Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa
File: 3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa (raw, json)
Hash identifier: xRyAtpKmuuUAy9y1kCkJ6ZlbLhdmCcTzlqO50hTPfug=
Subject key identifier: 97:A6:70:71:04:0E:12:B8:05:06:2E:7D:0B:02:0A:53:57:8B:A3:FC
Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial: 010D0C9F43285848E59BBF9107B78F9EF9BC5700
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 7224
IP address blocks: 192.111.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:bf:91:07:b7:8f:9e:f9:bc:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=4c2b70c6-a701-4592-9e38-d5cbef0927df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:80:3a:36:4a:89:da:13:f4:2e:c7:4c:79:
21:2a:8d:a0:ba:b8:79:38:d9:f8:b7:0f:52:20:06:
5f:7d:c3:8d:97:b6:4b:f0:6b:b8:26:60:97:1c:e8:
a8:ae:17:0b:12:12:79:cc:e4:02:2a:9c:74:80:71:
7d:54:fe:81:0c:d7:7e:6f:12:b7:5f:43:8d:78:4c:
0b:ae:8a:ef:4f:59:db:da:42:18:90:ba:b2:ce:1d:
ce:04:70:ea:fc:56:e1:08:35:26:96:73:da:8c:95:
a4:81:23:3e:aa:7f:04:22:96:7e:e8:96:2b:25:d9:
1e:27:f2:75:06:16:95:cf:e0:79:34:f9:d8:80:9e:
fb:b0:5e:12:54:33:0f:84:1d:7e:95:71:13:bd:0b:
69:c1:90:52:6f:d4:4d:86:73:61:aa:a6:a0:49:d4:
6b:00:46:27:29:52:e7:eb:3c:f1:79:58:31:1d:a9:
7d:ca:04:11:e0:fc:6a:fe:0e:b8:d2:99:b9:cc:8a:
a6:ef:bf:a3:22:03:31:0f:29:6a:ad:1b:2b:fc:e6:
ad:60:d5:01:c3:2f:32:12:2d:0c:d8:2d:4f:46:54:
f7:0a:41:74:53:1d:ce:c3:ee:92:9d:ca:7d:27:d6:
77:43:7d:ab:f6:29:d0:bd:bb:d1:b4:85:97:67:12:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:70:71:04:0E:12:B8:05:06:2E:7D:0B:02:0A:53:57:8B:A3:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3fb08dc7-beea-3458-908d-9b1a8bf6a15c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
X509v3 Authority Key Identifier:
keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.111.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:4c:c7:2b:46:13:d5:71:c8:13:c8:d0:30:5c:07:c2:d9:e6:
28:f4:24:39:55:81:78:1a:fc:18:d2:8a:e9:99:35:82:55:57:
d0:33:48:01:ae:e0:01:9f:f2:e0:a6:85:d2:86:cb:9e:26:ce:
9f:b0:c4:39:3d:ba:d2:f7:76:2f:8b:2b:a9:f4:60:80:5d:af:
15:cc:9e:ac:0c:b4:d2:77:e7:7b:ab:a8:2c:de:d0:9c:24:c9:
9b:5f:48:cf:11:1c:3e:ff:2f:61:f3:91:54:28:7d:33:97:a0:
45:28:78:a9:62:84:f5:0b:35:12:76:b5:d6:b8:f0:7d:0c:a7:
aa:ae:66:c9:b3:61:1b:b9:0a:f4:f1:f2:fd:bc:d6:41:65:2f:
7d:1a:a3:ac:af:ac:a6:a6:b7:26:fe:eb:2d:15:b4:29:5b:1d:
65:6a:c0:6d:35:bf:85:c0:36:87:92:e8:d2:55:48:aa:33:78:
d1:ee:48:80:82:a5:e7:e5:22:73:88:1d:65:de:23:a9:de:51:
de:66:ab:75:10:ea:39:35:a6:77:ab:0a:84:54:1c:11:bb:2d:
79:b9:af:cc:41:aa:62:38:10:d0:77:b3:4f:67:f0:b3:82:6e:
7b:70:08:c8:60:54:8e:09:b2:22:9b:89:1e:5c:14:c4:08:ab:
db:e3:ff:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7+RB7ePnvm8VwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0
ZmNiMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
NGMyYjcwYzYtYTcwMS00NTkyLTllMzgtZDVjYmVmMDkyN2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKKAOjZKidoT9C7HTHkhKo2gurh5ONn4tw9S
IAZffcONl7ZL8Gu4JmCXHOiorhcLEhJ5zOQCKpx0gHF9VP6BDNd+bxK3X0ONeEwL
rorvT1nb2kIYkLqyzh3OBHDq/FbhCDUmlnPajJWkgSM+qn8EIpZ+6JYrJdkeJ/J1
BhaVz+B5NPnYgJ77sF4SVDMPhB1+lXETvQtpwZBSb9RNhnNhqqagSdRrAEYnKVLn
6zzxeVgxHal9ygQR4Pxq/g640pm5zIqm77+jIgMxDylqrRsr/OatYNUBwy8yEi0M
2C1PRlT3CkF0Ux3Ow+6Sncp9J9Z3Q32r9inQvbvRtIWXZxKJzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJemcHEEDhK4BQYufQsCClNXi6P8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy
YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2ZiMDhkYzctYmVlYS0z
NDU4LTkwOGQtOWIxYThiZjZhMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw
NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh
NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi
ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKdMxytGE9VxyBPI0DBcB8LZ5ij0JDlVgXga/BjSiumZNYJVV9AzSAGu
4AGf8uCmhdKGy54mzp+wxDk9utL3di+LK6n0YIBdrxXMnqwMtNJ353urqCze0Jwk
yZtfSM8RHD7/L2HzkVQofTOXoEUoeKlihPULNRJ2tda48H0Mp6quZsmzYRu5CvTx
8v281kFlL30ao6yvrKamtyb+6y0VtClbHWVqwG01v4XANoeS6NJVSKozeNHuSICC
peflInOIHWXeI6neUd5mq3UQ6jk1pnerCoRUHBG7LXm5r8xBqmI4ENB3s09n8LOC
bntwCMhgVI4JsiKbiR5cFMQIq9vj/70=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:33 2025 by rpki-client on console.sobornost.net