Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa
File: 1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa (raw, json)
Hash identifier: Uk0JLzveO0VdOv4ulotuigKvnLlyPHhUyI8d/s8p0dU=
Subject key identifier: 10:9F:F9:CD:9C:03:B2:16:CE:61:4F:83:DB:0F:CB:1D:B6:7D:18:FF
Certificate issuer: /CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
Certificate serial: 010D0C9F4328584981D45594132CCFAA324457C0
Authority key identifier: 93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 55140
IP address blocks: 23.138.0.0/24 maxlen: 24
162.220.180.0/22 maxlen: 24
162.245.104.0/21 maxlen: 24
198.1.0.0/21 maxlen: 24
209.177.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:55:94:13:2c:cf:aa:32:44:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=23446e25-5612-44d0-be74-3907e5a6d78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:8e:da:36:a1:fb:de:bd:bd:86:ad:dc:b4:
6e:1a:0c:4d:70:51:2b:9c:a2:e0:4c:28:70:08:d7:
3d:ec:59:77:14:8a:3a:4e:90:fa:27:70:5f:e1:15:
9a:c6:00:4a:5b:79:79:62:24:38:02:5e:a3:ad:1c:
b4:e5:a8:2b:59:25:79:d7:c2:c3:cc:d7:79:d2:dd:
c9:c8:4a:25:4a:38:1d:bd:86:3b:02:ba:53:ea:0d:
f2:15:f1:f3:42:69:48:0f:9e:1e:5a:94:f9:24:15:
68:1c:50:58:53:f8:34:90:ee:eb:1a:e8:bd:9d:c1:
3d:1e:12:a6:12:e8:dd:a0:85:4c:34:c8:c5:19:9b:
83:63:45:e9:f0:de:ca:cd:13:9b:5d:c0:c6:ce:b6:
6b:8b:25:1a:2e:69:93:05:50:c9:53:5e:41:ad:dd:
28:3b:1c:10:38:8b:61:3b:d9:80:0b:c3:ee:4d:b8:
68:1f:24:54:25:42:a3:82:8b:a1:00:ff:ad:16:ce:
66:1d:89:cc:5c:31:ad:35:39:7c:78:09:9b:36:a9:
b9:7d:b3:1f:4e:c0:e4:9d:3b:41:30:54:02:08:9e:
08:c1:51:1c:d6:0a:ee:15:28:eb:3d:b7:8d:72:6c:
f8:f9:61:a1:4a:2e:8c:de:0e:b9:1e:c1:bc:58:c8:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9F:F9:CD:9C:03:B2:16:CE:61:4F:83:DB:0F:CB:1D:B6:7D:18:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl
X509v3 Authority Key Identifier:
keyid:93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.0.0/24
162.220.180.0/22
162.245.104.0/21
198.1.0.0/21
209.177.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:e2:4f:bd:b9:50:de:11:86:ec:ad:42:09:b5:7b:c9:46:dc:
f5:ae:21:be:5a:1c:76:06:0d:10:ef:82:e5:a7:c2:bb:4e:4d:
df:88:79:6b:2d:cd:89:8a:38:82:da:2e:1d:b6:71:71:39:29:
39:64:19:a3:94:5e:ae:bc:7f:bd:83:68:ff:22:4e:2a:48:8d:
73:08:4b:93:4b:6c:9f:be:5b:09:c4:89:5d:a3:1c:55:2d:5a:
2c:12:4c:ed:07:6f:4f:d4:d5:b7:b0:0e:79:b0:4a:36:6e:ba:
47:81:32:3f:df:68:13:58:78:45:9c:e8:f6:e7:7a:9c:eb:56:
b3:f2:fa:49:a7:7f:1a:e3:22:8f:a5:ec:c7:ad:fe:17:39:8e:
4c:ba:35:b3:3b:35:66:e8:98:94:dc:2d:ec:01:65:95:a8:67:
00:c2:1f:fb:29:c7:86:e0:c7:d1:c0:f7:5d:90:00:fb:81:69:
bb:d6:94:06:9c:9e:c6:31:50:79:69:ad:18:93:16:36:c5:79:
c5:de:16:64:aa:1d:8c:a3:e0:23:9a:25:54:72:59:b0:29:7f:
5b:d2:65:2c:eb:12:ad:78:c2:1d:89:94:23:c9:f1:08:df:c3:
b1:d0:fe:d6:5a:9f:60:36:9e:c8:f5:3a:9f:4c:77:08:cd:b4:
28:03:3c:83
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEmB1FWUEyzPqjJEV8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTcwN2MyZGQtMjY0Ny00MTY0LWI0YjMtOWU3ZGExNDFk
NWU5MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
MjM0NDZlMjUtNTYxMi00NGQwLWJlNzQtMzkwN2U1YTZkNzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9SO2jah+969vYat3LRuGgxNcFErnKLgTChw
CNc97Fl3FIo6TpD6J3Bf4RWaxgBKW3l5YiQ4Al6jrRy05agrWSV518LDzNd50t3J
yEolSjgdvYY7ArpT6g3yFfHzQmlID54eWpT5JBVoHFBYU/g0kO7rGui9ncE9HhKm
EujdoIVMNMjFGZuDY0Xp8N7KzRObXcDGzrZriyUaLmmTBVDJU15Brd0oOxwQOIth
O9mAC8PuTbhoHyRUJUKjgouhAP+tFs5mHYnMXDGtNTl8eAmbNqm5fbMfTsDknTtB
MFQCCJ4IwVEc1gruFSjrPbeNcmz4+WGhSi6M3g65HsG8WMiTpwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFBCf+c2cA7IWzmFPg9sPyx22fRj/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85NzA3
YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdkYTE0MWQ1ZTkvMWM5OTliMWItNzFmZi0z
ZGI5LWE5M2EtMDZiNGRlODA2MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTcwN2MyZGQtMjY0Ny00MTY0LWI0
YjMtOWU3ZGExNDFkNWU5Lzk3MDdjMmRkLTI2NDctNDE2NC1iNGIzLTllN2RhMTQx
ZDVlOS5jcmwwHwYDVR0jBBgwFoAUk1umtQlGETLURYU61Z0YQwTsBRkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85NzA3YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdk
YTE0MWQ1ZTkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAF4oAAwQC
oty0AwQDovVoAwQDxgEAAwQB0bFKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFPiT725UN4RhuytQgm1e8lG
3PWuIb5aHHYGDRDvguWnwrtOTd+IeWstzYmKOILaLh22cXE5KTlkGaOUXq68f72D
aP8iTipIjXMIS5NLbJ++WwnEiV2jHFUtWiwSTO0Hb0/U1bewDnmwSjZuukeBMj/f
aBNYeEWc6PbnepzrVrPy+kmnfxrjIo+l7Met/hc5jky6NbM7NWbomJTcLewBZZWo
ZwDCH/spx4bgx9HA912QAPuBabvWlAacnsYxUHlprRiTFjbFecXeFmSqHYyj4COa
JVRyWbApf1vSZSzrEq14wh2JlCPJ8Qjfw7HQ/tZan2A2nsj1Op9MdwjNtCgDPIM=
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:02 2025 by rpki-client on console.sobornost.net