Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a737ca53-6ba7-32a8-9aff-3f16c2f463f7.roa
File: a737ca53-6ba7-32a8-9aff-3f16c2f463f7.roa (raw, json)
Hash identifier: tmOl+0+JSa9gIytyrzrqBhTJOFFVysPBZbRYeiMtoEY=
Subject key identifier: 76:F1:B8:D8:71:68:C1:27:11:91:6F:04:57:DF:DF:46:62:73:D0:12
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285849218412D9D6EECC70AF63BDF8
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a737ca53-6ba7-32a8-9aff-3f16c2f463f7.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 64267
IP address blocks: 152.44.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:12:d9:d6:ee:cc:70:af:63:bd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=4e407262-c00f-4a86-b8a7-5fc3bc65ea87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:ba:02:bd:ab:95:4c:5b:9c:5a:97:58:7e:
85:49:77:01:d7:d6:46:0d:f9:6b:8c:42:be:88:38:
b4:f9:51:57:28:40:f3:e4:09:0f:15:48:ed:17:be:
cc:c8:4f:2c:95:8f:f2:9e:e3:9a:b1:6b:da:00:f0:
77:33:13:8c:6b:64:2b:b6:8a:7a:2d:d9:cc:a9:4a:
29:17:4f:71:51:c4:14:5f:80:b6:7d:a6:88:3d:ca:
9e:24:0e:70:f1:cc:e0:bb:3d:e2:a7:d8:c9:4d:9f:
fb:65:d4:0d:79:00:a5:bf:98:1c:fe:a6:70:77:db:
a0:44:40:45:ad:04:ca:34:c2:35:4d:f2:32:7b:a7:
38:6e:a3:b6:7e:3e:b3:6b:94:0f:12:35:f2:fd:52:
d1:aa:d4:86:b5:2e:48:e5:d5:c3:92:83:14:84:1c:
c1:70:52:88:19:9e:ee:4f:94:6b:0e:5f:61:3c:fe:
75:74:c2:ee:08:4c:38:cf:c5:0d:f0:45:77:9e:c6:
1e:03:dc:d6:f7:b9:39:3d:d6:d4:1e:7f:a9:da:04:
19:44:fd:3d:6b:47:f6:9b:04:5f:64:5f:2b:35:40:
c7:71:20:f3:22:bc:61:c3:e3:16:eb:cf:04:36:e8:
e2:26:c1:d1:9e:71:5c:61:fe:10:b0:18:a6:5f:68:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F1:B8:D8:71:68:C1:27:11:91:6F:04:57:DF:DF:46:62:73:D0:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a737ca53-6ba7-32a8-9aff-3f16c2f463f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
152.44.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:4c:af:ec:b7:bc:7b:8c:dc:da:61:64:88:fb:06:11:d5:3f:
92:3d:72:3e:8e:19:f3:fd:f3:d2:25:f2:e1:e4:ab:86:89:8f:
2f:80:5f:30:cc:53:70:e6:54:11:a9:8e:37:2d:65:bc:14:50:
95:59:f3:3d:c5:5c:4b:82:71:f9:be:ce:be:69:71:74:cb:f3:
79:2c:16:17:9b:2f:21:8a:b4:e7:14:9d:6a:9e:87:05:e9:f7:
b7:cc:72:47:90:08:de:51:ad:e8:af:94:e6:df:0b:58:56:0e:
10:a4:0d:37:5b:14:90:cf:97:05:d8:25:e3:b4:68:7e:2b:a9:
e6:7f:90:8e:72:3a:4a:4b:8b:b1:54:f9:c8:05:ba:7c:8a:31:
66:bf:dd:53:42:8d:b9:ad:f5:41:08:ce:e0:b0:07:e2:02:d5:
d2:bd:72:fb:da:a9:fb:c7:9f:27:12:c3:b1:79:ed:b6:12:21:
fa:ba:31:2a:55:8a:9f:14:12:85:ae:ad:75:7a:8a:a9:9c:9e:
74:6c:ff:30:15:af:5e:48:d2:a3:80:a8:e3:62:28:c8:86:b1:
3c:74:a0:de:e2:18:7d:f8:ce:fa:fe:f7:8b:e5:0f:eb:dd:02:
8f:ca:13:ef:b9:cf:24:4b:25:05:c8:f3:be:89:b1:70:b4:f0:
9b:2b:35:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBLZ1u7McK9jvfgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
NGU0MDcyNjItYzAwZi00YTg2LWI4YTctNWZjM2JjNjVlYTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPS6Ar2rlUxbnFqXWH6FSXcB19ZGDflrjEK+
iDi0+VFXKEDz5AkPFUjtF77MyE8slY/ynuOasWvaAPB3MxOMa2Qrtop6LdnMqUop
F09xUcQUX4C2faaIPcqeJA5w8czguz3ip9jJTZ/7ZdQNeQClv5gc/qZwd9ugREBF
rQTKNMI1TfIye6c4bqO2fj6za5QPEjXy/VLRqtSGtS5I5dXDkoMUhBzBcFKIGZ7u
T5RrDl9hPP51dMLuCEw4z8UN8EV3nsYeA9zW97k5PdbUHn+p2gQZRP09a0f2mwRf
ZF8rNUDHcSDzIrxhw+MW688ENujiJsHRnnFcYf4QsBimX2huCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbxuNhxaMEnEZFvBFff30Zic9ASMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTczN2NhNTMtNmJhNy0z
MmE4LTlhZmYtM2YxNmMyZjQ2M2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhMr+y3vHuM3NphZIj7BhHVP5I9cj6OGfP989Il8uHkq4aJjy+AXzDM
U3DmVBGpjjctZbwUUJVZ8z3FXEuCcfm+zr5pcXTL83ksFhebLyGKtOcUnWqehwXp
97fMckeQCN5RreivlObfC1hWDhCkDTdbFJDPlwXYJeO0aH4rqeZ/kI5yOkpLi7FU
+cgFunyKMWa/3VNCjbmt9UEIzuCwB+IC1dK9cvvaqfvHnycSw7F57bYSIfq6MSpV
ip8UEoWurXV6iqmcnnRs/zAVr15I0qOAqONiKMiGsTx0oN7iGH34zvr+94vlD+vd
Ao/KE++5zyRLJQXI876JsXC08JsrNe0=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:39 2025 by rpki-client on console.sobornost.net