Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/10552b92-83f4-38fa-b4e1-aa76974757b9.roa
File: 10552b92-83f4-38fa-b4e1-aa76974757b9.roa (raw, json)
Hash identifier: lMVl5LLsAjklYsnnMMS5LyljY6MU0ZTtAMJwIixyQHI=
Subject key identifier: 83:C8:60:BD:09:9B:61:EF:29:E9:8F:A2:13:6C:8C:03:08:A1:0B:CA
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584976A99375CE0CE4CEC0A3C560
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/10552b92-83f4-38fa-b4e1-aa76974757b9.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 13768
IP address blocks: 64.226.195.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:93:75:ce:0c:e4:ce:c0:a3:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=87d71e7a-b1f0-4a0f-a40b-31b71b2d1767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:c5:f3:18:bd:aa:e7:60:a5:f3:79:3c:bc:
eb:dc:c6:71:b9:70:7c:cb:c6:a7:f2:0b:f1:40:cf:
38:f6:ae:4b:05:bb:c5:b5:29:f9:3b:13:6b:88:59:
36:24:f1:6a:93:34:90:61:ee:b0:9a:02:6a:f0:83:
4c:b2:2b:ca:72:0e:a5:eb:c9:ea:b1:5d:d3:d5:c3:
c7:52:de:dd:10:e3:22:8e:bf:24:27:9c:ef:bd:28:
7e:d4:58:9f:d9:69:9c:c9:a7:97:ba:8b:cf:3b:ef:
9b:b9:67:ba:c3:5a:7d:87:00:1c:af:96:a1:56:2a:
a2:18:a8:3e:4d:81:ba:25:66:3c:e5:9f:f3:09:2a:
09:a0:d1:43:73:14:4d:f4:38:ab:31:b1:4b:b8:cb:
6b:ca:bc:57:a3:9d:a6:20:18:6f:d1:de:ef:85:87:
c7:c5:f7:de:fb:5f:c3:c0:da:f0:3a:0b:73:38:0b:
be:bb:95:6a:67:fa:28:7d:aa:7a:86:33:37:26:34:
fc:dc:c7:aa:70:f5:9b:3a:10:1e:ac:95:42:58:14:
35:97:47:2b:a0:13:54:51:67:52:a8:43:98:99:5d:
0f:86:58:55:70:21:56:73:f0:47:ed:f5:c8:39:7a:
bc:18:4f:f1:ca:14:b1:17:2e:36:98:17:d1:fa:c2:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:60:BD:09:9B:61:EF:29:E9:8F:A2:13:6C:8C:03:08:A1:0B:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/10552b92-83f4-38fa-b4e1-aa76974757b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.226.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:5c:f5:4f:d9:38:86:a2:ac:61:76:09:ae:3a:f3:aa:3b:8f:
1e:82:d2:ef:df:6c:c3:ef:a7:2f:1d:6c:05:3f:8a:83:55:55:
84:b4:0e:07:68:97:cd:a7:e8:20:4f:41:c0:f6:1c:24:50:10:
de:c3:87:f0:6a:c6:d4:e5:1e:7b:06:d8:7e:f7:0c:5c:29:a9:
c3:d3:97:bb:31:6b:44:d7:58:2e:86:b9:02:c1:53:be:84:a2:
f3:c6:f0:32:d6:23:15:71:8d:15:fd:40:00:c6:6f:67:63:94:
e6:02:35:64:3b:c7:54:f8:3e:c4:9f:13:a4:35:1d:6d:37:68:
47:98:2e:c8:43:af:2a:e1:2e:64:7a:9a:4a:ea:bc:9b:f0:9a:
1d:cf:1b:1a:5d:5d:42:58:2b:c2:e0:76:ca:6f:20:a8:ab:8c:
d0:b0:76:33:9d:aa:08:d9:8e:88:23:75:71:b4:1f:d6:5a:99:
db:c1:9d:cb:f4:4b:e8:56:6c:23:13:10:4b:de:ac:29:73:72:
78:26:6d:71:9b:c6:ef:ab:2a:17:77:8c:45:39:e9:05:4b:83:
5e:d8:c9:1e:9f:cc:88:e2:11:ee:75:c6:5d:2c:88:19:8f:58:
f8:e8:f9:6c:f7:58:0f:6f:00:8a:0a:61:ff:ab:96:7b:54:80:
61:47:4e:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qZN1zgzkzsCjxWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
ODdkNzFlN2EtYjFmMC00YTBmLWE0MGItMzFiNzFiMmQxNzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy3F8xi9qudgpfN5PLzr3MZxuXB8y8an8gvx
QM849q5LBbvFtSn5OxNriFk2JPFqkzSQYe6wmgJq8INMsivKcg6l68nqsV3T1cPH
Ut7dEOMijr8kJ5zvvSh+1Fif2WmcyaeXuovPO++buWe6w1p9hwAcr5ahViqiGKg+
TYG6JWY85Z/zCSoJoNFDcxRN9DirMbFLuMtryrxXo52mIBhv0d7vhYfHxffe+1/D
wNrwOgtzOAu+u5VqZ/oofap6hjM3JjT83MeqcPWbOhAerJVCWBQ1l0croBNUUWdS
qEOYmV0PhlhVcCFWc/BH7fXIOXq8GE/xyhSxFy42mBfR+sKPpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIPIYL0Jm2HvKemPohNsjAMIoQvKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMTA1NTJiOTItODNmNC0z
OGZhLWI0ZTEtYWE3Njk3NDc1N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOLDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlc9U/ZOIairGF2Ca4686o7jx6C0u/fbMPvpy8dbAU/ioNVVYS0Dgdo
l82n6CBPQcD2HCRQEN7Dh/BqxtTlHnsG2H73DFwpqcPTl7sxa0TXWC6GuQLBU76E
ovPG8DLWIxVxjRX9QADGb2djlOYCNWQ7x1T4PsSfE6Q1HW03aEeYLshDryrhLmR6
mkrqvJvwmh3PGxpdXUJYK8LgdspvIKirjNCwdjOdqgjZjogjdXG0H9ZamdvBncv0
S+hWbCMTEEverClzcngmbXGbxu+rKhd3jEU56QVLg17YyR6fzIjiEe51xl0siBmP
WPjo+Wz3WA9vAIoKYf+rlntUgGFHTp0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:01 2025 by rpki-client on console.sobornost.net