Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa
File: caf40528-fd91-3c64-8165-eed915d60d9c.roa (raw, json)
Hash identifier: TPtN4TpV1VBGqa+UBoUUZ0cYilNgpCvkiCaqbWWcjq0=
Subject key identifier: 9B:37:BA:20:C0:16:00:3C:9B:E6:02:A1:36:A6:CC:5A:77:3C:B0:34
Certificate issuer: /CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba
Certificate serial: 010D0C9F4328584949FE911C81362FB3CA83BE00
Authority key identifier: 1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 8560
IP address blocks: 158.222.102.0/23 maxlen: 32
162.254.24.0/22 maxlen: 32
192.96.159.0/24 maxlen: 32
192.152.28.0/24 maxlen: 32
192.206.141.0/24 maxlen: 32
208.94.36.0/22 maxlen: 32
2607:b500::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:91:1c:81:36:2f:b3:ca:83:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=7c24e972-a822-4ab6-a93a-0ff1e736eacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:13:8b:d9:dc:2a:ca:91:ee:a9:94:dd:87:
3a:42:1e:92:7a:fd:90:01:67:08:6c:78:48:66:e7:
aa:44:45:11:7c:17:ee:fb:14:f3:99:f4:32:2a:82:
09:e4:1e:c9:b0:92:07:01:c2:e5:6d:62:89:28:22:
31:b8:2e:0a:e9:ab:1c:56:eb:ef:ca:f1:53:f1:44:
04:5b:b2:06:be:6f:a0:6f:ef:07:3c:2e:f1:54:35:
c3:f8:97:54:21:94:c8:0c:f0:15:42:76:f8:97:87:
80:9e:7a:2b:80:6b:91:0d:1b:06:68:d7:ee:c2:ab:
bd:0e:f6:ed:50:57:cc:61:65:b8:6f:00:69:a3:9a:
b1:b5:22:5c:5b:8d:d2:a3:0e:ae:9b:c7:4e:70:50:
73:33:5d:b0:ab:59:4e:83:c2:d0:cc:93:28:db:08:
1e:31:2a:95:ea:ce:2d:c4:2d:f2:af:20:b4:7a:ea:
fd:d4:27:fd:92:9e:04:50:07:b6:3b:63:22:ea:f8:
49:2a:7c:a3:f2:4e:f3:30:be:b0:3f:e4:4e:a0:a1:
bb:b0:cd:c5:e5:9b:71:37:d4:10:ba:b1:30:72:23:
8d:5d:74:8f:d8:c7:25:c0:4a:26:bd:4d:d9:80:f8:
0c:8d:ab:69:f5:10:d0:94:33:fa:58:93:39:f7:67:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:BA:20:C0:16:00:3C:9B:E6:02:A1:36:A6:CC:5A:77:3C:B0:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl
X509v3 Authority Key Identifier:
keyid:1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer
sbgp-ipAddrBlock: critical
IPv4:
158.222.102.0/23
162.254.24.0/22
192.96.159.0/24
192.152.28.0/24
192.206.141.0/24
208.94.36.0/22
IPv6:
2607:b500::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:7f:bc:84:fe:ef:73:e3:50:11:27:86:32:2a:dc:10:d2:46:
b7:f2:3e:fd:77:a5:d1:ca:00:f8:f1:a7:90:2f:45:5e:25:97:
12:9d:51:52:cd:2d:8a:00:ea:17:d1:4c:64:75:44:ac:95:47:
46:14:af:0d:37:04:1c:92:7d:ca:2e:3d:b8:7f:31:5b:40:fc:
40:15:3d:94:2b:3b:37:41:8d:61:a7:01:2d:81:68:69:8a:d5:
e5:46:50:bd:2a:7a:2d:d2:2e:8d:ff:36:11:89:c5:d0:dc:fe:
ca:71:f1:74:f7:8a:31:b5:3c:01:06:96:a9:89:7f:ea:3b:d7:
90:6b:c2:81:4e:9a:d8:ae:83:4a:c0:36:df:9f:f4:ac:68:f4:
24:9e:1d:e6:33:79:4e:fb:07:c7:ba:cd:82:50:97:f7:3d:e0:
47:1c:ce:2f:45:b4:e9:a5:d3:35:92:1a:3d:37:7e:58:84:36:
66:b9:74:43:b3:d1:41:d2:73:58:79:ae:a3:1e:e1:67:07:b8:
fd:ab:66:c6:fe:4e:fc:7c:cb:cf:59:d7:63:a8:92:c8:87:7e:
79:8f:86:9a:af:40:e9:0b:52:a5:84:13:fb:65:99:7d:51:5c:
24:26:ca:da:e8:cd:95:bc:d8:32:c6:26:d2:64:89:1d:a6:da:
cc:4d:74:1e
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWElJ/pEcgTYvs8qDvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGVhY2IzZDAtNGI2Yi00ZjJjLTlkZDEtZTI4NzViZmQw
Y2JhMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
N2MyNGU5NzItYTgyMi00YWI2LWE5M2EtMGZmMWU3MzZlYWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf0Ti9ncKsqR7qmU3Yc6Qh6Sev2QAWcIbHhI
ZueqREURfBfu+xTzmfQyKoIJ5B7JsJIHAcLlbWKJKCIxuC4K6ascVuvvyvFT8UQE
W7IGvm+gb+8HPC7xVDXD+JdUIZTIDPAVQnb4l4eAnnorgGuRDRsGaNfuwqu9Dvbt
UFfMYWW4bwBpo5qxtSJcW43Sow6um8dOcFBzM12wq1lOg8LQzJMo2wgeMSqV6s4t
xC3yryC0eur91Cf9kp4EUAe2O2Mi6vhJKnyj8k7zML6wP+ROoKG7sM3F5ZtxN9QQ
urEwciONXXSP2MclwEomvU3ZgPgMjatp9RDQlDP6WJM592f+bwIDAQABo4IDgjCC
A34wHQYDVR0OBBYEFJs3uiDAFgA8m+YCoTamzFp3PLA0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFj
YjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3NWJmZDBjYmEvY2FmNDA1MjgtZmQ5MS0z
YzY0LTgxNjUtZWVkOTE1ZDYwZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGVhY2IzZDAtNGI2Yi00ZjJjLTlk
ZDEtZTI4NzViZmQwY2JhLzBlYWNiM2QwLTRiNmItNGYyYy05ZGQxLWUyODc1YmZk
MGNiYS5jcmwwHwYDVR0jBBgwFoAUGjVbTftFqy72BE8J7x3HPvg5dGEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFjYjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3
NWJmZDBjYmEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBnt5mAwQC
ov4YAwQAwGCfAwQAwJgcAwQAwM6NAwQC0F4kMA0EAgACMAcDBQAmB7UAMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBALp/vIT+73PjUBEnhjIq3BDSRrfyPv13pdHKAPjxp5AvRV4llxKdUVLNLYoA
6hfRTGR1RKyVR0YUrw03BBySfcouPbh/MVtA/EAVPZQrOzdBjWGnAS2BaGmK1eVG
UL0qei3SLo3/NhGJxdDc/spx8XT3ijG1PAEGlqmJf+o715BrwoFOmtiug0rANt+f
9Kxo9CSeHeYzeU77B8e6zYJQl/c94Ecczi9FtOml0zWSGj03fliENma5dEOz0UHS
c1h5rqMe4WcHuP2rZsb+Tvx8y89Z12OoksiHfnmPhpqvQOkLUqWEE/tlmX1RXCQm
ytrozZW82DLGJtJkiR2m2sxNdB4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:19 2025 by rpki-client on console.sobornost.net