Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa
File: dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa (raw, json)
Hash identifier: wtGG3NlAqIwiERrSmVN6qHD4uTtzjHkTxuvwKoN2vSw=
Subject key identifier: 6A:25:08:7A:37:D8:1B:84:37:81:6D:1D:5D:04:62:1F:3D:44:8B:FC
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858496A19AD18CF03ED39D56DC780
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 25697
IP address blocks: 209.151.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:ad:18:cf:03:ed:39:d5:6d:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=8678f5aa-f367-4227-aa9b-a46e4514d5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:90:38:98:b2:87:81:1b:2f:a1:69:3b:2c:8b:
b7:30:41:fd:b6:4e:10:17:33:bc:fa:f1:26:c1:af:
8d:83:30:c4:96:02:83:ac:c1:8e:56:fd:c0:fe:23:
6c:d7:5e:6b:91:6c:f3:ee:52:fa:20:e5:ab:f5:e9:
c9:45:9c:b8:a3:12:d0:c4:d5:51:fa:27:75:63:d0:
ed:7d:af:32:94:f8:76:fb:49:8a:ee:f8:0c:6b:fa:
77:5f:43:1a:3e:2e:14:71:6a:e2:db:b0:fe:03:a0:
25:2b:72:24:af:2f:17:1c:f0:1b:f0:a5:ff:0e:9e:
f1:a9:ce:ce:01:af:cf:33:98:81:c3:c7:f7:67:bc:
9f:bb:68:d7:7b:12:bb:af:b2:8f:9f:a1:55:0d:64:
2d:8b:c0:d0:9d:ad:dd:05:d1:46:74:0d:80:58:23:
9d:84:2f:15:24:7f:d1:c8:b3:dc:82:ab:37:c9:ae:
90:21:42:45:2e:fc:cc:48:a7:09:c8:36:14:c2:61:
ab:c4:e0:bf:23:8a:27:73:87:3c:09:ac:07:d8:43:
0a:d7:63:e3:f6:0d:b8:f7:40:f7:a7:37:77:27:51:
f1:65:94:a1:b9:69:a2:f4:9e:1f:4e:0e:2e:79:55:
e8:87:b9:5b:05:92:5b:d0:6c:03:62:19:27:b8:5a:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:25:08:7A:37:D8:1B:84:37:81:6D:1D:5D:04:62:1F:3D:44:8B:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:aa:54:7f:0d:40:37:be:d3:45:d6:f4:24:54:1b:b6:1b:f9:
6e:ec:03:74:a8:80:0c:05:ff:b0:36:a6:95:b3:70:43:b2:f0:
b4:d8:0c:1a:46:0a:a1:3c:17:0f:ca:5e:94:38:93:c8:38:36:
56:4c:d1:49:45:f4:f4:29:10:e2:0e:76:63:70:d0:eb:54:87:
c1:2b:31:bb:71:93:3d:08:94:42:67:4c:0a:18:d9:18:97:f8:
e6:f4:8d:f3:7f:fa:3a:93:39:d7:e9:f8:ae:17:65:73:5a:1f:
1f:c7:bb:a7:7b:3b:cd:00:6b:95:81:75:8d:b0:00:a6:92:43:
ad:2e:fa:93:9d:bb:bf:15:ce:a9:6a:58:16:37:03:6a:83:ba:
07:bd:4f:9f:f5:07:51:32:fd:d3:e6:1c:92:69:aa:a3:93:5d:
2c:48:3f:fe:3d:4b:25:53:90:aa:0b:2a:e3:20:c0:63:ff:ae:
93:64:0d:69:6e:b5:42:3c:fc:5d:67:11:d3:a7:ff:56:ce:22:
b6:07:99:90:51:bd:70:d4:75:5d:15:10:2a:3b:4d:af:62:93:
8f:06:d1:31:4b:f8:73:92:a7:ae:b2:d6:93:44:ea:2f:59:71:
9f:5d:3c:e7:33:7f:71:5f:23:9e:73:4d:b6:ed:1f:9d:1f:c9:
33:f4:0f:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGa0YzwPtOdVtx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx
MzExMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
ODY3OGY1YWEtZjM2Ny00MjI3LWFhOWItYTQ2ZTQ1MTRkNWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJA4mLKHgRsvoWk7LIu3MEH9tk4QFzO8+vEm
wa+NgzDElgKDrMGOVv3A/iNs115rkWzz7lL6IOWr9enJRZy4oxLQxNVR+id1Y9Dt
fa8ylPh2+0mK7vgMa/p3X0MaPi4UcWri27D+A6AlK3Ikry8XHPAb8KX/Dp7xqc7O
Aa/PM5iBw8f3Z7yfu2jXexK7r7KPn6FVDWQti8DQna3dBdFGdA2AWCOdhC8VJH/R
yLPcgqs3ya6QIUJFLvzMSKcJyDYUwmGrxOC/I4onc4c8CawH2EMK12Pj9g2490D3
pzd3J1HxZZShuWmi9J4fTg4ueVXoh7lbBZJb0GwDYhknuFphrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGolCHo32BuEN4FtHV0EYh89RIv8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi
YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvZGQ2YmNiNGEtYjAwYS0z
MGQ5LWFlZTEtZjFmODdlYmZjYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl
NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2
MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy
Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZeeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmqVH8NQDe+00XW9CRUG7Yb+W7sA3SogAwF/7A2ppWzcEOy8LTYDBpG
CqE8Fw/KXpQ4k8g4NlZM0UlF9PQpEOIOdmNw0OtUh8ErMbtxkz0IlEJnTAoY2RiX
+Ob0jfN/+jqTOdfp+K4XZXNaHx/Hu6d7O80Aa5WBdY2wAKaSQ60u+pOdu78Vzqlq
WBY3A2qDuge9T5/1B1Ey/dPmHJJpqqOTXSxIP/49SyVTkKoLKuMgwGP/rpNkDWlu
tUI8/F1nEdOn/1bOIrYHmZBRvXDUdV0VECo7Ta9ik48G0TFL+HOSp66y1pNE6i9Z
cZ9dPOczf3FfI55zTbbtH50fyTP0D80=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net