Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa
File: a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa (raw, json)
Hash identifier: EQP0W8ie88zDsEwcj7PY2+bCrcaB5h66ipmvvtdsT2k=
Subject key identifier: 80:CC:CB:25:07:56:56:BF:13:3A:F7:CE:8F:48:55:72:54:A8:31:5B
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F4328584909E6A4ABC198EF6D6BB03418
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 394437
IP address blocks: 72.20.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a4:ab:c1:98:ef:6d:6b:b0:34:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=1574f369-2b54-45dc-8326-fe63cabea574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:27:5f:cb:10:9a:b2:58:5b:db:dd:38:cc:
5d:8a:f3:cd:fc:c4:55:d4:db:2c:0e:da:a2:b0:bf:
25:a1:29:53:29:62:56:38:ee:31:82:c0:9e:16:82:
23:3b:b5:91:c2:4a:2b:63:c6:f4:9d:da:ff:0a:de:
94:5a:30:0f:60:0f:bf:e0:22:c9:fc:05:67:8f:90:
fd:ed:ce:7f:aa:cd:26:45:a2:6e:f6:51:0a:f1:65:
c8:e2:a0:cc:aa:46:eb:78:b6:df:ad:b6:5d:03:35:
0a:e3:88:1f:5d:de:79:0b:65:25:6e:5c:82:b4:89:
ab:68:a6:c5:be:e4:f5:59:6c:0d:29:27:d9:f2:96:
13:4c:6a:3c:ed:f9:2d:64:2d:31:93:c8:17:ac:ae:
91:4e:87:92:f0:5b:00:5e:c9:30:4c:e6:11:f8:48:
98:c6:fd:30:33:0e:bf:f6:37:f9:8c:83:28:de:ec:
79:fb:a1:f6:2d:c5:d7:1a:a1:75:52:0f:4c:38:5d:
43:8d:5e:96:a1:bb:34:de:31:57:8b:a6:66:ee:ea:
ef:0b:42:b1:67:f9:45:05:08:c6:63:39:6c:e1:18:
53:9e:05:1a:c9:a5:60:9c:1c:ee:76:ce:9f:af:a4:
a5:af:80:e0:89:fa:f0:26:1d:54:7d:a2:b9:52:c6:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:CB:25:07:56:56:BF:13:3A:F7:CE:8F:48:55:72:54:A8:31:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:51:c8:80:cd:3d:7f:89:14:43:64:04:61:a2:9d:67:27:ab:
9c:a5:11:9a:6a:5b:6d:b3:85:f7:51:b1:0f:f9:a0:39:d2:8f:
2c:0e:55:a3:b1:85:66:ad:c2:10:ed:63:2d:19:e2:e8:84:4a:
a4:b9:1d:bc:e3:7e:7e:67:e6:38:da:2f:5c:3e:b0:96:8a:5f:
c8:a2:c1:08:29:a9:f5:23:a0:53:00:ff:71:7d:c4:f5:f0:ba:
8e:63:b4:b1:63:da:49:54:57:9c:6b:a1:60:ad:06:2c:0e:7a:
94:e2:55:ca:95:fe:08:b7:bb:90:76:2b:7f:09:5e:2c:de:19:
ba:9d:0e:c5:a7:ab:64:a0:4b:ec:f7:e6:7c:e9:2d:50:c9:da:
0d:f9:84:c0:7c:8e:0f:82:e2:db:a8:22:97:4f:fd:3d:1d:a3:
78:26:f7:73:b1:21:fd:9c:04:0a:ee:a1:ac:64:4e:08:ab:43:
4f:84:1a:85:98:6f:2e:67:af:97:5a:19:ae:a0:a9:54:c3:f9:
b5:7a:4a:e6:c1:f0:c7:e8:2c:2f:e3:b0:a9:63:5f:20:b4:c7:
61:46:be:90:bb:e9:1a:5b:bc:bc:6e:de:0a:89:eb:15:82:8b:
6a:94:c1:27:1a:42:ad:fb:af:73:0e:05:af:a5:89:3a:c5:9c:
21:e1:e3:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qSrwZjvbWuwNBgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk
MTU3NGYzNjktMmI1NC00NWRjLTgzMjYtZmU2M2NhYmVhNTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBsnX8sQmrJYW9vdOMxdivPN/MRV1NssDtqi
sL8loSlTKWJWOO4xgsCeFoIjO7WRwkorY8b0ndr/Ct6UWjAPYA+/4CLJ/AVnj5D9
7c5/qs0mRaJu9lEK8WXI4qDMqkbreLbfrbZdAzUK44gfXd55C2UlblyCtImraKbF
vuT1WWwNKSfZ8pYTTGo87fktZC0xk8gXrK6RToeS8FsAXskwTOYR+EiYxv0wMw6/
9jf5jIMo3ux5+6H2LcXXGqF1Ug9MOF1DjV6Wobs03jFXi6Zm7urvC0KxZ/lFBQjG
Yzls4RhTngUayaVgnBzuds6fr6Slr4DgifrwJh1UfaK5UsYHZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDMyyUHVla/Ezr3zo9IVXJUqDFbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYTg3N2EwYzktODRhNC0z
MThhLTk2NjMtYmE0MjNiNmE1ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVRyIDNPX+JFENkBGGinWcnq5ylEZpqW22zhfdRsQ/5oDnSjywOVaOx
hWatwhDtYy0Z4uiESqS5Hbzjfn5n5jjaL1w+sJaKX8iiwQgpqfUjoFMA/3F9xPXw
uo5jtLFj2klUV5xroWCtBiwOepTiVcqV/gi3u5B2K38JXizeGbqdDsWnq2SgS+z3
5nzpLVDJ2g35hMB8jg+C4tuoIpdP/T0do3gm93OxIf2cBAruoaxkTgirQ0+EGoWY
by5nr5daGa6gqVTD+bV6SubB8MfoLC/jsKljXyC0x2FGvpC76RpbvLxu3gqJ6xWC
i2qUwScaQq37r3MOBa+liTrFnCHh4y8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:29 2025 by rpki-client on console.sobornost.net