Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/249ed03c-6a67-32e2-a681-7707eb5f52fd.roa
File: 249ed03c-6a67-32e2-a681-7707eb5f52fd.roa (raw, json)
Hash identifier: FidtevAOOdLrp8AhSDlzudbSem+PDIFov8W7mv6wmvs=
Subject key identifier: 05:E8:42:9F:85:BB:34:11:F1:3E:BC:B7:F7:9C:AB:08:0B:00:E0:25
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F43285849192D196DE1567179234F2860
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/249ed03c-6a67-32e2-a681-7707eb5f52fd.roa
Signing time: Thu 06 Mar 2025 13:19:54 +0000
ROA not before: Thu 06 Mar 2025 13:19:54 +0000
ROA not after: Wed 04 Jun 2025 12:19:54 +0000
asID: 207266
IP address blocks: 65.22.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:2d:19:6d:e1:56:71:79:23:4f:28:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 6 13:19:54 2025 GMT
Not After : Jun 4 12:19:54 2025 GMT
Subject: CN=833618c1-3107-4775-b4a6-1c5850a195f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:c6:bb:75:15:e7:74:71:2b:d0:00:4a:e5:
60:54:06:41:2d:a5:06:b1:e5:62:c4:4c:58:d6:02:
c3:33:36:62:d6:f8:f0:21:55:bc:0c:f2:f7:cc:8b:
bc:02:3c:71:79:71:6c:0c:53:49:32:9e:ab:94:44:
fa:74:26:20:a0:c6:b2:bb:31:bd:83:41:a3:36:42:
5d:26:21:30:c7:62:58:1c:3c:ed:51:73:9f:25:8f:
db:fb:ed:93:cb:09:af:38:58:08:51:71:6b:71:1c:
52:4c:fd:b6:72:4f:6c:eb:02:1e:8e:17:d8:12:c6:
2b:f4:8d:dd:65:1c:53:81:92:44:de:6a:14:83:96:
65:67:fa:ca:cf:1b:80:a0:18:03:b4:b8:24:1d:d3:
29:41:e3:fe:0d:15:cd:bb:30:e7:01:14:85:c8:66:
85:92:77:80:f4:1d:26:2f:91:d0:9f:b1:d1:b6:5a:
a6:0d:10:9e:48:48:1b:a3:84:14:17:8f:62:e3:b5:
e6:dc:59:b5:b9:9b:71:5a:4c:e8:9e:24:36:ad:3c:
43:e8:d9:ef:92:24:25:52:2a:ab:1d:fb:53:f9:75:
0a:f6:df:42:ad:34:70:e4:28:e6:58:6f:92:ac:22:
71:17:4e:f4:9a:e1:cf:a5:a4:cf:c2:1b:03:44:83:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E8:42:9F:85:BB:34:11:F1:3E:BC:B7:F7:9C:AB:08:0B:00:E0:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/249ed03c-6a67-32e2-a681-7707eb5f52fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
65.22.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:d2:77:02:92:3a:c8:99:3c:42:57:a2:27:35:ff:d3:a7:c4:
ce:eb:00:82:5c:60:3f:90:8b:0b:2b:11:c8:6f:4a:aa:2c:28:
9c:04:5f:7c:57:18:c4:25:1d:b6:a2:2c:91:00:ba:05:73:bd:
5e:90:ea:ba:6f:d9:32:c6:07:12:ff:50:a1:0e:27:f7:00:83:
03:e6:07:2c:b4:40:b6:51:3a:e6:56:67:fb:10:18:b0:c0:fb:
66:2b:64:17:e7:da:32:ee:f9:e1:ae:40:1e:87:21:db:01:13:
89:2f:94:d8:ba:93:0f:13:9a:9e:15:6a:86:9e:ea:90:13:ed:
7b:73:34:62:a1:d8:f0:28:a9:f5:cb:fb:d1:ab:e4:27:ee:13:
c4:1b:64:56:95:f0:b1:1b:c2:a1:ea:77:1a:03:25:b4:11:e3:
81:d5:79:ed:d9:bd:c7:2c:bf:a2:23:a8:30:16:7f:59:8f:36:
fd:34:45:c4:bf:3e:93:37:22:74:22:c5:23:3f:2c:b9:f1:f1:
c1:7c:e1:95:97:a7:00:1d:33:17:c2:f9:31:77:e9:b3:d8:ff:
4a:96:d3:5b:d9:41:34:4d:d0:aa:ef:0f:ca:7d:1e:d2:44:02:
df:e7:30:a7:30:fe:94:6a:6a:ca:65:47:85:90:0d:52:c9:99:
a8:8c:1f:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLRlt4VZxeSNPKGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDMwNjEzMTk1NFoXDTI1MDYwNDEyMTk1NFowLzEtMCsGA1UEAxMk
ODMzNjE4YzEtMzEwNy00Nzc1LWI0YTYtMWM1ODUwYTE5NWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgHGu3UV53RxK9AASuVgVAZBLaUGseVixExY
1gLDMzZi1vjwIVW8DPL3zIu8AjxxeXFsDFNJMp6rlET6dCYgoMayuzG9g0GjNkJd
JiEwx2JYHDztUXOfJY/b++2TywmvOFgIUXFrcRxSTP22ck9s6wIejhfYEsYr9I3d
ZRxTgZJE3moUg5ZlZ/rKzxuAoBgDtLgkHdMpQeP+DRXNuzDnARSFyGaFkneA9B0m
L5HQn7HRtlqmDRCeSEgbo4QUF49i47Xm3Fm1uZtxWkzoniQ2rTxD6NnvkiQlUiqr
HftT+XUK9t9CrTRw5CjmWG+SrCJxF070muHPpaTPwhsDRIMECQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXoQp+FuzQR8T68t/ecqwgLAOAlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjQ5ZWQwM2MtNmE2Ny0z
MmUyLWE2ODEtNzcwN2ViNWY1MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHLSdwKSOsiZPEJXoic1/9OnxM7rAIJcYD+QiwsrEchvSqosKJwEX3xX
GMQlHbaiLJEAugVzvV6Q6rpv2TLGBxL/UKEOJ/cAgwPmByy0QLZROuZWZ/sQGLDA
+2YrZBfn2jLu+eGuQB6HIdsBE4kvlNi6kw8Tmp4Vaoae6pAT7XtzNGKh2PAoqfXL
+9Gr5CfuE8QbZFaV8LEbwqHqdxoDJbQR44HVee3Zvccsv6IjqDAWf1mPNv00RcS/
PpM3InQixSM/LLnx8cF84ZWXpwAdMxfC+TF36bPY/0qW01vZQTRN0KrvD8p9HtJE
At/nMKcw/pRqasplR4WQDVLJmaiMH3s=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:04 2025 by rpki-client on console.sobornost.net