Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74a535e-1bac-36c0-b790-e4cab31f5a34.roa
File: d74a535e-1bac-36c0-b790-e4cab31f5a34.roa (raw, json)
Hash identifier: PNDQCNN5BDIJvqFWdmo7ANB8q7+DiTYzUzl51lKe0bY=
Subject key identifier: 29:36:3F:62:D9:ED:D6:66:1C:35:CA:AC:68:97:BC:36:61:3E:DC:DE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BA51954934086FC877F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74a535e-1bac-36c0-b790-e4cab31f5a34.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 74.125.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:a5:19:54:93:40:86:fc:87:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=58bfea3e-c83b-4094-b2e9-9c7d027635e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:a5:5b:ac:39:fb:e0:6b:b9:89:3a:30:d8:
0e:0e:d9:d9:2f:f0:c5:b0:57:5c:2e:88:54:93:5c:
49:2b:9e:b1:0e:d2:c6:3c:67:33:fc:8c:79:d6:c3:
87:eb:2d:db:fa:33:a8:34:b2:a7:95:ab:97:b7:1a:
3d:99:e5:70:7e:b4:42:12:0e:f9:09:c4:4d:18:57:
e6:cc:c8:e0:c0:ba:44:90:fa:89:b8:85:14:77:3b:
2d:c6:68:35:b5:7d:d5:5f:8f:e7:2c:8b:b6:e6:99:
32:c8:f5:dd:50:b7:29:01:b7:77:b5:db:c2:58:5c:
90:9b:71:4e:31:96:d6:5e:20:c6:da:f9:06:4d:0e:
49:aa:6e:c8:19:c4:cd:65:4f:88:9d:4f:6a:1d:4c:
b8:1b:03:5d:c3:78:d9:40:22:83:f9:52:65:ef:9d:
fc:a2:7a:73:b5:7d:21:54:dc:b4:fd:52:65:9c:c7:
2e:22:b9:cd:47:1e:e2:22:8e:ca:76:29:ee:b2:87:
d0:97:1f:60:87:34:f6:ee:a4:da:86:82:80:4d:67:
c0:17:a2:be:62:61:a5:b9:69:2a:0e:23:4b:51:5b:
91:be:7f:d0:fa:9e:13:40:96:08:e8:28:49:75:fc:
23:1c:a2:57:94:da:c2:9f:57:8a:3d:d2:98:73:ea:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:36:3F:62:D9:ED:D6:66:1C:35:CA:AC:68:97:BC:36:61:3E:DC:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d74a535e-1bac-36c0-b790-e4cab31f5a34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:d4:d5:1e:09:85:8a:63:7a:9a:38:f2:e0:2d:31:18:08:f0:
81:11:41:2c:b7:6c:55:bd:8c:9a:ce:b4:dd:ca:c3:66:16:80:
9a:ad:79:d8:0d:7f:cc:eb:f9:52:3e:24:6c:f3:d2:01:39:de:
21:26:e9:c8:21:38:93:38:4b:f2:68:ad:b3:1f:75:cb:00:26:
9a:b0:ca:71:ef:9a:5a:b0:ab:b2:12:d1:3e:8f:0c:bd:48:c6:
9e:d8:c2:0a:28:d2:da:8f:d6:9a:28:11:7f:10:0b:4f:51:86:
c2:99:8b:48:3f:ff:30:d2:67:43:07:5e:64:bc:4a:9e:fe:30:
44:f8:eb:c1:92:4c:3d:59:e2:a9:e5:d6:ea:a6:1c:53:e7:7d:
62:35:c1:b2:76:58:bb:db:ef:b4:53:a1:d0:15:28:2d:8d:f9:
e0:32:5a:1d:cd:40:a3:86:ec:66:06:d8:d3:5d:a4:eb:e7:29:
ab:37:a3:cc:87:98:1b:a3:65:e3:ab:a6:7f:c2:08:2f:21:bd:
4f:c3:42:38:44:35:38:a8:6d:dd:cc:eb:a0:44:99:54:82:e3:
14:71:eb:a4:07:2a:5a:a6:e1:4f:5d:75:75:bd:e1:48:9f:5c:
32:a2:73:5c:e8:fd:cf:26:58:6f:ca:86:c0:30:30:95:45:ec:
6c:91:29:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6UZVJNAhvyHf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NThiZmVhM2UtYzgzYi00MDk0LWIyZTktOWM3ZDAyNzYzNWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ulW6w5++BruYk6MNgODtnZL/DFsFdcLohU
k1xJK56xDtLGPGcz/Ix51sOH6y3b+jOoNLKnlauXtxo9meVwfrRCEg75CcRNGFfm
zMjgwLpEkPqJuIUUdzstxmg1tX3VX4/nLIu25pkyyPXdULcpAbd3tdvCWFyQm3FO
MZbWXiDG2vkGTQ5Jqm7IGcTNZU+InU9qHUy4GwNdw3jZQCKD+VJl7538onpztX0h
VNy0/VJlnMcuIrnNRx7iIo7KdinusofQlx9ghzT27qTahoKATWfAF6K+YmGluWkq
DiNLUVuRvn/Q+p4TQJYI6ChJdfwjHKJXlNrCn1eKPdKYc+qzOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCk2P2LZ7dZmHDXKrGiXvDZhPtzeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDc0YTUzNWUtMWJhYy0z
NmMwLWI3OTAtZTRjYWIzMWY1YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzU1R4JhYpjepo48uAtMRgI8IERQSy3bFW9jJrOtN3Kw2YWgJqtedgN
f8zr+VI+JGzz0gE53iEm6cghOJM4S/JorbMfdcsAJpqwynHvmlqwq7IS0T6PDL1I
xp7Ywgoo0tqP1pooEX8QC09RhsKZi0g//zDSZ0MHXmS8Sp7+MET468GSTD1Z4qnl
1uqmHFPnfWI1wbJ2WLvb77RTodAVKC2N+eAyWh3NQKOG7GYG2NNdpOvnKas3o8yH
mBujZeOrpn/CCC8hvU/DQjhENTiobd3M66BEmVSC4xRx66QHKlqm4U9ddXW94Uif
XDKic1zo/c8mWG/KhsAwMJVF7GyRKbY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:14 2025 by rpki-client on console.sobornost.net