Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76c1d4c7-6064-3024-864f-e47606ba333b.roa
File: 76c1d4c7-6064-3024-864f-e47606ba333b.roa (raw, json)
Hash identifier: gNZAyxiiI5LZxf/o3VNfLYCTvTBJ4IzKb3FyWH60JMw=
Subject key identifier: 15:B5:C2:E3:37:F9:25:41:76:62:18:8D:86:79:78:16:A9:EC:1E:63
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491ED6D3E0AAF9AF332D67DC40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76c1d4c7-6064-3024-864f-e47606ba333b.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.209.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:d3:e0:aa:f9:af:33:2d:67:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=30b73f52-9875-434e-b05b-c9bc4b74d89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:b7:d9:fb:1a:a5:52:82:c5:f7:54:c3:f5:
23:78:2d:d2:3b:9c:f2:87:f0:e1:70:32:5f:28:bf:
db:9a:a9:57:49:5c:da:a5:a4:17:78:1a:0b:74:a9:
f1:e3:57:ca:b9:5a:35:35:67:79:03:8f:0e:72:11:
d3:97:f2:5c:40:30:76:aa:e9:b3:d6:1f:1f:d3:70:
3a:3e:47:d0:65:9c:3c:6e:0f:6f:6a:a3:6f:fe:4e:
d1:ed:12:ce:45:12:31:fa:99:f9:29:7b:7d:ad:aa:
73:62:3a:ec:e3:d6:19:50:58:38:05:f1:f7:c4:8d:
4b:d0:6c:00:a7:28:94:e9:3b:2b:62:4b:4f:7a:62:
6a:1c:b5:19:21:1c:5f:01:3b:6a:e6:bc:bf:46:aa:
ce:47:52:03:83:81:75:28:30:94:68:f8:db:72:34:
46:1d:cc:fa:98:0a:65:55:46:d7:e2:ae:df:d7:c5:
55:c6:84:00:5e:f4:e0:71:f5:bb:d8:0c:a8:6d:3a:
af:cb:e3:2d:33:09:4d:04:a8:94:49:ec:90:b7:74:
2f:13:59:aa:9e:d4:35:a0:4a:db:31:b2:8c:8d:71:
89:d6:33:a9:1c:c4:5c:13:33:aa:bd:17:79:9b:34:
ce:2d:6c:02:94:06:a4:81:3d:7b:f9:3b:27:d4:67:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B5:C2:E3:37:F9:25:41:76:62:18:8D:86:79:78:16:A9:EC:1E:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76c1d4c7-6064-3024-864f-e47606ba333b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a1:2f:83:c8:b1:a0:78:f9:9a:86:5e:4c:e1:2d:74:bb:76:
bb:80:f6:2e:ad:06:fb:44:d8:8c:ed:2e:7b:da:57:f2:2b:fa:
8e:15:5e:46:bd:1f:bb:b4:a4:e7:c1:82:7a:46:b7:f6:34:8a:
5e:a1:72:80:9e:0d:af:fb:4b:d8:98:57:05:aa:48:7c:7c:b5:
b3:16:79:a0:eb:25:27:26:96:68:b5:f3:1b:ea:27:dd:bc:e6:
d5:7c:6d:1b:e4:1f:5c:4a:ec:0b:e2:a3:6c:26:20:23:54:6a:
6f:98:e8:0b:df:75:43:3a:3b:ac:ca:38:d4:04:eb:70:87:a0:
66:e9:49:51:44:28:3d:4d:75:31:28:e8:74:aa:f8:c7:89:c0:
eb:f1:d8:26:97:a3:b9:4a:c3:cc:65:bc:2e:cb:3a:fd:d6:58:
0a:ee:72:d9:3a:c4:5f:0e:09:10:e6:94:88:19:52:33:26:d9:
ad:fc:d1:ff:7d:48:ba:03:e7:ed:34:72:b2:b5:da:6b:0b:9f:
2e:b1:cf:66:74:20:2b:65:4a:57:8b:53:a1:cf:4f:6f:41:bb:
07:fa:22:21:b9:2c:fe:00:3d:ad:0e:d0:5b:fe:5f:d9:8b:6d:
71:46:73:d9:27:02:02:22:21:a7:bb:19:32:fc:72:30:96:78:
2f:98:1f:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tPgqvmvMy1n3EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
MzBiNzNmNTItOTg3NS00MzRlLWIwNWItYzliYzRiNzRkODlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaK32fsapVKCxfdUw/UjeC3SO5zyh/DhcDJf
KL/bmqlXSVzapaQXeBoLdKnx41fKuVo1NWd5A48OchHTl/JcQDB2qumz1h8f03A6
PkfQZZw8bg9vaqNv/k7R7RLORRIx+pn5KXt9rapzYjrs49YZUFg4BfH3xI1L0GwA
pyiU6TsrYktPemJqHLUZIRxfATtq5ry/RqrOR1IDg4F1KDCUaPjbcjRGHcz6mApl
VUbX4q7f18VVxoQAXvTgcfW72AyobTqvy+MtMwlNBKiUSeyQt3QvE1mqntQ1oErb
MbKMjXGJ1jOpHMRcEzOqvRd5mzTOLWwClAakgT17+Tsn1GeQewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBW1wuM3+SVBdmIYjYZ5eBap7B5jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzZjMWQ0YzctNjA2NC0z
MDI0LTg2NGYtZTQ3NjA2YmEzMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9HMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOhL4PIsaB4+ZqGXkzhLXS7druA9i6tBvtE2IztLnvaV/Ir+o4VXka9
H7u0pOfBgnpGt/Y0il6hcoCeDa/7S9iYVwWqSHx8tbMWeaDrJScmlmi18xvqJ928
5tV8bRvkH1xK7Avio2wmICNUam+Y6AvfdUM6O6zKONQE63CHoGbpSVFEKD1NdTEo
6HSq+MeJwOvx2CaXo7lKw8xlvC7LOv3WWAructk6xF8OCRDmlIgZUjMm2a380f99
SLoD5+00crK12msLny6xz2Z0ICtlSleLU6HPT29Buwf6IiG5LP4APa0O0Fv+X9mL
bXFGc9knAgIiIae7GTL8cjCWeC+YH0M=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:09 2025 by rpki-client on console.sobornost.net