Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa
File: 4d2e1153-33f9-3d70-a2d1-dc9545320444.roa (raw, json)
Hash identifier: 9avDq94tIspM1AOCi0zQ8kvVvNP0JIcrp/HrG9A1g54=
Subject key identifier: 98:0A:35:71:A8:41:D6:BA:ED:4B:C0:38:3E:7C:3D:C0:EC:AA:14:31
Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial: 010D0C9F4328584902EBFA625F74F00B17902120
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14297
IP address blocks: 139.131.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:eb:fa:62:5f:74:f0:0b:17:90:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=c8673207-7518-4363-8c64-3e7bbbd98fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:f0:3b:f9:98:95:7c:f6:0f:f4:3f:71:fe:
bb:95:35:ce:5e:89:13:5d:36:06:28:49:16:f5:f9:
b0:b2:ea:ff:c0:d0:28:2c:6a:5c:f7:24:b6:1a:a2:
56:76:1c:11:13:29:cd:bc:ae:72:81:bd:e4:f6:80:
61:42:f4:66:10:5f:f9:00:d9:86:ad:1c:f0:92:05:
87:23:13:f2:23:51:38:ad:3a:87:30:0c:d2:9d:7e:
06:11:28:f2:1d:ee:89:93:aa:18:4e:9a:74:fe:91:
dd:c1:f3:72:f5:2a:55:c6:3a:41:42:1e:40:3d:9e:
bc:e7:b3:ab:55:54:e5:55:09:19:6d:18:67:f6:6e:
52:93:ad:fd:40:00:88:9a:be:ae:d7:23:b9:de:60:
8f:7c:74:b4:f5:ae:9c:92:90:28:6c:7e:28:f8:23:
8a:60:fd:f5:79:54:6a:bb:66:1b:0b:e8:08:70:6d:
fc:a7:c3:95:c9:4a:ef:f5:47:5c:b3:67:fd:18:ce:
85:2f:db:bc:72:8e:9e:96:d3:87:d1:b0:02:54:a1:
71:31:ca:70:e0:4d:d1:60:78:d8:73:05:c0:1f:2d:
a9:08:fd:ca:ab:15:71:13:56:9a:28:49:0e:71:57:
cc:92:00:b0:a3:9f:6e:2b:68:ef:a6:73:42:48:35:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0A:35:71:A8:41:D6:BA:ED:4B:C0:38:3E:7C:3D:C0:EC:AA:14:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
X509v3 Authority Key Identifier:
keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
sbgp-ipAddrBlock: critical
IPv4:
139.131.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:11:98:a6:77:9b:7a:6d:5b:b0:2e:d4:2e:5d:97:94:05:c9:
69:4d:52:d7:64:7a:75:5c:57:e7:d5:ca:79:c9:2b:7a:81:41:
81:56:e4:02:ea:27:3b:18:67:31:f0:04:dd:e4:de:d5:30:3d:
34:12:e0:10:e8:e4:81:3b:87:d1:28:b7:d7:f5:94:ef:f3:22:
d3:39:d5:0f:f3:5e:46:14:ee:91:84:96:64:ec:60:e5:66:31:
1a:05:ee:e7:b1:bc:0a:71:be:d6:58:70:64:81:6f:19:88:e9:
32:cd:62:6e:90:15:52:d2:d0:71:28:35:bb:fc:15:fc:c5:47:
fe:58:87:68:cb:5a:92:b3:03:ff:c9:e3:e1:51:9e:bd:00:9a:
30:7d:f6:72:ec:bb:87:bb:4a:4e:06:5e:7d:fe:73:e8:6f:09:
6e:91:3d:21:fd:e9:b3:dc:7c:74:52:f2:33:4b:ef:69:21:6b:
6c:66:2d:a1:8e:9d:aa:c9:82:7e:58:9d:61:0f:27:3c:bf:58:
5b:5d:82:e3:e7:08:84:0f:55:30:b9:5d:0e:36:f5:71:6e:72:
d4:dc:9a:cd:27:bd:50:54:e6:37:de:82:a0:40:47:87:f3:e2:
3e:11:d7:1b:94:c3:86:6c:52:56:08:65:86:b9:85:07:f4:0d:
4f:f7:07:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/piX3TwCxeQISAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
Yzg2NzMyMDctNzUxOC00MzYzLThjNjQtM2U3YmJiZDk4ZmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZXwO/mYlXz2D/Q/cf67lTXOXokTXTYGKEkW
9fmwsur/wNAoLGpc9yS2GqJWdhwREynNvK5ygb3k9oBhQvRmEF/5ANmGrRzwkgWH
IxPyI1E4rTqHMAzSnX4GESjyHe6Jk6oYTpp0/pHdwfNy9SpVxjpBQh5APZ6857Or
VVTlVQkZbRhn9m5Sk639QACImr6u1yO53mCPfHS09a6ckpAobH4o+COKYP31eVRq
u2YbC+gIcG38p8OVyUrv9Udcs2f9GM6FL9u8co6eltOH0bACVKFxMcpw4E3RYHjY
cwXAHy2pCP3KqxVxE1aaKEkOcVfMkgCwo59uK2jvpnNCSDUybQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgKNXGoQda67UvAOD58PcDsqhQxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNGQyZTExNTMtMzNmOS0z
ZDcwLWEyZDEtZGM5NTQ1MzIwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4NMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4RmKZ3m3ptW7Au1C5dl5QFyWlNUtdkenVcV+fVynnJK3qBQYFW5ALq
JzsYZzHwBN3k3tUwPTQS4BDo5IE7h9Eot9f1lO/zItM51Q/zXkYU7pGElmTsYOVm
MRoF7uexvApxvtZYcGSBbxmI6TLNYm6QFVLS0HEoNbv8FfzFR/5Yh2jLWpKzA//J
4+FRnr0AmjB99nLsu4e7Sk4GXn3+c+hvCW6RPSH96bPcfHRS8jNL72kha2xmLaGO
narJgn5YnWEPJzy/WFtdguPnCIQPVTC5XQ429XFuctTcms0nvVBU5jfegqBAR4fz
4j4R1xuUw4ZsUlYIZYa5hQf0DU/3B8w=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:15 2025 by rpki-client on console.sobornost.net