Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa
File: affcab7d-6094-3982-8b34-38221efc1254.roa (raw, json)
Hash identifier: y2Q4kf7zQBFmStiXCsPQ2OpZIrIdb/SldfiA0Z3zbL4=
Subject key identifier: E4:ED:32:5D:02:82:31:25:69:22:5A:A5:F0:B0:E6:0C:B6:2B:45:45
Certificate issuer: /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial: 010D0C9F432858491246BE2A466D98C90FF42AC0
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 8075
IP address blocks: 199.255.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:be:2a:46:6d:98:c9:0f:f4:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=224023c7-53f2-4260-b602-f464e271895f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:4a:67:14:d7:eb:86:1c:51:87:20:5d:08:
c7:04:b3:28:80:26:e0:34:1e:00:bf:99:17:ca:95:
c4:39:08:f2:cd:32:c9:d7:21:ff:d5:96:42:c9:bc:
14:56:0b:88:77:9a:fe:98:c3:31:09:52:fc:7a:92:
41:bf:51:6f:97:a1:1e:06:52:91:f6:29:19:44:b7:
ae:b0:ed:3b:9f:8d:9d:87:93:d8:4a:a8:fc:d8:99:
c4:76:f6:37:dc:7f:4a:db:96:47:78:63:c7:5a:6a:
f1:aa:63:40:0a:b2:7a:b3:01:82:a0:10:90:fd:8b:
00:0a:a1:f5:60:97:7b:69:47:71:99:00:48:c5:ab:
c3:b7:08:d0:ff:71:2c:ce:81:cc:e2:34:1b:16:d9:
4e:70:b7:02:89:c0:b3:e3:82:5d:f5:8d:ae:c1:6d:
7a:c3:17:5d:86:de:e0:c5:29:7f:2b:7c:3a:d7:31:
ba:6d:c4:cf:f8:04:d9:8b:e0:bc:4a:08:5d:32:58:
27:44:17:8e:9f:10:fc:98:84:8d:69:ff:3f:fe:04:
f2:40:49:69:24:7f:a7:40:33:b0:fd:72:d0:f8:8b:
bf:d5:c4:cc:ce:1a:1c:e3:75:cf:3b:98:78:10:cc:
84:a9:4f:c7:5f:ac:fa:5d:3d:ac:03:3c:22:ef:d4:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:ED:32:5D:02:82:31:25:69:22:5A:A5:F0:B0:E6:0C:B6:2B:45:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
X509v3 Authority Key Identifier:
keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:71:f2:97:48:17:86:e9:93:67:42:8d:8b:4d:ad:f3:53:20:
02:48:c5:80:8a:ff:85:2e:35:ce:49:6e:d1:98:ce:0c:31:29:
db:86:3c:e1:24:a8:f5:97:05:47:08:d3:79:08:89:4b:81:68:
f9:1c:9a:67:02:bd:ed:85:eb:ce:7f:cd:51:14:42:b7:8c:56:
80:d6:27:81:f4:be:af:97:b4:f1:ab:b2:1d:11:33:40:c7:b6:
21:4e:8f:1d:2c:04:aa:23:38:84:bb:da:c4:4b:c5:12:e6:42:
9c:b0:94:d4:ee:64:18:c1:c1:72:71:e6:f5:a6:44:eb:35:27:
fb:46:fc:3e:f4:a8:f4:f0:24:b3:39:7d:3e:db:23:92:a3:e2:
9e:ee:20:92:53:2f:f8:71:46:bc:8e:57:7e:af:38:4e:c1:a4:
91:49:a3:b4:8f:85:d2:3a:ad:3d:60:60:d2:6e:83:12:00:31:
16:66:ed:88:fd:e5:5c:fe:0c:13:6c:df:00:74:4d:61:c0:43:
75:54:c4:cd:1f:d0:82:06:3d:3b:cf:d2:14:60:fc:a6:28:7c:
ea:76:61:28:c1:d9:1b:c2:09:10:a6:f7:23:28:b7:42:50:02:
a9:f8:f1:9a:22:d6:1f:47:d6:15:2e:21:5d:a5:f0:00:c1:e8:
eb:53:97:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRr4qRm2YyQ/0KsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBiNDVmNzktNjEyZC00YzdlLThjMjQtNWY2NGFjNzVj
MTEzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
MjI0MDIzYzctNTNmMi00MjYwLWI2MDItZjQ2NGUyNzE4OTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma5KZxTX64YcUYcgXQjHBLMogCbgNB4Av5kX
ypXEOQjyzTLJ1yH/1ZZCybwUVguId5r+mMMxCVL8epJBv1Fvl6EeBlKR9ikZRLeu
sO07n42dh5PYSqj82JnEdvY33H9K25ZHeGPHWmrxqmNACrJ6swGCoBCQ/YsACqH1
YJd7aUdxmQBIxavDtwjQ/3EszoHM4jQbFtlOcLcCicCz44Jd9Y2uwW16wxddht7g
xSl/K3w61zG6bcTP+ATZi+C8SghdMlgnRBeOnxD8mISNaf8//gTyQElpJH+nQDOw
/XLQ+Iu/1cTMzhoc43XPO5h4EMyEqU/HX6z6XT2sAzwi79RogQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTtMl0CgjElaSJapfCw5gy2K0VFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0
NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0YWM3NWMxMTMvYWZmY2FiN2QtNjA5NC0z
OTgyLThiMzQtMzgyMjFlZmMxMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjBiNDVmNzktNjEyZC00YzdlLThj
MjQtNWY2NGFjNzVjMTEzL2YwYjQ1Zjc5LTYxMmQtNGM3ZS04YzI0LTVmNjRhYzc1
YzExMy5jcmwwHwYDVR0jBBgwFoAUwgDCOnzJSSzO95wp7F6dYJdYYncwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0
YWM3NWMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1x8pdIF4bpk2dCjYtNrfNTIAJIxYCK/4UuNc5JbtGYzgwxKduGPOEk
qPWXBUcI03kIiUuBaPkcmmcCve2F685/zVEUQreMVoDWJ4H0vq+XtPGrsh0RM0DH
tiFOjx0sBKojOIS72sRLxRLmQpywlNTuZBjBwXJx5vWmROs1J/tG/D70qPTwJLM5
fT7bI5Kj4p7uIJJTL/hxRryOV36vOE7BpJFJo7SPhdI6rT1gYNJugxIAMRZm7Yj9
5Vz+DBNs3wB0TWHAQ3VUxM0f0IIGPTvP0hRg/KYofOp2YSjB2RvCCRCm9yMot0JQ
Aqn48Zoi1h9H1hUuIV2l8ADB6OtTl3Q=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net