Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/89861158-9396-32bd-afbf-2ac552550fd7.roa
File: 89861158-9396-32bd-afbf-2ac552550fd7.roa (raw, json)
Hash identifier: eoi2Z9cOM95jT3GFscCj5/7BfB/e3Hr+l1Gga9IsNdM=
Subject key identifier: 6D:E8:93:7E:29:8F:81:C2:F3:DA:BD:4D:46:27:8D:1A:0B:DB:B2:A0
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858496CE4546F04F207F543479800
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/89861158-9396-32bd-afbf-2ac552550fd7.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 25697
IP address blocks: 209.50.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:54:6f:04:f2:07:f5:43:47:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=eb672142-e9d2-401a-9215-ee7eac88a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:df:0f:db:1d:ce:a2:30:be:c1:e6:14:1b:
01:cf:c2:8d:c0:d6:c3:8c:be:ed:a4:7c:3c:60:56:
a9:71:88:ce:c9:dd:e3:5b:6b:d0:e7:30:dc:a2:da:
be:70:f1:65:dc:9a:4e:d1:18:e3:b0:6c:7d:10:a0:
3c:d7:2d:0a:e1:9e:15:03:af:ca:0d:13:62:73:c3:
28:8c:43:81:15:f3:64:c8:66:b5:7b:82:e5:6c:6f:
c0:33:04:bc:39:0e:bd:b7:c8:55:d8:03:50:ca:47:
56:e0:4a:4b:91:de:43:14:70:85:2c:54:c3:41:f5:
dc:9a:81:24:1e:fa:b4:53:2a:94:ed:46:51:6d:52:
ca:ed:7d:23:82:96:96:bc:ba:6c:ca:58:dd:6f:7d:
83:47:0a:01:0e:d6:cc:1c:ac:23:a3:c2:8b:f8:ea:
57:d1:01:0a:e8:1e:f0:d0:de:d6:a1:7c:3c:21:60:
19:fa:e3:78:80:63:a2:1d:48:9a:54:47:79:cd:7f:
e9:95:36:c5:c1:a9:bd:00:e4:10:d2:07:0d:d1:10:
bc:37:25:5d:ee:99:4a:25:47:30:61:f6:66:c8:63:
ee:75:21:2b:93:ed:55:66:83:3a:ba:7a:53:11:36:
14:17:c8:43:a3:e1:31:e4:b4:b1:d7:8f:ce:73:38:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:93:7E:29:8F:81:C2:F3:DA:BD:4D:46:27:8D:1A:0B:DB:B2:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/89861158-9396-32bd-afbf-2ac552550fd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.50.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4b:8d:94:63:3d:99:7e:1d:0a:ec:f2:8e:b4:95:ed:7c:13:
40:df:73:5d:1e:6c:b7:1f:a5:ea:6a:7c:f5:9d:18:34:3c:1b:
7c:1b:94:1a:f7:8d:c0:f3:54:31:17:82:87:2d:75:1c:d8:da:
f3:7e:96:9d:bf:7a:81:28:df:1d:36:5f:5b:a3:0b:6c:57:d2:
08:2b:1b:3c:49:bf:c8:04:c4:fe:6e:76:4f:db:6e:69:96:db:
a2:00:09:73:00:02:c0:6b:e8:ab:e6:7c:ed:b0:ab:e4:7f:26:
56:0b:1b:7d:12:86:07:64:70:87:62:31:41:63:72:dd:c1:9c:
f5:29:20:ee:76:3e:5f:8d:28:0e:b6:5a:f6:cc:d5:cb:89:f0:
6f:4f:74:cb:f9:97:c8:d3:10:cd:b9:6c:b8:af:d1:ce:57:84:
63:4e:6d:c7:04:9e:30:25:49:4d:dc:c3:86:b9:e4:8b:10:6f:
92:a3:7b:bf:a0:49:12:f8:da:12:f2:3a:57:35:5d:bb:21:8b:
66:97:0c:ad:97:94:64:ce:5b:57:dc:74:a3:e1:38:91:c9:b8:
d6:da:13:88:cc:ae:53:91:08:dd:9d:39:d3:56:03:cc:a9:1b:
d1:09:1d:53:f8:13:ba:db:21:d2:ea:63:30:2c:7c:e0:38:72:
b0:01:f0:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FRvBPIH9UNHmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx
MzExMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
ZWI2NzIxNDItZTlkMi00MDFhLTkyMTUtZWU3ZWFjODhhNThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizPfD9sdzqIwvsHmFBsBz8KNwNbDjL7tpHw8
YFapcYjOyd3jW2vQ5zDcotq+cPFl3JpO0RjjsGx9EKA81y0K4Z4VA6/KDRNic8Mo
jEOBFfNkyGa1e4LlbG/AMwS8OQ69t8hV2ANQykdW4EpLkd5DFHCFLFTDQfXcmoEk
Hvq0UyqU7UZRbVLK7X0jgpaWvLpsyljdb32DRwoBDtbMHKwjo8KL+OpX0QEK6B7w
0N7WoXw8IWAZ+uN4gGOiHUiaVEd5zX/plTbFwam9AOQQ0gcN0RC8NyVd7plKJUcw
YfZmyGPudSErk+1VZoM6unpTETYUF8hDo+Ex5LSx14/OczgVoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3ok34pj4HC89q9TUYnjRoL27KgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi
YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvODk4NjExNTgtOTM5Ni0z
MmJkLWFmYmYtMmFjNTUyNTUwZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl
NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2
MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy
Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0TIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJLjZRjPZl+HQrs8o60le18E0Dfc10ebLcfpepqfPWdGDQ8G3wblBr3
jcDzVDEXgoctdRzY2vN+lp2/eoEo3x02X1ujC2xX0ggrGzxJv8gExP5udk/bbmmW
26IACXMAAsBr6KvmfO2wq+R/JlYLG30ShgdkcIdiMUFjct3BnPUpIO52Pl+NKA62
WvbM1cuJ8G9PdMv5l8jTEM25bLiv0c5XhGNObccEnjAlSU3cw4a55IsQb5Kje7+g
SRL42hLyOlc1Xbshi2aXDK2XlGTOW1fcdKPhOJHJuNbaE4jMrlORCN2dOdNWA8yp
G9EJHVP4E7rbIdLqYzAsfOA4crAB8KM=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net