Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa
File: 70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa (raw, json)
Hash identifier: CMaZqcDvplDIFo+VrSirc/zfe6ixAzdnOiX2r4lG1kE=
Subject key identifier: 1F:91:8B:CE:07:D1:78:25:B1:34:3C:5E:72:DB:6E:A9:8F:4B:F7:BF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584979745023D5A96F6F22D3D9C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa
Signing time: Thu 10 Apr 2025 01:00:46 +0000
ROA not before: Thu 10 Apr 2025 01:00:46 +0000
ROA not after: Wed 09 Jul 2025 01:00:46 +0000
asID: 15169
IP address blocks: 192.178.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:79:74:50:23:d5:a9:6f:6f:22:d3:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 10 01:00:46 2025 GMT
Not After : Jul 9 01:00:46 2025 GMT
Subject: CN=8c19283c-84a7-4776-b7aa-8c0996e0e881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:bd:25:e0:27:31:7f:b4:91:70:f8:1b:db:
07:39:2e:72:b3:3d:84:6c:4b:23:79:e7:1e:2f:2f:
30:22:42:f7:ad:02:41:d3:00:55:07:65:25:14:b7:
92:04:7a:da:03:eb:c3:38:41:bf:52:73:66:a4:ef:
3c:5e:82:c8:0d:7d:61:04:59:d4:27:dd:70:3b:d9:
54:02:c3:40:3e:72:b8:5f:f0:18:85:49:e9:b0:91:
17:f4:f4:84:e7:fc:31:d7:cb:97:d9:1c:ad:03:a2:
00:7c:9c:74:40:5d:4d:b0:1a:25:ef:0f:26:b5:f9:
4e:b7:f1:b7:e4:c0:77:e2:40:1e:52:64:ec:3b:3e:
7c:88:3e:d6:29:aa:bc:c2:8d:81:5d:52:f6:24:51:
9b:c4:98:ef:d9:38:73:31:40:28:cd:0d:e9:d9:a7:
10:95:9b:81:54:5e:f8:9f:a3:5d:80:44:38:38:be:
ea:18:48:de:f3:52:50:9a:74:a7:26:2d:43:3a:e3:
e0:72:bd:24:c7:7f:76:17:a9:d5:8d:81:30:d1:d0:
bb:c6:04:a7:8c:2d:00:8f:8a:ff:aa:2f:51:8d:61:
04:32:0a:5a:bb:d2:86:3b:26:6d:bf:86:13:8f:84:
f9:f0:60:64:e1:08:5e:1e:b8:d8:8a:18:13:ae:ab:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:91:8B:CE:07:D1:78:25:B1:34:3C:5E:72:DB:6E:A9:8F:4B:F7:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:19:8c:37:e8:cc:b4:78:1d:52:55:16:29:32:0b:f0:e3:91:
19:d6:ef:1c:00:77:45:03:14:8e:e1:27:e2:bb:20:1b:b1:5f:
0a:2d:d9:11:4e:d1:db:7b:5f:88:07:0e:18:49:4f:e6:10:4c:
f4:e1:6c:ef:31:77:2f:73:b7:5a:99:14:8e:51:8d:ac:0a:8b:
60:d8:2d:1b:1b:29:cd:1a:28:b5:02:4a:a8:93:9c:eb:01:76:
1b:96:1c:c3:4d:8b:6d:e0:e8:22:1b:02:2c:10:80:57:69:55:
4b:8a:ce:9d:80:c0:fe:72:88:3a:70:52:f3:a3:ba:fd:ad:5f:
3c:30:a1:fb:ab:30:54:f6:eb:07:87:2a:29:79:a9:af:42:d7:
6e:b3:1c:db:1a:ed:99:36:c3:0a:e6:8c:d3:8b:61:bd:8d:81:
1d:e5:7f:cc:c9:d2:1f:7b:b9:69:d1:6c:8f:cd:43:e4:66:cb:
7f:fe:b2:5b:f9:13:17:a3:95:22:7f:2e:e0:b5:15:72:16:9e:
d7:38:74:0f:f6:8f:26:dc:fc:bb:1e:08:1c:f9:9b:ee:1c:d1:
45:c9:1e:9f:50:ef:1b:d1:33:27:72:9f:f8:68:45:e5:41:4f:
cc:97:eb:3d:0b:14:4a:73:e7:b4:26:22:9e:73:e5:85:24:b6:
81:07:d2:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dFAj1alvbyLT2cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk
OGMxOTI4M2MtODRhNy00Nzc2LWI3YWEtOGMwOTk2ZTBlODgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4+9JeAnMX+0kXD4G9sHOS5ysz2EbEsjeece
Ly8wIkL3rQJB0wBVB2UlFLeSBHraA+vDOEG/UnNmpO88XoLIDX1hBFnUJ91wO9lU
AsNAPnK4X/AYhUnpsJEX9PSE5/wx18uX2RytA6IAfJx0QF1NsBol7w8mtflOt/G3
5MB34kAeUmTsOz58iD7WKaq8wo2BXVL2JFGbxJjv2ThzMUAozQ3p2acQlZuBVF74
n6NdgEQ4OL7qGEje81JQmnSnJi1DOuPgcr0kx392F6nVjYEw0dC7xgSnjC0Aj4r/
qi9RjWEEMgpau9KGOyZtv4YTj4T58GBk4QheHrjYihgTrqvyuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+Ri84H0XglsTQ8XnLbbqmPS/e/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBiNmViM2ItM2EwNC0z
ZjVhLWJjZjEtMTI5MDRlNDI2Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIoZjDfozLR4HVJVFikyC/DjkRnW7xwAd0UDFI7hJ+K7IBuxXwot2RFO
0dt7X4gHDhhJT+YQTPThbO8xdy9zt1qZFI5RjawKi2DYLRsbKc0aKLUCSqiTnOsB
dhuWHMNNi23g6CIbAiwQgFdpVUuKzp2AwP5yiDpwUvOjuv2tXzwwofurMFT26weH
Kil5qa9C126zHNsa7Zk2wwrmjNOLYb2NgR3lf8zJ0h97uWnRbI/NQ+Rmy3/+slv5
ExejlSJ/LuC1FXIWntc4dA/2jybc/LseCBz5m+4c0UXJHp9Q7xvRMydyn/hoReVB
T8yX6z0LFEpz57QmIp5z5YUktoEH0vc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:05 2025 by rpki-client on console.sobornost.net