Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa
File: 3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa (raw, json)
Hash identifier: tdFTU1qqQ5Rn/p3f8SFnNYa2qBTFw0aOLrdrQ/M5qyY=
Subject key identifier: 7D:AC:0C:E2:36:4A:13:D3:7F:D4:25:D6:78:8D:54:38:2C:C8:46:88
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C581738790BD234416BACB00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 172.217.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:73:87:90:bd:23:44:16:ba:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=113fea55-def5-451b-8cc1-b6877937b04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:e7:13:7f:bc:c1:61:67:3b:14:19:a3:61:
57:a6:8a:3c:13:24:d7:b1:56:86:30:48:e7:00:91:
2a:48:f0:59:b8:33:38:42:8c:65:8f:59:84:9a:35:
27:06:a9:4b:80:19:7c:b0:ea:36:fc:30:ca:fb:df:
1e:4f:6d:67:c4:ba:79:40:83:24:c1:4d:9b:a0:81:
03:ce:fc:bb:45:87:f1:76:9f:e1:d6:0b:81:fc:1b:
90:6c:5e:4c:cf:dc:80:9e:2b:c1:4a:1f:ce:ef:ac:
9a:26:00:10:ce:29:2b:0e:a1:ed:82:11:54:07:b5:
90:5c:37:e6:3d:c5:6e:40:f5:4e:27:1a:39:14:63:
e3:c0:68:be:d3:e7:5c:75:78:db:3c:e3:4c:02:3f:
cb:e4:ca:3e:b5:f2:fb:02:50:c4:2d:4b:4a:76:ce:
f3:44:32:cb:50:da:07:8d:16:12:18:f8:6f:f7:89:
ec:98:80:68:31:6f:39:ee:bb:18:86:96:d4:7e:79:
fd:9a:c5:ba:33:f7:de:63:a5:fc:a2:63:77:1e:44:
22:60:ee:23:d5:31:94:4d:47:8c:6f:1f:69:b5:cf:
84:a4:c3:74:9c:69:de:43:90:40:41:64:62:56:bf:
2d:09:ad:e9:e7:80:25:6a:02:32:74:a5:8c:af:fe:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:0C:E2:36:4A:13:D3:7F:D4:25:D6:78:8D:54:38:2C:C8:46:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3662fa51-751f-3dc1-b1c1-b9fdab8f26a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:fa:5f:97:1d:3a:f4:b2:55:c2:d8:4a:8d:e4:87:04:14:00:
27:14:7e:a0:4f:03:28:a4:be:99:ef:96:09:7d:d6:57:95:61:
2a:56:1a:d8:01:7a:6a:9c:f8:b3:d8:b7:79:f6:33:da:9c:9f:
6c:d0:2e:c0:bf:20:ea:4c:4f:cd:aa:67:f3:73:3e:06:82:1c:
2f:c2:25:c8:49:4e:79:f9:61:00:7e:0e:2f:b7:6f:0c:e2:63:
fd:52:ce:9d:e0:a0:59:13:54:24:f0:39:e0:4f:7d:fe:0b:9f:
13:ac:67:69:18:2e:d1:2a:67:3c:be:c6:66:77:71:31:ea:03:
5e:fb:7b:9f:a9:19:f8:4c:44:dc:04:a2:3f:9e:f0:9f:45:16:
e8:ce:e1:e8:74:c2:9d:64:31:67:d0:15:2d:f6:e4:03:98:d7:
e3:12:75:46:da:de:8c:78:08:93:42:f6:5d:f1:2b:f2:7c:e6:
ba:0b:cf:2d:f7:cf:d5:08:8a:e2:aa:6d:3b:f7:da:a5:bb:bf:
3e:a4:f7:d9:4b:88:be:de:a5:df:6b:44:d8:d8:29:6e:60:34:
19:67:37:8b:98:f1:b9:b6:ee:6d:22:3a:5d:8b:7c:d8:7d:d1:
e1:b6:8c:87:e2:a9:cb:0e:9f:dd:50:90:31:7e:40:0f:d2:c3:
e5:34:d8:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXOHkL0jRBa6ywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTEzZmVhNTUtZGVmNS00NTFiLThjYzEtYjY4Nzc5MzdiMDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul/nE3+8wWFnOxQZo2FXpoo8EyTXsVaGMEjn
AJEqSPBZuDM4Qoxlj1mEmjUnBqlLgBl8sOo2/DDK+98eT21nxLp5QIMkwU2boIED
zvy7RYfxdp/h1guB/BuQbF5Mz9yAnivBSh/O76yaJgAQzikrDqHtghFUB7WQXDfm
PcVuQPVOJxo5FGPjwGi+0+dcdXjbPONMAj/L5Mo+tfL7AlDELUtKds7zRDLLUNoH
jRYSGPhv94nsmIBoMW857rsYhpbUfnn9msW6M/feY6X8omN3HkQiYO4j1TGUTUeM
bx9ptc+EpMN0nGneQ5BAQWRiVr8tCa3p54AlagIydKWMr/7NxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH2sDOI2ShPTf9Ql1niNVDgsyEaIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzY2MmZhNTEtNzUxZi0z
ZGMxLWIxYzEtYjlmZGFiOGYyNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADH6X5cdOvSyVcLYSo3khwQUACcUfqBPAyikvpnvlgl91leVYSpWGtgB
emqc+LPYt3n2M9qcn2zQLsC/IOpMT82qZ/NzPgaCHC/CJchJTnn5YQB+Di+3bwzi
Y/1Szp3goFkTVCTwOeBPff4LnxOsZ2kYLtEqZzy+xmZ3cTHqA177e5+pGfhMRNwE
oj+e8J9FFujO4eh0wp1kMWfQFS325AOY1+MSdUba3ox4CJNC9l3xK/J85roLzy33
z9UIiuKqbTv32qW7vz6k99lLiL7epd9rRNjYKW5gNBlnN4uY8bm27m0iOl2LfNh9
0eG2jIfiqcsOn91QkDF+QA/Sw+U02Gc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:03 2025 by rpki-client on console.sobornost.net