Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa
File: af46517c-ca12-3893-94bf-56e17eb024f2.roa (raw, json)
Hash identifier: +9WZI3dvGkBy1fJdNbWqtgvj8tnb6s+W7YmFlao0my8=
Subject key identifier: 16:43:5C:CC:AF:46:60:28:65:97:34:44:81:A4:79:81:99:5D:08:44
Certificate issuer: /CN=72de343e-ded3-43ae-b207-e492c0f88566
Certificate serial: 010D0C9F43285848EC969150FA584E9327DB5800
Authority key identifier: D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 22803
IP address blocks: 199.59.234.0/23 maxlen: 24
208.92.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:91:50:fa:58:4e:93:27:db:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72de343e-ded3-43ae-b207-e492c0f88566
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=941548ef-150e-4c5a-88f2-5b54168ffc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:c2:6f:df:10:09:0b:f0:cb:48:9a:ae:2e:
6b:ac:8d:b1:94:54:59:9b:40:42:59:ff:26:ae:fd:
df:4b:a2:e0:c1:fd:51:c7:07:be:7f:a5:e0:5a:dc:
af:8e:03:94:c9:69:36:30:cf:a6:2b:c6:48:b8:c5:
5a:9f:74:9b:87:c2:af:01:36:57:19:db:5b:27:cd:
ed:22:e3:64:57:db:cd:28:9a:3c:1f:bf:fd:f1:51:
ca:67:b3:94:d6:5b:dc:81:9a:39:87:66:64:8c:32:
e9:b7:5e:c6:f7:66:d6:cd:e3:e1:ba:82:12:e7:96:
42:d2:21:2d:99:67:06:14:c4:a1:69:f1:c0:94:b4:
91:f1:62:c1:65:6c:5d:60:23:4b:50:fe:21:22:95:
e2:3f:22:08:bc:ce:91:8a:ad:04:be:d9:65:72:5a:
66:8b:60:82:03:62:4f:57:88:ba:c6:ef:9e:e4:5a:
1e:f6:e2:f5:2b:52:d1:65:42:6c:0e:0b:92:c7:d2:
7b:ca:6d:32:cd:79:ca:21:55:d6:e9:7f:0b:88:9c:
88:0c:5f:e1:ed:c6:27:14:f0:c5:f1:48:16:c2:b7:
41:4a:03:8c:f9:df:da:c3:14:b9:c3:21:7a:e4:d7:
e1:23:fd:17:12:e3:f4:c3:e2:a7:df:a8:14:e5:d4:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:5C:CC:AF:46:60:28:65:97:34:44:81:A4:79:81:99:5D:08:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl
X509v3 Authority Key Identifier:
keyid:D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer
sbgp-ipAddrBlock: critical
IPv4:
199.59.234.0/23
208.92.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:fd:19:de:57:8a:09:21:61:ee:2d:95:83:9a:6e:f1:35:5f:
c7:4c:54:1c:2e:dd:41:ee:fb:f8:66:77:40:0c:f6:29:f3:81:
e9:9d:c6:3f:42:8e:16:b4:2c:f8:ed:dc:3d:19:89:22:a6:6f:
2c:b6:30:05:6e:46:80:56:fe:ad:5a:fd:a0:66:e6:85:d4:22:
ef:27:8d:0b:66:c1:9f:75:76:b9:e3:b3:a9:7c:c7:9b:95:e4:
a5:8a:dc:ba:9b:3a:fe:eb:2a:c1:07:00:20:4e:e7:5e:3e:4e:
71:91:29:6d:87:a7:6b:d8:6a:25:94:60:10:de:5b:0b:f7:c6:
48:02:79:bc:0e:f5:bd:ae:fb:60:03:21:90:f0:b9:fe:11:4e:
af:9e:83:1e:98:55:0a:c9:e3:2f:ff:5d:b1:1a:57:18:52:42:
4a:67:5a:96:b8:ca:7d:1f:c2:fb:da:84:cf:0d:f1:7a:fc:a5:
bb:0c:b4:ad:24:b6:32:32:7d:a2:a0:6b:ba:b7:b5:0f:ea:0d:
2d:5a:b3:6b:60:60:8a:e8:4b:eb:be:bd:83:e0:4e:02:52:fb:
d2:69:9b:50:a9:59:e2:31:ae:b5:b2:de:1d:f7:4d:61:7f:6d:
6d:0b:28:65:5a:0e:08:9d:45:07:67:3a:b3:23:ce:2f:ec:43:
01:c5:f2:2d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjslpFQ+lhOkyfbWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJkZTM0M2UtZGVkMy00M2FlLWIyMDctZTQ5MmMwZjg4
NTY2MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
OTQxNTQ4ZWYtMTUwZS00YzVhLTg4ZjItNWI1NDE2OGZmYzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNTCb98QCQvwy0iari5rrI2xlFRZm0BCWf8m
rv3fS6Lgwf1Rxwe+f6XgWtyvjgOUyWk2MM+mK8ZIuMVan3Sbh8KvATZXGdtbJ83t
IuNkV9vNKJo8H7/98VHKZ7OU1lvcgZo5h2ZkjDLpt17G92bWzePhuoIS55ZC0iEt
mWcGFMShafHAlLSR8WLBZWxdYCNLUP4hIpXiPyIIvM6Riq0Evtllclpmi2CCA2JP
V4i6xu+e5Foe9uL1K1LRZUJsDguSx9J7ym0yzXnKIVXW6X8LiJyIDF/h7cYnFPDF
8UgWwrdBSgOM+d/awxS5wyF65NfhI/0XEuP0w+Kn36gU5dTCywIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBZDXMyvRmAoZZc0RIGkeYGZXQhEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MmRl
MzQzZS1kZWQzLTQzYWUtYjIwNy1lNDkyYzBmODg1NjYvYWY0NjUxN2MtY2ExMi0z
ODkzLTk0YmYtNTZlMTdlYjAyNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzJkZTM0M2UtZGVkMy00M2FlLWIy
MDctZTQ5MmMwZjg4NTY2LzcyZGUzNDNlLWRlZDMtNDNhZS1iMjA3LWU0OTJjMGY4
ODU2Ni5jcmwwHwYDVR0jBBgwFoAU183wKI29M1FMhbJfuD5KCaWPPPEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MmRlMzQzZS1kZWQzLTQzYWUtYjIwNy1lNDky
YzBmODg1NjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxzvqAwQC
0FzkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEn9Gd5XigkhYe4tlYOabvE1X8dMVBwu3UHu+/hmd0AM9inz
gemdxj9Cjha0LPjt3D0ZiSKmbyy2MAVuRoBW/q1a/aBm5oXUIu8njQtmwZ91drnj
s6l8x5uV5KWK3LqbOv7rKsEHACBO514+TnGRKW2Hp2vYaiWUYBDeWwv3xkgCebwO
9b2u+2ADIZDwuf4RTq+egx6YVQrJ4y//XbEaVxhSQkpnWpa4yn0fwvvahM8N8Xr8
pbsMtK0ktjIyfaKga7q3tQ/qDS1as2tgYIroS+u+vYPgTgJS+9Jpm1CpWeIxrrWy
3h33TWF/bW0LKGVaDgidRQdnOrMjzi/sQwHF8i0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:20 2025 by rpki-client on console.sobornost.net