Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa
File: 967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa (raw, json)
Hash identifier: /qVmgyjc35bF+5Qh5JzMg3ph6DXHmBloG0kTrKUvv1U=
Subject key identifier: 37:0A:C8:21:A9:F9:24:AB:B5:E7:C8:E8:F0:86:AD:2B:69:85:15:7A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C580F93B07AA43EFF78D0000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 16491
IP address blocks: 70.41.23.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f9:3b:07:aa:43:ef:f7:8d:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5be8978e-7488-4119-b005-bfe694eea5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:b9:34:29:f1:4a:c1:76:bf:56:39:93:c8:
ff:53:23:af:59:b5:90:5e:81:91:c1:47:3c:33:3d:
03:9e:f2:7a:8b:86:fc:30:46:5f:80:df:d9:3d:f6:
60:68:8d:30:81:cf:e3:8c:89:6c:82:1a:c5:cd:08:
94:bb:da:a1:d9:b1:a1:37:03:6b:0e:9b:c4:b7:e3:
74:4e:92:3e:ce:c1:ed:eb:8c:24:df:bd:f9:9c:86:
f0:67:41:c4:b3:8b:b0:8d:d0:32:5a:1d:7d:eb:8d:
cd:56:f5:18:ec:60:0e:7f:0a:5e:a1:32:bc:90:61:
37:f5:e6:13:98:23:54:92:6b:84:9b:54:0e:7b:b8:
25:ac:68:c4:35:15:c9:2a:b2:f5:5e:88:cf:b2:16:
37:1a:67:44:67:d8:8b:58:e6:a2:99:ee:79:e5:48:
08:6f:ab:da:a3:38:89:62:22:f6:32:ed:92:4c:0d:
14:ac:71:eb:cf:a1:2e:06:9f:4d:85:30:a0:0d:dc:
50:15:08:2d:7d:07:ce:0b:09:8f:35:32:2c:47:9a:
9c:6b:d3:11:27:d2:ed:dc:9e:7b:4d:5c:2e:03:07:
01:93:d3:53:e8:ef:67:ce:e0:07:b5:20:51:d9:e5:
75:3b:26:52:ab:b1:25:f1:79:41:aa:8d:0d:62:f1:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0A:C8:21:A9:F9:24:AB:B5:E7:C8:E8:F0:86:AD:2B:69:85:15:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:77:b0:82:9c:2a:8b:b8:2d:bd:c4:ae:9b:f1:82:73:a3:3a:
32:8b:0b:8c:d7:41:03:8c:de:01:0d:2c:a4:3e:f6:23:68:27:
2a:84:08:18:23:38:c7:1b:6c:2c:72:ee:cc:ac:31:d0:2a:1b:
5e:4e:50:76:76:65:c6:38:7f:dd:15:e6:15:de:99:49:f0:70:
03:c5:60:13:0d:dd:e0:df:5e:b3:e5:ee:56:b2:21:e2:31:9f:
df:1c:bb:ab:e3:a7:e6:f0:b6:60:d4:4a:06:7a:e3:65:af:31:
41:a8:c1:92:dd:0f:a5:12:bd:d9:bb:a7:dd:74:e9:6c:44:a2:
7b:ff:ef:bc:55:cc:7f:9b:5d:83:5f:4e:b5:28:0c:9a:fc:16:
58:db:44:87:85:57:ed:8c:45:f1:b4:be:f6:34:07:d6:93:7e:
ce:2b:6c:df:f8:82:13:e8:fc:4e:67:eb:db:af:e9:5d:88:6d:
59:0a:43:4f:ea:b9:d8:df:b0:67:e0:cd:98:94:fd:27:dd:b4:
6c:51:f4:79:c6:f0:d7:17:a6:72:e5:6a:1f:e7:90:45:e4:06:
b0:89:56:2d:94:e4:92:99:7a:78:65:20:cc:e1:cb:68:a1:9b:
e2:ac:a6:0c:6a:ed:34:85:eb:db:77:4c:a0:0f:58:e2:4b:66:
80:9b:6d:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPk7B6pD7/eNAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NWJlODk3OGUtNzQ4OC00MTE5LWIwMDUtYmZlNjk0ZWVhNWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnq5NCnxSsF2v1Y5k8j/UyOvWbWQXoGRwUc8
Mz0DnvJ6i4b8MEZfgN/ZPfZgaI0wgc/jjIlsghrFzQiUu9qh2bGhNwNrDpvEt+N0
TpI+zsHt64wk3735nIbwZ0HEs4uwjdAyWh19643NVvUY7GAOfwpeoTK8kGE39eYT
mCNUkmuEm1QOe7glrGjENRXJKrL1XojPshY3GmdEZ9iLWOaime555UgIb6vaoziJ
YiL2Mu2STA0UrHHrz6EuBp9NhTCgDdxQFQgtfQfOCwmPNTIsR5qca9MRJ9Lt3J57
TVwuAwcBk9NT6O9nzuAHtSBR2eV1OyZSq7El8XlBqo0NYvGZdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcKyCGp+SSrtefI6PCGrStphRV6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTY3Yzc1MzQtMzA2NS0z
ZWFmLWI4MWYtNGY0ZjJmNGY5OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJR3sIKcKou4Lb3ErpvxgnOjOjKLC4zXQQOM3gENLKQ+9iNoJyqECBgj
OMcbbCxy7sysMdAqG15OUHZ2ZcY4f90V5hXemUnwcAPFYBMN3eDfXrPl7layIeIx
n98cu6vjp+bwtmDUSgZ642WvMUGowZLdD6USvdm7p9106WxEonv/77xVzH+bXYNf
TrUoDJr8FljbRIeFV+2MRfG0vvY0B9aTfs4rbN/4ghPo/E5n69uv6V2IbVkKQ0/q
udjfsGfgzZiU/SfdtGxR9HnG8NcXpnLlah/nkEXkBrCJVi2U5JKZenhlIMzhy2ih
m+Kspgxq7TSF69t3TKAPWOJLZoCbbeI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:53 2025 by rpki-client on console.sobornost.net