9:8b:cd:4b:f9:b5:62:b2:f3:6c:19:f9:3e:2f:93:1a:7c:09:
63:11:df:69:ef:14:25:e4:53:ee:ad:ac:1c:ca:54:4c:e3:f7:
67:45:ce:be:7a:8a:a0:1f:2c:dc:df:7f:d6:71:ba:48:11:23:
cb:81:8a:b8:4f:3c:03:a7:c5:b2:0b:fa:9c:a3:85:b6:33:cf:
91:c7:3e:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+R/jvp9s32ohyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
NDQzMTM5M2YtNDY4YS00NDVmLWJhZTAtNjI2OTdkMjkzYTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2ApsG/eGHc14vYUn9Xfg0jqSgmZkD93eams
b0Y76CsQ1PToY26nKFHWqfO8P9Jt7bBDJC2efdnHdsKjROY3+JYekG4Y69tjrQVy
SUFxOkGjKtXmSY5zuxqGb3yLeYwibvlWvyybjNVK0ggKtE4UHQWspkbv55TFCZpO
Kf1kGKhL1aThMFtxn7lv8avLuAjpraF1ganObZNzgRCb6Imls2Ykf1uX9LwNUhCa
I/cwQPNVXtap0dxmaUFErJzYTirLiVQ+3zL+hyuBoEg+z2LpCAH+/8qv4KGG0HEL
jHN6WoK9RZ9akFTb1XS+2XH4szMiGGInFXIgWLWBb7HNRAlxtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+8AJQ8+DAZCOmgjWqTr+7/jwHhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvYWYyNTRkMTYtZTY5OC0z
OTNlLTljZDMtZTM5YmQ0ODRjY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPGLnvZvsJyTePM1jiaR4NPQm/LUPsMIjKDs2jo046fDQFKA+p52rsp
N6TfLZqiKTPRM5qbkVbDEQcUf1V91cR4WFudzTY8T+SqKEHMpl/M73THPLm8BMU4
uA7l5RkkkOKgEVG56v8meDN/SuTcLmwlKA0SNkS8rz06MGmR51rRsG/nrnNYLD6V
YfYv0huSpO/rT+CxZQT5Ax0S3N4KojSTBEU6YLEHCogA7e4KbuzTEOGeOPmLzUv5
tWKy82wZ+T4vkxp8CWMR32nvFCXkU+6trBzKVEzj92dFzr56iqAfLNzff9ZxukgR
I8uBirhPPAOnxbIL+pyjhbYzz5HHPoU=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net