Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa
File: 213b928d-a0ca-3a2a-b210-23856b353e9d.roa (raw, json)
Hash identifier: r0HnpM2IrHR8m8x8XH8NvMUZkTwf557xzTdSJkOgNm4=
Subject key identifier: 4A:F5:C5:F5:63:EC:0E:F4:17:CC:49:81:00:FB:AB:94:7C:20:48:D4
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F43285848F65BD4FB0B96358307527B00
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 54825
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d4:fb:0b:96:35:83:07:52:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=3f1482e1-dd0d-483e-ab25-7ba16acbeb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c2:a7:93:ab:16:6f:e9:02:3e:55:ff:40:f4:
ac:1c:d1:e8:38:95:3f:5a:4c:b4:66:a4:58:75:09:
a0:51:00:97:ef:1c:d9:66:06:ad:17:9b:96:25:b8:
ed:9e:95:8a:ff:3f:0e:6b:e4:c5:2a:bf:b1:d9:e9:
79:2f:cb:d5:4c:5e:fa:ec:db:81:5d:b6:8c:75:b7:
a4:52:65:c1:c5:13:5d:9e:3c:8d:bc:d4:7c:5b:5c:
d8:f0:5f:4f:a5:dd:ff:5e:d8:ac:0e:74:d1:0e:26:
55:e8:35:e0:85:22:c0:d4:3e:28:4f:09:49:67:62:
4f:f0:72:67:00:ea:0e:d9:6a:48:71:4a:9b:31:10:
84:07:06:9d:3b:46:c4:54:2a:e8:87:51:83:67:43:
cc:12:22:1c:d4:86:2b:8d:18:3f:91:9e:6d:70:71:
24:d7:e6:6c:e0:8c:be:a7:05:4b:27:4f:04:d6:d8:
be:03:7e:95:62:4b:d2:18:16:12:cc:d9:4b:ba:49:
5f:e9:f0:fe:0f:65:fa:5c:5e:1f:3c:40:20:22:ad:
29:5c:cf:b0:d5:03:f3:50:37:cc:92:b1:5e:1a:7f:
ef:88:d6:9c:d3:cb:22:1d:f2:83:50:70:2f:fc:c8:
b5:ac:5f:0b:dc:ab:cb:d2:84:0b:b2:cd:64:b1:87:
04:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F5:C5:F5:63:EC:0E:F4:17:CC:49:81:00:FB:AB:94:7C:20:48:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:74:26:8b:f0:84:f7:13:0d:1e:d2:9a:76:d0:29:e8:96:ab:
e5:6d:6f:2a:32:51:62:cd:37:f8:99:fc:27:84:3a:f7:44:96:
ae:ae:77:95:43:85:f5:0b:98:61:9a:1d:c3:2f:42:47:65:9d:
51:25:cc:69:a1:53:fa:7d:0d:fe:2a:88:22:c7:cf:93:4c:7f:
eb:05:02:e3:4d:46:e3:ed:02:b0:6e:dc:38:4c:f0:d2:05:a5:
3c:83:99:fe:98:4f:91:16:78:8a:d5:58:fb:73:55:16:5b:31:
1e:83:17:28:c3:d3:d9:af:dd:11:31:17:dc:17:c8:42:70:76:
c6:db:80:41:98:1c:43:ca:81:f6:6b:93:60:a1:84:cc:9b:0c:
83:18:81:ad:8d:71:bb:1a:44:ae:fd:4d:f6:17:a8:5f:28:f8:
1e:0b:1f:8b:59:8b:77:2b:e2:ff:1b:0d:18:01:47:00:6b:82:
90:f1:b2:83:53:be:9e:80:33:5e:53:2e:a2:e6:b2:10:2a:b2:
c1:1d:cb:9a:fa:da:17:2e:63:75:16:3d:b2:2c:f2:fc:10:69:
fc:06:32:a2:8f:8d:11:14:59:87:7d:57:a8:29:20:77:12:cc:
b2:27:c6:1b:63:56:bd:36:65:32:e6:e8:77:c3:8b:e2:86:58:
6e:ec:1b:d8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj2W9T7C5Y1gwdSewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm
NDdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
M2YxNDgyZTEtZGQwZC00ODNlLWFiMjUtN2JhMTZhY2JlYjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Knk6sWb+kCPlX/QPSsHNHoOJU/Wky0ZqRY
dQmgUQCX7xzZZgatF5uWJbjtnpWK/z8Oa+TFKr+x2el5L8vVTF767NuBXbaMdbek
UmXBxRNdnjyNvNR8W1zY8F9Ppd3/XtisDnTRDiZV6DXghSLA1D4oTwlJZ2JP8HJn
AOoO2WpIcUqbMRCEBwadO0bEVCroh1GDZ0PMEiIc1IYrjRg/kZ5tcHEk1+Zs4Iy+
pwVLJ08E1ti+A36VYkvSGBYSzNlLuklf6fD+D2X6XF4fPEAgIq0pXM+w1QPzUDfM
krFeGn/viNac08siHfKDUHAv/Mi1rF8L3KvL0oQLss1ksYcETQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEr1xfVj7A70F8xJgQD7q5R8IEjUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh
NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMjEzYjkyOGQtYTBjYS0z
YTJhLWIyMTAtMjM4NTZiMzUzZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk
MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5
ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5
MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD
izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALN0JovwhPcTDR7SmnbQKeiWq+VtbyoyUWLNN/iZ/CeEOvdE
lq6ud5VDhfULmGGaHcMvQkdlnVElzGmhU/p9Df4qiCLHz5NMf+sFAuNNRuPtArBu
3DhM8NIFpTyDmf6YT5EWeIrVWPtzVRZbMR6DFyjD09mv3RExF9wXyEJwdsbbgEGY
HEPKgfZrk2ChhMybDIMYga2NcbsaRK79TfYXqF8o+B4LH4tZi3cr4v8bDRgBRwBr
gpDxsoNTvp6AM15TLqLmshAqssEdy5r62hcuY3UWPbIs8vwQafwGMqKPjREUWYd9
V6gpIHcSzLInxhtjVr02ZTLm6HfDi+KGWG7sG9g=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:35 2025 by rpki-client on console.sobornost.net