Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa
File: eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa (raw, json)
Hash identifier: 3PszEoDTxmEOxUDIXdBRJUX52JJdWHYeDdZJWhTqy0k=
Subject key identifier: FA:B0:06:06:F6:57:14:21:42:8F:DE:8D:5D:AA:02:C1:26:FD:EE:F0
Certificate issuer: /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Certificate serial: 010D0C9F4328584976A9908080BD6367351EFC80
Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 53855
IP address blocks: 185.224.64.0/23 maxlen: 24
2602:814:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:90:80:80:bd:63:67:35:1e:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=ba548a35-8cf7-4ef6-b473-a4e781d19b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:fb:c9:76:12:85:46:51:1b:dc:93:59:23:
6b:4e:8f:e8:e7:d3:9e:33:ae:5e:bb:7e:44:e1:00:
df:c2:23:9a:de:7b:1e:fe:1c:12:f5:e4:17:90:7d:
8d:e5:21:d4:a6:37:66:25:46:93:44:dc:52:7a:73:
a3:95:25:02:4a:be:03:3e:b0:14:16:e0:5b:e8:06:
26:33:3c:19:76:d1:0b:16:5c:e7:df:46:85:24:cd:
e7:30:9a:ec:f6:66:3d:76:a5:2c:67:1d:4a:1e:16:
60:78:11:bb:a5:b5:2c:e0:15:be:f2:fe:ed:1a:33:
96:e8:4c:f9:f3:4f:74:da:7f:8e:57:01:4f:50:bf:
7f:ae:8e:bb:7e:d5:95:a3:fb:b4:39:f8:69:b3:bb:
24:06:00:68:c5:e0:fd:3a:6b:53:85:66:a0:dd:14:
8f:62:a5:f3:22:73:1b:53:ed:c1:29:40:d7:60:1b:
ce:37:ca:87:1a:c9:27:b2:24:c0:47:7a:66:28:95:
33:f1:c1:fa:cd:73:62:6b:c9:e7:dd:aa:d2:91:26:
19:69:08:6b:a7:e7:88:6f:b0:1d:d8:a1:b8:f4:d7:
d3:c1:64:da:86:0d:35:9c:ea:03:6b:37:64:d0:d3:
47:9a:cf:ea:c8:f2:fd:52:3a:06:69:ce:e7:5b:ff:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:06:06:F6:57:14:21:42:8F:DE:8D:5D:AA:02:C1:26:FD:EE:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl
X509v3 Authority Key Identifier:
keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
sbgp-ipAddrBlock: critical
IPv4:
185.224.64.0/23
IPv6:
2602:814:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:ae:d7:67:55:22:0e:df:b2:91:a1:4d:9f:71:8f:cd:ee:2d:
d6:a3:56:85:af:ac:09:3d:59:7e:86:05:b0:8a:8b:2d:0f:b9:
3d:87:14:1d:19:19:98:25:09:72:55:c5:48:dc:d9:e5:6b:27:
d8:b5:1d:8c:a7:9e:2a:0b:72:29:b3:4f:2d:32:c0:63:be:22:
ef:28:36:5b:ad:e3:23:35:2b:a6:cc:d4:f4:99:0f:c4:bd:85:
3f:79:c6:69:84:fa:2d:7e:1e:b9:27:7c:c5:af:de:b9:97:17:
41:2d:f8:85:cc:81:f4:42:78:f1:f3:f6:06:04:e3:b7:c8:61:
e4:c8:64:3f:35:f8:fe:d2:f4:88:db:9c:d4:31:f5:77:70:f4:
04:c0:a5:cd:eb:c5:9c:e8:78:0a:64:77:72:42:03:5d:2a:da:
b2:f5:35:76:4a:2a:73:2d:54:66:5c:9b:ad:8d:55:fd:a7:a4:
e8:a0:3d:80:ec:0a:84:72:a5:69:26:da:e0:de:48:05:8c:1b:
dd:96:61:30:82:9a:ab:06:30:ed:80:62:a7:21:cd:f6:ee:73:
36:f1:47:10:ac:f9:80:88:6e:e5:4d:eb:26:3c:75:86:95:eb:
e1:11:f1:c2:23:a2:4b:59:00:da:eb:f1:c4:cc:fd:ee:b9:88:
03:c4:c0:0e
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEl2qZCAgL1jZzUe/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ1OGU5MjAtYTU1OS00OWI1LWJiNmUtNGMyYmI4OTk0
M2EzMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
YmE1NDhhMzUtOGNmNy00ZWY2LWI0NzMtYTRlNzgxZDE5YjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyz7yXYShUZRG9yTWSNrTo/o59OeM65eu35E
4QDfwiOa3nse/hwS9eQXkH2N5SHUpjdmJUaTRNxSenOjlSUCSr4DPrAUFuBb6AYm
MzwZdtELFlzn30aFJM3nMJrs9mY9dqUsZx1KHhZgeBG7pbUs4BW+8v7tGjOW6Ez5
80902n+OVwFPUL9/ro67ftWVo/u0Ofhps7skBgBoxeD9OmtThWag3RSPYqXzInMb
U+3BKUDXYBvON8qHGsknsiTAR3pmKJUz8cH6zXNia8nn3arSkSYZaQhrp+eIb7Ad
2KG49NfTwWTahg01nOoDazdk0NNHms/qyPL9UjoGac7nW//QNQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFPqwBgb2VxQhQo/ejV2qAsEm/e7wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4
ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5OTQzYTMvZWZmNmY0NjItODJhMS0z
MWQ4LWJjM2ItZjRhNGY1ZDBkYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1OGU5MjAtYTU1OS00OWI1LWJi
NmUtNGMyYmI4OTk0M2EzLzY0NThlOTIwLWE1NTktNDliNS1iYjZlLTRjMmJiODk5
NDNhMy5jcmwwHwYDVR0jBBgwFoAU15LEqYpxiqpObFvygchiSxHeBD4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJi
Yjg5OTQzYTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBueBAMA8E
AgACMAkDBwQmAggUoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWK7XZ1UiDt+ykaFNn3GPze4t1qNWha+s
CT1ZfoYFsIqLLQ+5PYcUHRkZmCUJclXFSNzZ5Wsn2LUdjKeeKgtyKbNPLTLAY74i
7yg2W63jIzUrpszU9JkPxL2FP3nGaYT6LX4euSd8xa/euZcXQS34hcyB9EJ48fP2
BgTjt8hh5MhkPzX4/tL0iNuc1DH1d3D0BMClzevFnOh4CmR3ckIDXSrasvU1dkoq
cy1UZlybrY1V/aek6KA9gOwKhHKlaSba4N5IBYwb3ZZhMIKaqwYw7YBipyHN9u5z
NvFHEKz5gIhu5U3rJjx1hpXr4RHxwiOiS1kA2uvxxMz97rmIA8TADg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net