Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa
File: 4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa (raw, json)
Hash identifier: wp0w2ae3bkSKx/kbEZCzrsvfwM8Y17Po2jbjIlFv+JY=
Subject key identifier: 86:9C:9A:1E:60:A7:F8:FA:75:ED:BC:9D:63:8C:C9:9C:E0:28:87:7A
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F43285848FBF12C360814A1344D846E00
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa
Signing time: Mon 24 Feb 2025 02:00:38 +0000
ROA not before: Mon 24 Feb 2025 02:00:38 +0000
ROA not after: Sun 25 May 2025 01:00:38 +0000
asID: 16437
IP address blocks: 208.88.244.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:f1:2c:36:08:14:a1:34:4d:84:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Feb 24 02:00:38 2025 GMT
Not After : May 25 01:00:38 2025 GMT
Subject: CN=d420078d-ac57-4d04-a1b4-abba77e1a94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2e:30:b9:81:9b:84:43:4a:52:16:ff:8b:a2:
36:92:21:46:0e:0d:3a:36:6b:1e:b4:c9:d0:59:df:
52:49:54:36:c7:0c:ae:aa:93:3a:d4:61:bf:cc:a4:
79:01:e7:6a:c0:b1:91:b3:74:07:34:42:cd:2f:87:
a7:09:17:db:9b:e9:af:bf:55:55:c3:c8:dc:32:f8:
5f:0a:6b:a0:45:05:63:fe:dd:6a:9f:4e:9b:6f:6e:
a3:0f:ec:47:a6:f1:6f:b1:44:bb:04:d5:9d:8a:25:
63:b5:b5:7a:cb:ac:3c:f1:2d:6d:c3:d4:2f:f8:91:
ce:53:39:67:af:81:1e:ea:19:37:21:c1:9f:55:81:
74:54:ea:ca:73:58:1b:30:e4:2b:1b:57:96:46:d3:
12:3f:4c:c0:ff:d8:89:81:ef:07:1f:c0:2d:d9:88:
30:1b:f0:f1:76:ce:6f:e7:75:aa:16:16:42:0e:8a:
2b:12:5c:ba:fd:cb:75:46:08:36:dd:d7:46:e4:7d:
9e:ce:19:07:e8:1b:6d:25:81:b5:5e:36:62:6b:9c:
1f:55:07:65:83:0c:83:9b:33:6c:fc:79:32:ea:69:
6c:50:90:ee:f0:99:50:fb:8e:c6:55:32:06:fb:81:
12:2b:5f:49:37:99:86:b9:07:2f:ae:19:ee:b9:13:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:9A:1E:60:A7:F8:FA:75:ED:BC:9D:63:8C:C9:9C:E0:28:87:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:dd:62:7d:cb:c0:ea:5d:f2:c6:6a:a4:5d:8c:b2:f4:98:00:
9c:91:5d:2c:a8:f0:aa:4b:09:81:c3:c4:aa:87:dd:4b:99:e6:
2b:5d:ed:6e:2b:3a:56:a4:5a:75:1c:45:cd:83:45:c6:99:02:
0f:15:38:dc:de:8f:bd:87:fb:68:f6:cc:18:78:28:6e:6f:31:
d4:47:18:14:f7:5f:77:0d:5d:04:7a:23:06:9b:64:f2:15:8f:
45:2d:c9:b9:65:6a:50:70:fe:4d:7c:8d:b5:d4:2a:10:95:cb:
ea:c1:a3:7a:f7:39:b7:f0:dd:83:7d:75:58:50:a4:7b:b5:f0:
63:a4:34:d0:44:be:9e:35:54:ca:e0:09:d5:bc:0e:62:2c:d9:
27:f8:41:7d:82:bf:81:fc:61:bb:a6:b9:76:60:ff:40:12:73:
d3:a3:9c:03:ba:f4:36:dd:3e:2e:02:bd:f3:63:e2:ac:7b:cc:
e4:6d:fa:3d:c2:c5:63:a1:70:b1:11:cb:54:3f:e3:67:67:e4:
d9:a2:d8:72:53:5d:05:83:9c:1d:23:88:67:f3:35:1c:c6:51:
59:1d:8d:06:ad:53:67:eb:1f:89:3f:8f:5a:3f:c4:6a:35:a0:
35:e0:96:2f:b5:be:0e:d3:33:cd:58:38:2a:34:08:c8:18:37:
a3:07:87:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78Sw2CBShNE2EbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm
Yjg1MB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk
ZDQyMDA3OGQtYWM1Ny00ZDA0LWExYjQtYWJiYTc3ZTFhOTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC4wuYGbhENKUhb/i6I2kiFGDg06NmsetMnQ
Wd9SSVQ2xwyuqpM61GG/zKR5AedqwLGRs3QHNELNL4enCRfbm+mvv1VVw8jcMvhf
CmugRQVj/t1qn06bb26jD+xHpvFvsUS7BNWdiiVjtbV6y6w88S1tw9Qv+JHOUzln
r4Ee6hk3IcGfVYF0VOrKc1gbMOQrG1eWRtMSP0zA/9iJge8HH8At2YgwG/Dxds5v
53WqFhZCDoorEly6/ct1Rgg23ddG5H2ezhkH6BttJYG1XjZia5wfVQdlgwyDmzNs
/Hky6mlsUJDu8JlQ+47GVTIG+4ESK19JN5mGuQcvrhnuuROv0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIacmh5gp/j6de28nWOMyZzgKId6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw
ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNGE3ZTFkYmQtNDcwNC0z
NDJiLWI3NDEtNTZiMGM4ZTc1OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh
NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm
ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1
Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzdYn3LwOpd8sZqpF2MsvSYAJyRXSyo8KpLCYHDxKqH3UuZ5itd7W4r
OlakWnUcRc2DRcaZAg8VONzej72H+2j2zBh4KG5vMdRHGBT3X3cNXQR6IwabZPIV
j0UtybllalBw/k18jbXUKhCVy+rBo3r3Obfw3YN9dVhQpHu18GOkNNBEvp41VMrg
CdW8DmIs2Sf4QX2Cv4H8YbumuXZg/0ASc9OjnAO69DbdPi4CvfNj4qx7zORt+j3C
xWOhcLERy1Q/42dn5Nmi2HJTXQWDnB0jiGfzNRzGUVkdjQatU2frH4k/j1o/xGo1
oDXgli+1vg7TM81YOCo0CMgYN6MHhz0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:37 2025 by rpki-client on console.sobornost.net