Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa
File: 421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa (raw, json)
Hash identifier: 9wu1wRf7XV6UjwKmxtIgc+pnBSyugcxjY+qYe1p0ccQ=
Subject key identifier: 76:FC:17:AB:D3:2B:BB:D3:3B:51:CF:4F:4B:87:C9:6C:53:F9:06:C9
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584981D45D505F0F0C59B7EA7C20
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 13768
IP address blocks: 66.33.32.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5d:50:5f:0f:0c:59:b7:ea:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=bafce598-9b49-4efe-a200-20bee61aaf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:fc:32:cc:ed:7d:8d:60:8d:2e:0a:c6:5e:
ff:bf:30:39:0e:0d:f8:ea:fa:31:d2:ae:f6:8a:8e:
7a:5d:3a:f7:8e:40:21:23:84:3a:dd:8d:9d:df:62:
ce:85:3f:eb:9f:9c:98:69:99:8c:d6:3d:cb:d2:4e:
ab:29:11:4e:51:17:a1:c5:3d:76:e5:57:43:52:85:
4a:0e:71:52:a1:b9:3a:85:37:e7:ed:ee:a8:e4:27:
7b:43:72:f9:3e:a2:e2:32:89:2f:ab:c5:9d:1d:ef:
64:02:3e:9d:c6:63:d4:e4:62:1b:71:96:db:d7:db:
ba:34:4c:d1:23:54:8b:19:df:80:93:5d:7d:72:d8:
16:95:16:83:95:8f:c9:43:df:9f:f2:2c:b2:97:21:
de:97:41:d8:41:7c:89:6e:1f:2e:f0:f1:dc:02:d1:
43:13:f7:1d:1e:8a:e9:26:f6:c1:c1:4b:12:bf:21:
ee:ce:d2:42:8b:f3:81:d8:01:b0:c3:b2:aa:42:cf:
3d:03:eb:4b:18:27:39:e5:78:48:e1:6d:cc:cd:cf:
e5:d4:f6:35:5e:44:41:77:f9:16:4a:24:c7:f5:74:
32:c6:a6:05:9d:f5:52:94:bb:2f:2c:d4:0c:d5:6e:
b7:b6:ab:9f:00:72:02:cb:20:22:22:40:a7:a3:db:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:17:AB:D3:2B:BB:D3:3B:51:CF:4F:4B:87:C9:6C:53:F9:06:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a8:2c:20:3c:5e:76:df:bc:1b:43:bd:5b:2c:76:e1:fe:0d:
da:8b:c5:f7:f1:8d:d1:d0:66:0c:e6:d3:47:2c:14:dd:72:24:
eb:d5:c7:7e:48:03:d0:c6:41:da:63:fd:76:f0:60:87:1a:42:
65:d6:81:ec:a9:39:a3:91:71:8e:f7:6a:e3:de:c2:15:64:17:
ab:5b:19:33:db:90:82:5b:1e:51:cc:74:de:8f:c3:d2:91:c9:
72:83:30:78:39:77:e4:1e:ad:6d:51:85:a9:ac:07:79:9d:ed:
8c:3a:84:3a:fe:e0:6f:a9:70:c0:37:d2:ee:29:c7:30:84:4f:
bf:b3:11:7d:5a:73:c5:1d:e7:0f:c5:6f:b6:dc:46:ce:01:66:
32:e3:f6:df:04:2b:de:ce:d9:3c:11:b3:a9:ed:4c:2a:78:e0:
24:da:b0:f9:0d:ce:3f:da:4e:50:8a:f0:be:c5:de:bc:ab:47:
ac:b3:ef:c5:e3:74:da:8f:d2:61:19:11:68:26:83:fc:fb:f8:
16:df:ef:7c:4d:40:b7:11:da:00:6f:2c:89:8a:7b:d0:5e:3d:
76:6d:51:e2:be:c1:6e:89:35:57:57:b3:c8:07:c1:48:bb:69:
b9:e2:9d:f4:cf:d1:f9:c5:49:6e:1d:07:33:46:d5:29:7e:3b:
9c:59:e9:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1F1QXw8MWbfqfCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
YmFmY2U1OTgtOWI0OS00ZWZlLWEyMDAtMjBiZWU2MWFhZjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr278MsztfY1gjS4Kxl7/vzA5Dg346vox0q72
io56XTr3jkAhI4Q63Y2d32LOhT/rn5yYaZmM1j3L0k6rKRFOURehxT125VdDUoVK
DnFSobk6hTfn7e6o5Cd7Q3L5PqLiMokvq8WdHe9kAj6dxmPU5GIbcZbb19u6NEzR
I1SLGd+Ak119ctgWlRaDlY/JQ9+f8iyylyHel0HYQXyJbh8u8PHcAtFDE/cdHorp
JvbBwUsSvyHuztJCi/OB2AGww7KqQs89A+tLGCc55XhI4W3Mzc/l1PY1XkRBd/kW
SiTH9XQyxqYFnfVSlLsvLNQM1W63tqufAHICyyAiIkCno9tB2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHb8F6vTK7vTO1HPT0uHyWxT+QbJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDIxZDFiODktY2I1Yy0z
ZTQyLWI1NzYtZmEzNGU1MGYyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+oLCA8XnbfvBtDvVssduH+DdqLxffxjdHQZgzm00csFN1yJOvVx35I
A9DGQdpj/XbwYIcaQmXWgeypOaORcY73auPewhVkF6tbGTPbkIJbHlHMdN6Pw9KR
yXKDMHg5d+QerW1RhamsB3md7Yw6hDr+4G+pcMA30u4pxzCET7+zEX1ac8Ud5w/F
b7bcRs4BZjLj9t8EK97O2TwRs6ntTCp44CTasPkNzj/aTlCK8L7F3ryrR6yz78Xj
dNqP0mEZEWgmg/z7+Bbf73xNQLcR2gBvLImKe9BePXZtUeK+wW6JNVdXs8gHwUi7
abninfTP0fnFSW4dBzNG1Sl+O5xZ6cM=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net