Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa
File: 930572d4-e45d-364b-ba9f-6ab1d5034994.roa (raw, json)
Hash identifier: nfPXd4hSQkAo+9mbUu9SVXfxbYXMvbNWM5dY7T7gTQ8=
Subject key identifier: 59:96:C1:AB:AB:69:B6:82:7C:1B:3E:46:9F:1D:4F:DB:67:E5:18:32
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858491D7166F9E2C97DD49F675DE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 64.24.252.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:66:f9:e2:c9:7d:d4:9f:67:5d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=34fc371e-67c3-4d6d-b6ec-7fb022a8ab89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:ba:7c:f3:b3:c8:98:1f:c5:c8:b2:8a:03:
17:30:d8:7f:22:22:bf:bd:20:d5:ac:34:ad:1f:16:
60:d4:23:41:54:4c:27:78:37:0c:f3:a6:9d:5c:ee:
00:9b:56:75:5b:93:70:a6:7b:6e:a8:08:ff:f6:d1:
42:6b:05:26:f9:58:86:1e:e5:61:38:30:5b:45:96:
fa:d0:4f:54:c5:40:4c:73:ff:75:5b:c4:1b:c1:ec:
fa:0d:64:a0:8a:fb:20:b5:84:46:35:13:65:ff:59:
81:7c:d5:09:be:45:a3:f3:71:52:1b:65:d0:b0:a1:
ab:02:7e:ea:fa:5f:27:0d:51:78:35:97:7d:7b:1b:
0a:8b:10:13:e2:46:5e:12:3c:af:26:94:b8:ca:73:
7c:5b:8d:b1:67:7e:86:05:77:f4:7a:53:7b:5a:d8:
ca:70:d9:79:0c:31:a5:80:c3:3c:00:d0:0a:37:e8:
2d:43:9b:c5:9b:36:89:c3:b6:19:e8:73:fc:7b:08:
7b:0d:ee:b1:b6:aa:ea:b2:1b:6f:13:d5:4c:f5:ee:
1c:88:da:5c:30:9a:b9:a4:28:d9:19:59:b1:e2:af:
13:4b:f2:94:e8:33:e7:2d:7a:c2:17:07:94:fe:77:
9d:37:95:32:5a:13:1e:4d:32:22:41:33:8f:42:15:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:C1:AB:AB:69:B6:82:7C:1B:3E:46:9F:1D:4F:DB:67:E5:18:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/930572d4-e45d-364b-ba9f-6ab1d5034994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.24.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2c:0f:4e:97:fe:3c:55:76:1a:dc:de:2f:37:d1:75:ef:cf:
df:78:c7:a4:b4:26:a6:bd:b9:c3:30:62:5c:26:4d:cc:ec:c7:
3b:17:3c:f2:6b:6e:63:a7:02:9a:4e:b0:e8:20:c4:35:dc:15:
a7:be:4f:f8:23:ac:0b:95:ad:ad:01:59:ae:f1:36:83:44:a8:
a0:e0:03:50:b0:54:f2:0c:06:3e:8f:42:a2:05:31:cd:31:c4:
8e:39:d7:10:d5:fa:84:36:77:fa:e0:5b:25:e0:7d:3d:ee:83:
5a:a9:79:31:3c:06:a7:b8:6f:f7:b7:35:bb:a8:a8:9e:17:17:
f0:97:7a:fc:86:02:35:05:fa:62:10:79:6b:11:a1:29:2b:25:
40:e7:d7:8a:7b:e9:c0:ac:76:17:a3:47:9f:fd:60:df:09:38:
ec:34:9b:c5:a2:3d:d2:79:4e:99:4b:9d:71:88:51:0c:42:36:
ac:85:b4:2f:c0:21:ca:04:33:0b:76:da:55:72:3e:d9:39:ff:
86:78:7d:db:d8:a2:87:f6:7d:82:d7:13:1f:d6:62:c3:bb:fb:
18:e0:a4:d5:84:03:23:20:32:27:ca:43:c5:11:4e:ae:ea:48:
83:23:67:2d:b0:ca:c1:d0:e3:ba:15:0e:bf:ee:63:1b:41:32:
94:ea:52:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWb54sl91J9nXeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
MzRmYzM3MWUtNjdjMy00ZDZkLWI2ZWMtN2ZiMDIyYThhYjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T+6fPOzyJgfxciyigMXMNh/IiK/vSDVrDSt
HxZg1CNBVEwneDcM86adXO4Am1Z1W5NwpntuqAj/9tFCawUm+ViGHuVhODBbRZb6
0E9UxUBMc/91W8Qbwez6DWSgivsgtYRGNRNl/1mBfNUJvkWj83FSG2XQsKGrAn7q
+l8nDVF4NZd9exsKixAT4kZeEjyvJpS4ynN8W42xZ36GBXf0elN7WtjKcNl5DDGl
gMM8ANAKN+gtQ5vFmzaJw7YZ6HP8ewh7De6xtqrqshtvE9VM9e4ciNpcMJq5pCjZ
GVmx4q8TS/KU6DPnLXrCFweU/nedN5UyWhMeTTIiQTOPQhUjiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmWwaurabaCfBs+Rp8dT9tn5RgyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMwNTcyZDQtZTQ1ZC0z
NjRiLWJhOWYtNmFiMWQ1MDM0OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBj8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQsD06X/jxVdhrc3i830XXvz994x6S0Jqa9ucMwYlwmTczsxzsXPPJr
bmOnAppOsOggxDXcFae+T/gjrAuVra0BWa7xNoNEqKDgA1CwVPIMBj6PQqIFMc0x
xI451xDV+oQ2d/rgWyXgfT3ug1qpeTE8Bqe4b/e3NbuoqJ4XF/CXevyGAjUF+mIQ
eWsRoSkrJUDn14p76cCsdhejR5/9YN8JOOw0m8WiPdJ5TplLnXGIUQxCNqyFtC/A
IcoEMwt22lVyPtk5/4Z4fdvYoof2fYLXEx/WYsO7+xjgpNWEAyMgMifKQ8URTq7q
SIMjZy2wysHQ47oVDr/uYxtBMpTqUg8=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:08 2025 by rpki-client on console.sobornost.net