Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dc5d5998-8979-3597-9dd9-7dae8990f0dd.roa
File: dc5d5998-8979-3597-9dd9-7dae8990f0dd.roa (raw, json)
Hash identifier: zUpdJZrDyzpdep9BECGvHQTdXGJJhVoD8GS9Tmbjic8=
Subject key identifier: F6:6D:D9:3F:4D:27:65:C9:2E:11:AA:B6:FE:C8:7A:A4:06:0F:1E:3F
Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial: 010D0C9F4328584940397DC98B8B1F2EA57BBD80
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dc5d5998-8979-3597-9dd9-7dae8990f0dd.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 60024
IP address blocks: 23.247.132.0/22 maxlen: 24
104.249.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7d:c9:8b:8b:1f:2e:a5:7b:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=ea6f97f5-f661-4e6d-8b16-7cfa9497361a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a7:39:85:59:36:7d:69:66:ff:35:80:cd:51:
f6:ba:5a:64:79:5e:f2:bf:98:60:90:b1:8c:a8:94:
26:71:09:fe:b0:f8:fc:76:8c:39:36:1d:e6:f3:77:
50:fe:e9:79:d4:23:42:e5:8d:7f:42:a0:13:42:50:
f5:de:e8:79:96:91:84:3f:d0:6f:86:95:d9:d1:56:
ef:9d:4f:1c:11:93:ea:b9:66:8c:54:93:22:f3:e5:
b4:c0:70:d1:eb:14:80:4a:2b:fd:10:53:94:6d:8d:
8b:57:54:f8:31:ad:f8:e1:12:54:e3:26:4f:07:8e:
aa:86:c6:3e:d0:a5:e0:a4:e5:25:4d:31:78:e9:15:
c5:40:98:76:35:d8:42:e4:2f:38:18:83:83:f0:0f:
8c:48:0f:49:1a:7a:2c:02:1e:46:e5:14:54:47:ea:
93:94:f7:01:81:ec:8d:ab:dd:eb:dd:f5:c5:53:5f:
d5:22:6d:e0:ca:bc:82:6a:d1:96:ef:1e:ca:f6:71:
98:c3:d7:3f:52:a7:66:2f:af:8f:54:6e:b1:e5:a1:
e1:d0:96:f6:bf:e6:46:e6:47:6c:19:0f:fb:90:2e:
f7:81:65:26:c2:92:df:88:48:c7:3a:2c:89:a3:65:
95:06:57:81:e7:27:24:48:2e:24:61:e1:29:3a:3a:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6D:D9:3F:4D:27:65:C9:2E:11:AA:B6:FE:C8:7A:A4:06:0F:1E:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dc5d5998-8979-3597-9dd9-7dae8990f0dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
X509v3 Authority Key Identifier:
keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.132.0/22
104.249.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:16:38:cd:b5:1a:17:ba:43:24:5c:f1:33:40:38:c7:70:4a:
af:e5:e0:59:2d:58:c3:58:a0:43:1c:27:99:5b:77:1b:56:ce:
2e:d0:e7:bf:6b:46:e5:02:d4:04:25:e9:b7:88:74:f4:bd:c9:
37:33:92:68:d8:52:a6:2e:a1:4b:8f:db:f2:f8:ea:b0:47:fe:
b7:33:52:42:01:9d:66:e7:09:21:e1:2a:41:3c:5a:0c:03:28:
25:33:25:0a:b7:78:0f:2a:54:dd:71:fd:0b:5f:c5:9f:7d:38:
0f:55:d8:bd:c6:3d:78:b1:0b:24:6f:18:8c:fc:70:14:e3:76:
10:5d:c5:77:84:99:2f:d8:91:63:01:4f:7a:21:59:6e:c1:54:
88:c2:f0:6c:be:85:a5:4f:75:6e:00:9d:f0:28:1c:97:92:93:
41:4b:9c:08:a0:55:38:be:78:ac:50:48:da:31:08:5c:6d:3c:
2f:01:ec:ba:25:69:e4:11:99:f9:72:72:23:d8:43:60:a0:3c:
d3:40:91:4d:b3:5f:2d:88:b9:dc:cc:31:52:46:10:31:3e:2b:
6a:ed:1d:36:ba:42:48:d2:74:b6:9f:b9:69:af:e4:c6:4d:b7:
e2:93:80:a5:ec:bf:fe:ce:ae:31:5d:97:4a:d9:df:c7:83:46:
be:39:94:86
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElAOX3Ji4sfLqV7vYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4
MjFlMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
ZWE2Zjk3ZjUtZjY2MS00ZTZkLThiMTYtN2NmYTk0OTczNjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qc5hVk2fWlm/zWAzVH2ulpkeV7yv5hgkLGM
qJQmcQn+sPj8dow5Nh3m83dQ/ul51CNC5Y1/QqATQlD13uh5lpGEP9BvhpXZ0Vbv
nU8cEZPquWaMVJMi8+W0wHDR6xSASiv9EFOUbY2LV1T4Ma344RJU4yZPB46qhsY+
0KXgpOUlTTF46RXFQJh2NdhC5C84GIOD8A+MSA9JGnosAh5G5RRUR+qTlPcBgeyN
q93r3fXFU1/VIm3gyryCatGW7x7K9nGYw9c/UqdmL6+PVG6x5aHh0Jb2v+ZG5kds
GQ/7kC73gWUmwpLfiEjHOiyJo2WVBleB5yckSC4kYeEpOjqwuQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPZt2T9NJ2XJLhGqtv7IeqQGDx4/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm
ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvZGM1ZDU5OTgtODk3OS0z
NTk3LTlkZDktN2RhZTg5OTBmMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj
YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi
ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4
MTBlYjgyMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCF/eEAwQC
aPmsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABEWOM21Ghe6QyRc8TNAOMdwSq/l4FktWMNYoEMcJ5lbdxtW
zi7Q579rRuUC1AQl6beIdPS9yTczkmjYUqYuoUuP2/L46rBH/rczUkIBnWbnCSHh
KkE8WgwDKCUzJQq3eA8qVN1x/QtfxZ99OA9V2L3GPXixCyRvGIz8cBTjdhBdxXeE
mS/YkWMBT3ohWW7BVIjC8Gy+haVPdW4AnfAoHJeSk0FLnAigVTi+eKxQSNoxCFxt
PC8B7LolaeQRmflyciPYQ2CgPNNAkU2zXy2IudzMMVJGEDE+K2rtHTa6QkjSdLaf
uWmv5MZNt+KTgKXsv/7OrjFdl0rZ38eDRr45lIY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:50 2025 by rpki-client on console.sobornost.net