Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa
File: ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa (raw, json)
Hash identifier: LPAfE9trafM0mKWw7U3l2gSQZIlxrx0uxW5LZAQfabo=
Subject key identifier: 23:BA:0B:53:6A:18:F8:17:2D:CA:61:F5:62:9C:C0:1C:94:8A:87:B0
Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed
Certificate serial: 010D0C9F432858497279A59963B162F35B1FAF00
Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 13660
IP address blocks: 199.253.128.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:a5:99:63:b1:62:f3:5b:1f:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=cbdfb172-754d-43e0-8efe-19b86e31b0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:75:06:77:46:a5:8a:72:52:41:05:91:fe:
02:01:2a:23:eb:62:b4:02:83:3f:70:3a:42:b2:ef:
ae:e0:9b:33:0d:db:9e:7b:dc:47:4a:b1:cf:7b:00:
90:fd:0f:60:10:6d:0d:cf:41:5b:67:28:ad:49:dd:
e4:57:8a:72:29:38:8e:fa:c2:8b:38:d6:2f:e7:3b:
9c:d1:04:94:52:b9:cf:40:01:ac:a8:98:3c:f8:d3:
e2:62:85:a4:a9:0b:4c:75:b5:90:a8:8b:c8:5a:dc:
cd:9f:61:66:d5:d5:56:3c:ac:cf:f1:ed:03:be:f6:
ff:f9:dc:14:68:e2:65:a1:5b:dd:c0:f9:b4:5a:5f:
21:d2:5f:c8:31:e3:5a:5b:c3:6c:84:f4:a1:79:80:
79:36:c6:6f:b6:c8:70:30:9a:78:49:b3:5d:66:86:
dc:47:7b:2a:b5:e6:99:ce:51:7a:6d:0d:89:b2:41:
06:cd:bf:db:22:87:b3:ec:1c:27:c8:2a:e9:66:62:
99:07:a8:d5:cd:a0:ef:40:30:3f:6f:21:f9:74:29:
1a:06:79:bb:03:e9:22:94:68:16:11:8a:0a:69:97:
5a:f6:14:d8:b8:e4:4e:0d:ca:d7:c7:c0:8a:f8:be:
45:ac:2b:96:a0:06:6f:db:5c:7f:94:de:52:7c:55:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:0B:53:6A:18:F8:17:2D:CA:61:F5:62:9C:C0:1C:94:8A:87:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl
X509v3 Authority Key Identifier:
keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer
sbgp-ipAddrBlock: critical
IPv4:
199.253.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:4c:ec:00:01:41:43:c7:19:ac:f4:63:a2:69:9d:b0:5c:87:
77:13:93:75:68:9d:bf:ee:63:07:00:e3:cb:f3:c7:0d:84:b5:
3b:e0:38:9d:9a:61:f4:b3:5a:3d:1e:ea:8c:eb:6f:02:42:bf:
9d:8b:24:09:6e:f2:51:06:8c:a1:f7:59:17:93:f1:1f:88:54:
13:e7:cc:5c:8a:fd:92:1d:4c:4f:09:9f:3c:58:ab:f1:d1:91:
48:fe:31:f7:d8:e8:6a:6e:5f:7f:61:74:40:bf:07:b8:16:06:
37:29:2c:f0:90:78:ad:0c:60:d0:2a:bb:46:8f:68:ba:09:76:
a9:69:3c:02:62:45:1b:02:18:c3:49:2e:9f:15:56:f5:a3:e3:
fe:cc:50:65:99:e1:e6:89:8d:bb:dc:83:cf:91:47:18:35:10:
c3:72:5d:3e:5c:11:c6:fa:0f:53:07:6c:45:00:57:e3:b7:12:
ba:b1:31:77:8d:40:42:54:46:1a:a2:39:12:0c:02:5b:5f:20:
f1:58:66:d7:f4:10:41:de:f5:4c:7e:6c:da:a3:b8:6e:e7:9c:
4b:df:e8:5c:24:c2:99:d2:15:d3:74:26:ee:22:63:0d:c8:b1:
04:68:1b:03:af:51:b3:f9:fd:2f:cd:0f:7a:0e:e6:a5:a2:6f:
92:f5:30:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeaWZY7Fi81sfrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz
NWVkMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk
Y2JkZmIxNzItNzU0ZC00M2UwLThlZmUtMTliODZlMzFiMGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM91BndGpYpyUkEFkf4CASoj62K0AoM/cDpC
su+u4JszDduee9xHSrHPewCQ/Q9gEG0Nz0FbZyitSd3kV4pyKTiO+sKLONYv5zuc
0QSUUrnPQAGsqJg8+NPiYoWkqQtMdbWQqIvIWtzNn2Fm1dVWPKzP8e0Dvvb/+dwU
aOJloVvdwPm0Wl8h0l/IMeNaW8NshPSheYB5NsZvtshwMJp4SbNdZobcR3sqteaZ
zlF6bQ2JskEGzb/bIoez7BwnyCrpZmKZB6jVzaDvQDA/byH5dCkaBnm7A+kilGgW
EYoKaZda9hTYuORODcrXx8CK+L5FrCuWoAZv21x/lN5SfFV9RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCO6C1NqGPgXLcph9WKcwByUioewMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz
ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvY2UzNDBhZGEtZjVjNy0z
NTZlLThmNmMtYzgxYTZjNzJjODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx
ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw
MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm
MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBM7AABQUPHGaz0Y6JpnbBch3cTk3Vonb/uYwcA48vzxw2EtTvgOJ2a
YfSzWj0e6ozrbwJCv52LJAlu8lEGjKH3WReT8R+IVBPnzFyK/ZIdTE8JnzxYq/HR
kUj+MffY6GpuX39hdEC/B7gWBjcpLPCQeK0MYNAqu0aPaLoJdqlpPAJiRRsCGMNJ
Lp8VVvWj4/7MUGWZ4eaJjbvcg8+RRxg1EMNyXT5cEcb6D1MHbEUAV+O3ErqxMXeN
QEJURhqiORIMAltfIPFYZtf0EEHe9Ux+bNqjuG7nnEvf6FwkwpnSFdN0Ju4iYw3I
sQRoGwOvUbP5/S/ND3oO5qWib5L1MCk=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:55 2025 by rpki-client on console.sobornost.net