Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/524b77c2-e79e-3a16-a843-947a161df571.roa
File: 524b77c2-e79e-3a16-a843-947a161df571.roa (raw, json)
Hash identifier: FzFYGrUvYPY8nIHGjeNt7+VKBgQbJZW6Xq6EvDFSN/o=
Subject key identifier: 46:4A:EA:32:C3:EE:0B:BB:F7:11:28:B0:24:57:0B:B2:16:C9:60:46
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F4328584968B426370A13DFBF2A556000
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/524b77c2-e79e-3a16-a843-947a161df571.roa
Signing time: Fri 04 Apr 2025 01:00:47 +0000
ROA not before: Fri 04 Apr 2025 01:00:47 +0000
ROA not after: Thu 03 Jul 2025 01:00:47 +0000
asID: 13737
IP address blocks: 68.233.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:68:b4:26:37:0a:13:df:bf:2a:55:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Apr 4 01:00:47 2025 GMT
Not After : Jul 3 01:00:47 2025 GMT
Subject: CN=5dd85729-2157-4c80-b0d5-e75591743728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:e5:ca:98:eb:40:e1:79:13:1b:85:96:4e:
e6:f4:e3:f2:82:1b:70:dd:3c:ee:68:2b:b5:fd:7c:
fe:e3:50:60:ee:97:78:8a:71:f8:9a:d1:ba:23:78:
b7:1c:d9:73:1f:0b:fb:01:47:63:c6:e6:e9:f3:0d:
07:b1:60:5c:05:82:0e:eb:74:68:a3:00:5b:06:eb:
a1:a9:de:3e:fd:c6:07:b0:98:11:79:27:db:d1:3d:
0f:1d:52:7c:de:ca:27:99:a0:8f:15:69:c6:88:0f:
bb:ea:62:a7:fa:42:6a:69:86:59:9c:bf:f3:43:86:
c2:98:be:8a:a9:6d:9d:83:f1:eb:e0:58:7e:4e:af:
df:a8:b4:d9:ac:ac:b0:2b:01:d2:04:d8:58:04:d6:
b3:87:5a:33:e3:66:f7:ca:52:9d:a6:ea:8a:66:c3:
6b:cd:a6:75:1a:52:56:4b:47:df:c9:df:61:f1:c4:
0a:05:86:fb:2c:18:ca:1d:e2:41:f3:38:4c:66:a0:
4a:b1:a8:91:19:ad:86:b5:36:c5:81:35:06:c4:75:
c6:9c:9d:1b:93:2a:ee:90:78:9b:c1:2f:aa:f6:52:
78:b2:66:9b:a9:e7:cf:21:cf:25:fc:4c:61:be:01:
ce:6a:45:7d:0b:34:91:34:e1:5a:c9:44:7e:00:1e:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:EA:32:C3:EE:0B:BB:F7:11:28:B0:24:57:0B:B2:16:C9:60:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/524b77c2-e79e-3a16-a843-947a161df571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:c4:00:0a:c6:81:31:be:96:77:e1:e0:72:49:91:56:f2:08:
88:14:47:bd:2c:14:83:89:9c:32:fa:dc:9a:83:9c:e0:9a:7a:
22:11:9b:ea:f4:b1:26:86:aa:19:c0:dc:62:8d:91:b1:1d:fe:
c0:4c:a9:dd:a1:ef:2c:1c:c5:17:41:06:3d:8a:bf:1e:73:00:
69:03:b9:3f:58:42:ab:7f:f1:7b:88:aa:6a:17:a1:27:56:ec:
be:11:7b:28:5a:1d:f3:6b:47:d8:62:bc:81:ea:6a:28:41:17:
e4:0c:cc:f0:17:34:d2:40:30:a9:87:8e:9b:f7:b8:07:a8:ad:
4a:a6:8a:54:47:dc:29:37:2c:c8:38:7e:98:ba:a0:cf:62:41:
cc:6d:3d:1f:b6:77:b5:83:f4:c8:e9:9b:cb:db:d5:12:fc:1a:
34:89:6e:04:00:b0:a0:b2:1b:e8:46:4b:fa:b1:b6:43:ab:df:
b1:ce:2d:cb:41:4a:2c:d9:ce:74:65:a7:75:42:02:67:bb:6b:
7f:31:68:a7:93:09:eb:d7:78:21:dd:dc:fb:bb:f6:44:e3:96:
a0:99:38:50:f5:b9:1e:4b:66:eb:f2:23:14:f0:d9:d3:61:dd:
b0:50:8d:7c:3c:0a:e9:cb:e9:cd:d9:2e:d1:d2:6a:59:81:f2:
35:dc:3d:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCY3ChPfvypVYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4
N2ZmMB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk
NWRkODU3MjktMjE1Ny00YzgwLWIwZDUtZTc1NTkxNzQzNzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUDlypjrQOF5ExuFlk7m9OPyghtw3TzuaCu1
/Xz+41Bg7pd4inH4mtG6I3i3HNlzHwv7AUdjxubp8w0HsWBcBYIO63RoowBbBuuh
qd4+/cYHsJgReSfb0T0PHVJ83sonmaCPFWnGiA+76mKn+kJqaYZZnL/zQ4bCmL6K
qW2dg/Hr4Fh+Tq/fqLTZrKywKwHSBNhYBNazh1oz42b3ylKdpuqKZsNrzaZ1GlJW
S0ffyd9h8cQKBYb7LBjKHeJB8zhMZqBKsaiRGa2GtTbFgTUGxHXGnJ0bkyrukHib
wS+q9lJ4smabqefPIc8l/ExhvgHOakV9CzSRNOFayUR+AB6sowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZK6jLD7gu79xEosCRXC7IWyWBGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1
YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvNTI0Yjc3YzItZTc5ZS0z
YTE2LWE4NDMtOTQ3YTE2MWRmNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5
NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl
ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi
OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzEAArGgTG+lnfh4HJJkVbyCIgUR70sFIOJnDL63JqDnOCaeiIRm+r0
sSaGqhnA3GKNkbEd/sBMqd2h7ywcxRdBBj2Kvx5zAGkDuT9YQqt/8XuIqmoXoSdW
7L4ReyhaHfNrR9hivIHqaihBF+QMzPAXNNJAMKmHjpv3uAeorUqmilRH3Ck3LMg4
fpi6oM9iQcxtPR+2d7WD9Mjpm8vb1RL8GjSJbgQAsKCyG+hGS/qxtkOr37HOLctB
SizZznRlp3VCAme7a38xaKeTCevXeCHd3Pu79kTjlqCZOFD1uR5LZuvyIxTw2dNh
3bBQjXw8CunL6c3ZLtHSalmB8jXcPZ8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:01 2025 by rpki-client on console.sobornost.net