Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa
File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json)
Hash identifier: JECatkgrjLv2rwORuMzS2L4vnKSs6aYBGJ6PfVKy7HU=
Subject key identifier: CD:F1:3F:72:1D:52:07:B9:25:43:C4:58:B9:56:0F:48:CB:0A:94:64
Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819
Certificate serial: 010D0C9F43285849002169447F17A5FF78AA5300
Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 46979
IP address blocks: 173.225.0.0/21 maxlen: 21
173.225.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:69:44:7f:17:a5:ff:78:aa:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=7b7ab5ab-a686-4bfd-a11b-9392a683df79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:9f:6a:bc:08:0a:af:98:92:25:ba:c4:99:
fb:0a:10:22:32:58:f6:ff:d0:cc:b5:ac:6e:c8:17:
a5:34:7f:d2:a8:8d:76:cd:5f:1f:c6:10:5d:df:90:
27:4c:4e:18:50:03:ed:5e:c7:a1:35:e6:45:0b:a7:
c0:a6:63:cc:2c:fe:05:35:09:9a:2d:e6:03:37:36:
c9:7e:c9:51:ed:f6:d6:4d:8e:c3:fc:21:77:60:d1:
40:8c:d2:4f:10:93:c6:ba:20:49:b0:bc:7e:c9:29:
de:9f:6c:0e:49:d5:77:a6:97:69:6f:5b:ba:c5:4a:
f0:ed:01:fa:13:93:92:3e:56:e1:94:fc:07:6a:cb:
d1:20:25:a9:7e:37:e0:72:de:f7:4e:66:b2:f3:ca:
39:e6:b9:a0:c9:f3:60:ca:bf:1b:4a:80:5c:e8:36:
f8:70:47:20:99:19:a7:63:38:b3:db:31:34:b7:af:
da:e6:8d:ae:05:32:a8:71:18:e7:13:ef:1e:29:73:
45:bc:74:f7:c0:9b:0e:12:70:e7:7e:85:0c:d1:87:
ac:c2:04:02:b9:18:bc:75:f8:60:09:0a:60:95:79:
a4:37:e0:1b:57:11:25:9b:cd:b1:9b:a8:8e:b0:e8:
59:df:36:42:6c:ae:69:03:2e:e9:cc:88:c2:93:ca:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:3F:72:1D:52:07:B9:25:43:C4:58:B9:56:0F:48:CB:0A:94:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl
X509v3 Authority Key Identifier:
keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer
sbgp-ipAddrBlock: critical
IPv4:
173.225.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:71:be:b4:d0:13:83:84:59:48:7d:79:3d:47:51:b1:e6:56:
8e:ee:55:fa:d7:28:70:82:f1:de:78:63:a6:06:63:40:7b:62:
cb:f3:55:50:58:db:87:21:da:d8:63:2a:74:57:73:15:4c:f6:
7a:12:6c:28:df:69:74:01:84:f1:81:d2:3d:a4:95:bc:6d:75:
c9:3c:74:d2:4b:7d:ee:11:d8:9b:b4:ea:61:94:6b:d9:48:a8:
95:1e:19:f5:6b:9d:11:2d:d2:7e:44:ee:87:8f:bf:08:dc:9f:
1c:54:24:a0:56:ac:80:77:cf:f1:10:a7:b7:cb:2e:75:b5:7f:
82:a5:fc:61:8d:9f:ce:d4:e1:e1:07:33:72:27:57:eb:bd:ae:
f7:85:04:d6:dd:7d:50:12:78:f6:3e:a4:85:0a:4c:58:22:fc:
fa:4c:e3:c6:06:8f:46:a4:53:97:7f:92:c7:c8:c4:9a:92:dc:
1b:8d:9b:7b:cb:04:74:42:df:73:87:4a:8b:b7:28:99:c4:5e:
d2:d1:f8:b5:44:82:d0:0e:c7:29:19:c8:fd:0a:07:21:ac:50:
d9:06:d6:38:a1:87:76:c0:59:3d:28:40:ef:a3:95:98:c4:f7:
b9:4f:1d:cc:2b:30:17:ad:9e:5c:40:4a:48:61:1b:d6:30:bb:
43:73:57:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWlEfxel/3iqUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy
ODE5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
N2I3YWI1YWItYTY4Ni00YmZkLWExMWItOTM5MmE2ODNkZjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QmfarwICq+YkiW6xJn7ChAiMlj2/9DMtaxu
yBelNH/SqI12zV8fxhBd35AnTE4YUAPtXsehNeZFC6fApmPMLP4FNQmaLeYDNzbJ
fslR7fbWTY7D/CF3YNFAjNJPEJPGuiBJsLx+ySnen2wOSdV3ppdpb1u6xUrw7QH6
E5OSPlbhlPwHasvRICWpfjfgct73Tmay88o55rmgyfNgyr8bSoBc6Db4cEcgmRmn
Yziz2zE0t6/a5o2uBTKocRjnE+8eKXNFvHT3wJsOEnDnfoUM0YeswgQCuRi8dfhg
CQpglXmkN+AbVxElm82xm6iOsOhZ3zZCbK5pAy7pzIjCk8qbcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3xP3IdUge5JUPEWLlWD0jLCpRkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz
YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvY2Q0M2FhOTUtMzM2NS0z
ZmNlLWJiNjAtOWY2OGMwOGZhZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1
ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw
MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy
ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9xvrTQE4OEWUh9eT1HUbHmVo7uVfrXKHCC8d54Y6YGY0B7YsvzVVBY
24ch2thjKnRXcxVM9noSbCjfaXQBhPGB0j2klbxtdck8dNJLfe4R2Ju06mGUa9lI
qJUeGfVrnREt0n5E7oePvwjcnxxUJKBWrIB3z/EQp7fLLnW1f4Kl/GGNn87U4eEH
M3InV+u9rveFBNbdfVASePY+pIUKTFgi/PpM48YGj0akU5d/ksfIxJqS3BuNm3vL
BHRC33OHSou3KJnEXtLR+LVEgtAOxykZyP0KByGsUNkG1jihh3bAWT0oQO+jlZjE
97lPHcwrMBetnlxASkhhG9Ywu0NzVzw=
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net