
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/a21f29a1-e715-3d1f-bd89-c419d22db812.roa
File: a21f29a1-e715-3d1f-bd89-c419d22db812.roa (raw, json)
Hash identifier: Uev9IY2N6c2X5QdB9QjV/Fo19CKaekBvfCnx0MckCEQ=
Subject key identifier: 03:E7:C1:A6:69:82:18:BD:E6:69:C8:BF:2C:7E:BE:40:9B:8B:BA:A1
Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Certificate serial: 010D0C9F432858494B640CB45A586D811D2078C0
Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/a21f29a1-e715-3d1f-bd89-c419d22db812.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 985
IP address blocks: 149.112.47.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0c:b4:5a:58:6d:81:1d:20:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=d059b056-efc3-4939-8a11-b251bdb03804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:12:c0:5f:84:29:71:df:71:65:40:c3:df:
e6:d0:e7:38:dc:65:28:3d:33:21:dd:1f:8c:cd:90:
5e:4b:99:90:76:bc:5e:7d:d2:9d:3f:06:86:ba:ae:
bd:98:da:73:72:47:33:6e:0f:22:47:fa:19:70:ca:
fb:08:38:bc:41:e4:48:ac:ac:d1:ae:c4:85:be:c1:
9e:a7:ca:4a:f6:fe:48:d9:30:df:1c:a4:f3:a5:c2:
64:c8:7b:eb:cc:63:58:11:1f:e0:bf:ce:53:50:4e:
e1:39:87:36:37:60:3c:ad:1b:c2:3d:76:fb:46:a6:
e8:78:41:c0:e8:a6:18:16:f2:39:d4:ec:98:af:14:
d8:5f:dd:81:d3:1f:80:da:59:85:3b:bf:6f:4f:a2:
9b:53:88:e8:7b:59:e5:01:e4:6b:1a:4b:07:b1:97:
6f:ce:bd:99:d8:15:04:73:f2:1f:05:d3:49:85:09:
f8:5a:69:3c:75:54:12:46:70:fa:70:5a:b1:5e:dc:
69:98:26:9c:ed:5d:f9:b8:a2:8f:ea:9b:88:cb:96:
af:13:ac:90:57:ae:8c:fb:28:63:94:5a:7b:49:5d:
ea:02:9f:f7:88:92:2b:ef:e1:82:ba:21:ce:ec:fa:
da:95:3b:38:e3:0f:93:aa:bf:4f:40:87:98:d0:72:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E7:C1:A6:69:82:18:BD:E6:69:C8:BF:2C:7E:BE:40:9B:8B:BA:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/a21f29a1-e715-3d1f-bd89-c419d22db812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl
X509v3 Authority Key Identifier:
keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:56:6a:8a:19:ee:48:b5:f3:3d:bc:4d:41:25:ae:aa:e2:7d:
50:a1:d8:a8:ce:5d:13:f9:a4:94:44:f2:11:c9:e2:1c:bc:44:
ff:33:6d:4d:81:1a:af:08:8f:f4:ec:cb:89:05:00:e4:f8:b9:
6b:71:be:a6:e1:82:9f:96:29:33:40:ab:b4:c2:cd:d5:f8:a9:
08:d6:54:10:0a:06:e8:6d:0a:f5:42:d7:1a:4e:38:7d:56:2a:
ab:db:b5:46:36:81:69:75:ed:8a:1f:7c:07:e7:30:94:b0:57:
d8:f3:02:b1:ea:f0:ce:7b:0b:fe:b7:a3:c8:2b:d4:8e:73:fd:
30:5b:1c:42:43:d5:a7:3c:17:1f:e0:84:1c:f8:be:ce:44:d5:
b2:2b:fe:7d:4c:08:01:b0:18:e1:d1:65:5c:dc:68:58:4d:99:
6a:28:f1:35:6d:3b:d7:41:17:26:4a:ef:9f:fe:1f:2d:40:77:
d1:62:09:28:29:db:c2:11:d9:75:a0:da:b3:88:ce:ac:43:93:
17:43:57:3b:d6:7b:fe:18:e2:01:de:33:18:2d:00:dd:05:77:
fb:bb:6d:56:50:9d:83:26:ce:67:ec:38:9a:84:11:c9:b8:72:
0e:c6:8f:32:a3:62:b2:be:85:b6:08:98:2e:68:7f:d4:56:35:
14:31:c9:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAy0WlhtgR0geMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZm
YjhjMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
ZDA1OWIwNTYtZWZjMy00OTM5LThhMTEtYjI1MWJkYjAzODA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI4SwF+EKXHfcWVAw9/m0Oc43GUoPTMh3R+M
zZBeS5mQdrxefdKdPwaGuq69mNpzckczbg8iR/oZcMr7CDi8QeRIrKzRrsSFvsGe
p8pK9v5I2TDfHKTzpcJkyHvrzGNYER/gv85TUE7hOYc2N2A8rRvCPXb7RqboeEHA
6KYYFvI51OyYrxTYX92B0x+A2lmFO79vT6KbU4joe1nlAeRrGksHsZdvzr2Z2BUE
c/IfBdNJhQn4Wmk8dVQSRnD6cFqxXtxpmCac7V35uKKP6puIy5avE6yQV66M+yhj
lFp7SV3qAp/3iJIr7+GCuiHO7PralTs44w+Tqr9PQIeY0HL6twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPnwaZpghi95mnIvyx+vkCbi7qhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4
YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvYTIxZjI5YTEtZTcxNS0z
ZDFmLWJkODktYzQxOWQyMmRiODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhOGIwNjgtOTdiMi00YzUyLTkw
NGYtZDc4YzRlNDZmYjhjL2FmYThiMDY4LTk3YjItNGM1Mi05MDRmLWQ3OGM0ZTQ2
ZmI4Yy5jcmwwHwYDVR0jBBgwFoAUBopEEXaNaepCVQwVrXi7rafxYlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhj
NGU0NmZiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1WaooZ7ki18z28TUElrqrifVCh2KjOXRP5pJRE8hHJ4hy8RP8zbU2B
Gq8Ij/Tsy4kFAOT4uWtxvqbhgp+WKTNAq7TCzdX4qQjWVBAKBuhtCvVC1xpOOH1W
KqvbtUY2gWl17YoffAfnMJSwV9jzArHq8M57C/63o8gr1I5z/TBbHEJD1ac8Fx/g
hBz4vs5E1bIr/n1MCAGwGOHRZVzcaFhNmWoo8TVtO9dBFyZK75/+Hy1Ad9FiCSgp
28IR2XWg2rOIzqxDkxdDVzvWe/4Y4gHeMxgtAN0Fd/u7bVZQnYMmzmfsOJqEEcm4
cg7GjzKjYrK+hbYImC5of9RWNRQxybs=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:37 2025 by rpki-client on console.sobornost.net