Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa
File: 802c7912-9ce3-3856-87c6-4a70974c9e3f.roa (raw, json)
Hash identifier: k/fCkuKxuAVFINE+GcgfTvFqXbSfOCFs0/nxsxn2ux4=
Subject key identifier: 3C:2C:0C:C1:67:44:CC:16:20:D6:80:9F:DE:B0:46:AE:8E:E9:02:79
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858494CC9394500AC086FD013A900
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 394437
IP address blocks: 72.20.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:39:45:00:ac:08:6f:d0:13:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=ae75db7a-b6da-45cc-a6ba-3ede99c41312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:22:3d:73:d9:79:b6:73:4f:05:56:16:e7:
be:93:1c:21:3e:ab:9a:2d:a9:f8:6a:b7:2a:3e:a6:
14:52:29:81:8a:a6:c4:e0:5b:88:25:19:16:cf:ff:
cc:66:f1:2f:25:b9:46:ae:e7:c6:eb:e0:1a:25:02:
25:6c:e3:1d:10:20:46:fa:a8:2a:07:2c:7a:91:bf:
4e:22:c0:84:1b:b0:c2:22:ab:cb:c3:f6:fe:d0:66:
ed:17:57:a1:96:39:43:bf:81:e4:56:cb:8d:bb:8d:
ba:3c:0e:94:5e:7c:bf:a5:23:fc:94:60:fd:3f:02:
37:f5:92:3a:4c:d5:04:d3:59:9a:ab:d6:dc:1f:c0:
43:69:94:36:15:74:0b:5b:7f:ed:34:77:88:25:42:
f4:dc:77:c9:75:cf:db:d1:e8:0d:45:ac:cd:03:1d:
b2:88:43:e0:af:da:28:38:94:8f:88:65:f8:8b:25:
f6:de:f2:e1:4b:0f:9f:b9:3c:ff:d5:af:15:ef:95:
c9:6a:44:73:b6:62:c7:84:cb:ca:20:2f:cb:14:ba:
d7:0b:ee:f6:dd:7d:ac:37:9a:e9:f2:b8:52:d1:71:
8d:cf:90:60:73:bf:c5:63:74:c8:ec:94:24:d8:c3:
20:7a:b6:0b:f7:b9:fa:80:e3:a5:6f:61:dc:47:5f:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2C:0C:C1:67:44:CC:16:20:D6:80:9F:DE:B0:46:AE:8E:E9:02:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:87:f3:8b:60:5c:a8:11:db:e3:e7:c3:d2:1e:fb:ae:de:65:
9c:9d:98:f0:7d:13:ef:41:15:e7:62:6e:5a:61:26:1b:0c:28:
b4:d7:d2:ed:85:c6:8b:a4:86:00:67:31:23:23:ce:c2:d9:e0:
80:42:be:69:e3:ce:be:df:20:3e:fb:65:d2:22:79:ff:4e:83:
92:a9:08:6e:9e:50:38:25:9d:23:6c:e4:b7:47:34:d4:91:cd:
5d:6c:8a:01:8d:a3:31:32:ab:f7:62:a1:62:4a:1c:82:86:23:
80:ea:ff:7b:59:69:c7:7b:81:8a:6d:a4:f5:a3:c2:34:af:4f:
b3:b0:50:a5:78:42:7b:60:50:96:77:be:e0:11:64:fa:b5:2a:
82:42:87:8b:0b:e9:9e:8c:65:93:84:94:5a:fa:db:5c:a0:b2:
1b:00:ef:55:fa:d4:ce:bc:11:05:2a:f6:27:8c:f5:84:1c:67:
db:f7:2c:ee:cb:0a:cc:b9:92:da:34:b8:b8:14:7a:a6:d9:9d:
4a:4c:fc:f1:d1:f3:51:1e:a7:c5:e3:fe:b2:65:d9:d8:13:8e:
dd:a9:a9:90:cc:c1:e9:45:da:ff:de:e8:09:a2:f0:3e:ac:44:
8e:83:92:57:1c:0b:a1:ea:eb:ce:9b:51:61:ce:03:bb:b3:c4:
8d:c1:42:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTlFAKwIb9ATqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YWU3NWRiN2EtYjZkYS00NWNjLWE2YmEtM2VkZTk5YzQxMzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknUiPXPZebZzTwVWFue+kxwhPquaLan4arcq
PqYUUimBiqbE4FuIJRkWz//MZvEvJblGrufG6+AaJQIlbOMdECBG+qgqByx6kb9O
IsCEG7DCIqvLw/b+0GbtF1ehljlDv4HkVsuNu426PA6UXny/pSP8lGD9PwI39ZI6
TNUE01maq9bcH8BDaZQ2FXQLW3/tNHeIJUL03HfJdc/b0egNRazNAx2yiEPgr9oo
OJSPiGX4iyX23vLhSw+fuTz/1a8V75XJakRztmLHhMvKIC/LFLrXC+723X2sN5rp
8rhS0XGNz5Bgc7/FY3TI7JQk2MMgerYL97n6gOOlb2HcR1/HnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDwsDMFnRMwWINaAn96wRq6O6QJ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvODAyYzc5MTItOWNlMy0z
ODU2LTg3YzYtNGE3MDk3NGM5ZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKyH84tgXKgR2+Pnw9Ie+67eZZydmPB9E+9BFediblphJhsMKLTX0u2F
xoukhgBnMSMjzsLZ4IBCvmnjzr7fID77ZdIief9Og5KpCG6eUDglnSNs5LdHNNSR
zV1sigGNozEyq/dioWJKHIKGI4Dq/3tZacd7gYptpPWjwjSvT7OwUKV4QntgUJZ3
vuARZPq1KoJCh4sL6Z6MZZOElFr621ygshsA71X61M68EQUq9ieM9YQcZ9v3LO7L
Csy5kto0uLgUeqbZnUpM/PHR81Eep8Xj/rJl2dgTjt2pqZDMwelF2v/e6Ami8D6s
RI6DklccC6Hq686bUWHOA7uzxI3BQms=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:29 2025 by rpki-client on console.sobornost.net