Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d7bec21f-372d-303d-953b-edc218ce68f9.roa
File: d7bec21f-372d-303d-953b-edc218ce68f9.roa (raw, json)
Hash identifier: Kc2IQQdtYXiaGRIo1Pq5UNjqm+UiidL5m3p6M2v2FdU=
Subject key identifier: D7:63:39:0C:34:71:9C:66:98:90:AF:99:5C:6A:78:B1:5C:49:D7:DB
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285849350EADFDD3126A16C4EA4580
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d7bec21f-372d-303d-953b-edc218ce68f9.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.249.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ad:fd:d3:12:6a:16:c4:ea:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=7010e83a-ce5f-49bc-be41-84b85a9758b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:24:43:64:76:39:11:01:f8:37:bc:c1:c2:
ae:06:03:72:eb:7f:55:53:46:2b:aa:9c:95:c6:04:
da:cc:c5:b9:e5:ee:f5:a6:62:e4:77:4e:85:d7:54:
90:a0:71:bd:6f:ef:4b:12:ba:0b:34:db:1a:28:90:
6b:ae:b1:2e:90:54:68:2c:7e:90:fe:89:6b:5b:c8:
1f:0c:7f:9d:25:63:fa:b4:35:47:0f:11:b0:9a:1a:
5a:7b:60:10:3c:1c:17:2b:4a:e0:4e:31:21:fb:39:
4f:8e:86:5d:0c:77:b2:71:a0:33:d4:d8:10:bc:01:
73:a5:ac:6e:2e:ad:f2:b1:46:0b:8a:16:22:27:95:
30:26:2d:fc:0d:5f:5f:8c:04:dd:ec:f9:f8:b6:a0:
a2:ee:c1:09:cd:03:1e:bf:e3:31:a2:33:e4:87:84:
09:e9:81:51:cb:60:40:7a:ce:62:df:87:48:27:d8:
4b:1a:68:01:19:18:52:33:57:f1:28:94:bf:5e:43:
92:68:fe:50:f2:f2:3b:6a:db:8b:5a:3f:b8:4f:7f:
94:17:33:3f:c7:2d:a4:39:18:7d:a9:b8:9b:cd:b3:
d5:83:57:fc:99:15:29:68:a7:df:b0:bd:e3:ef:c1:
93:db:71:e2:20:f3:2a:ea:fa:e7:cd:79:c3:20:fd:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:63:39:0C:34:71:9C:66:98:90:AF:99:5C:6A:78:B1:5C:49:D7:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d7bec21f-372d-303d-953b-edc218ce68f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:94:bc:c5:ff:3d:4b:d0:55:2e:ef:e7:f0:57:c4:75:72:08:
7a:a1:cd:40:2d:8b:01:b1:81:c4:d1:27:45:3b:42:43:c6:63:
42:e6:33:da:a1:07:89:52:0d:23:12:e8:cf:4e:7b:3b:b5:fd:
52:c0:28:a4:62:af:8c:10:78:be:65:88:27:d9:59:4e:e0:0c:
82:fc:cc:4c:cb:dc:fc:6a:45:9c:10:00:eb:5d:b6:06:6d:d6:
c7:25:f0:3b:cc:fd:34:08:65:94:ec:04:6c:06:7a:4c:50:08:
97:b1:97:08:fa:1d:af:ca:a1:d5:29:57:fb:fa:30:bc:12:6b:
50:cd:22:74:2f:73:27:7a:85:49:b7:c0:da:01:f4:96:7d:1a:
fe:8d:84:2b:65:b4:09:e8:35:a4:2c:76:f3:64:4d:3e:51:a1:
43:57:a2:75:f2:65:a7:75:aa:70:52:be:d5:ab:b4:c0:2e:a6:
bf:df:3f:df:e0:ac:a3:75:65:28:fd:9b:75:ae:58:53:b0:1c:
cd:7e:14:40:5c:87:bb:52:c0:50:55:50:e9:93:dc:95:6b:ed:
e4:67:a1:d1:76:73:7f:e9:b7:f4:2d:1f:49:3c:19:7d:43:f7:
3e:c7:3d:6d:01:3e:71:97:cb:97:e6:0f:ef:58:33:d2:26:83:
96:e2:e1:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dq390xJqFsTqRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
NzAxMGU4M2EtY2U1Zi00OWJjLWJlNDEtODRiODVhOTc1OGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20EkQ2R2OREB+De8wcKuBgNy639VU0YrqpyV
xgTazMW55e71pmLkd06F11SQoHG9b+9LEroLNNsaKJBrrrEukFRoLH6Q/olrW8gf
DH+dJWP6tDVHDxGwmhpae2AQPBwXK0rgTjEh+zlPjoZdDHeycaAz1NgQvAFzpaxu
Lq3ysUYLihYiJ5UwJi38DV9fjATd7Pn4tqCi7sEJzQMev+MxojPkh4QJ6YFRy2BA
es5i34dIJ9hLGmgBGRhSM1fxKJS/XkOSaP5Q8vI7atuLWj+4T3+UFzM/xy2kORh9
qbibzbPVg1f8mRUpaKffsL3j78GT23HiIPMq6vrnzXnDIP2YhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdjOQw0cZxmmJCvmVxqeLFcSdfbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDdiZWMyMWYtMzcyZC0z
MDNkLTk1M2ItZWRjMjE4Y2U2OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PnMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+UvMX/PUvQVS7v5/BXxHVyCHqhzUAtiwGxgcTRJ0U7QkPGY0LmM9qh
B4lSDSMS6M9Oezu1/VLAKKRir4wQeL5liCfZWU7gDIL8zEzL3PxqRZwQAOtdtgZt
1scl8DvM/TQIZZTsBGwGekxQCJexlwj6Ha/KodUpV/v6MLwSa1DNInQvcyd6hUm3
wNoB9JZ9Gv6NhCtltAnoNaQsdvNkTT5RoUNXonXyZad1qnBSvtWrtMAupr/fP9/g
rKN1ZSj9m3WuWFOwHM1+FEBch7tSwFBVUOmT3JVr7eRnodF2c3/pt/QtH0k8GX1D
9z7HPW0BPnGXy5fmD+9YM9Img5bi4Xc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:30 2025 by rpki-client on console.sobornost.net