Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d846f66-2983-3b0b-8d4b-f4f1ec61913c.roa
File: 5d846f66-2983-3b0b-8d4b-f4f1ec61913c.roa (raw, json)
Hash identifier: Emh+CbyT2EmJxE3arhdBFrqisDL7qZrU7v5H/P7yq94=
Subject key identifier: 23:79:AD:F4:83:3F:D2:45:4E:95:B4:10:60:F5:9E:9A:6A:97:6C:2B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584961B9A6F03AE8BB3F2A2FCFC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d846f66-2983-3b0b-8d4b-f4f1ec61913c.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 396584
IP address blocks: 2620:74:2c::30/128 maxlen: 128
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:a6:f0:3a:e8:bb:3f:2a:2f:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=ebcd38e8-abab-4194-ad8d-739f4c6782cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:08:54:5d:8d:cf:5d:3f:bb:b2:7d:0f:e6:
87:e9:45:a2:0c:88:0a:45:61:2a:32:65:cf:85:1a:
ed:58:89:f7:8a:b2:ef:09:f2:e3:e2:c5:fd:84:43:
f9:67:f3:66:cf:c4:0e:e3:e9:6c:73:cb:5d:23:e1:
71:97:a5:be:5d:e4:f2:14:43:d8:fe:62:73:6c:7d:
4e:2f:47:bd:bd:16:7e:6a:0a:75:35:fd:52:94:0e:
a8:3a:16:28:18:b1:7e:f6:56:f4:91:65:71:49:a2:
a6:ff:8b:ab:81:de:df:73:46:61:aa:3c:3a:5e:3c:
f6:19:bd:08:00:2b:c6:d4:77:3d:6d:25:44:aa:cf:
d9:ae:1c:45:b9:f0:83:30:a1:2b:8f:f1:be:01:cc:
f7:8b:aa:31:25:1c:07:c4:2a:35:f3:95:d6:46:21:
40:80:f7:ec:31:55:ae:ef:8b:06:52:ca:f8:ec:5c:
8f:c5:83:87:ba:aa:a4:8c:7c:4f:c3:ab:b6:6c:14:
c2:9c:2b:a6:8d:72:8a:86:60:af:4c:0b:cb:8e:06:
b9:1b:d5:6d:a0:50:3f:6b:a2:bf:1d:40:41:3b:9a:
a5:77:23:1d:a3:39:aa:c0:6a:7c:30:9d:a0:6c:34:
5e:8b:03:ba:55:6e:37:db:0b:f5:84:41:4a:b2:94:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:79:AD:F4:83:3F:D2:45:4E:95:B4:10:60:F5:9E:9A:6A:97:6C:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d846f66-2983-3b0b-8d4b-f4f1ec61913c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:2b:fb:97:6f:f0:b5:a0:13:68:eb:12:72:da:47:77:8f:21:
02:75:a1:44:c8:74:e1:df:cf:37:9c:da:ba:6d:12:62:5e:d9:
fd:58:e8:56:5b:78:4f:a2:e5:bb:10:d0:80:a4:1d:8e:d6:dc:
49:f3:22:bd:6e:24:4e:b9:15:a9:69:da:0a:13:8d:8b:ed:32:
64:07:0c:63:eb:e7:8a:9d:9f:3c:6f:e0:6f:dc:29:88:d5:b2:
62:92:3b:1e:c6:4a:3c:df:37:4e:80:f6:13:10:34:a7:d5:79:
ac:e2:b8:42:7e:c3:3c:cc:a7:23:82:35:73:01:40:51:4d:46:
a8:cd:35:29:5f:d8:9a:3e:db:dd:65:9f:9b:d5:36:4e:47:8d:
10:c0:1e:47:45:a8:64:8b:19:8d:a8:68:4e:82:47:fb:d8:53:
83:10:03:f1:db:3e:26:07:a8:d0:c4:b0:44:56:b7:a1:a4:c0:
e9:64:83:26:0d:24:56:30:d2:db:54:f9:ed:66:a0:e7:16:0f:
54:81:61:e1:c8:eb:5e:33:3f:b9:4f:a6:08:1b:7d:9e:eb:41:
ec:ba:64:b3:99:07:a0:20:ea:b8:c9:a9:c1:ef:ca:3e:0b:e9:
4d:be:03:7f:42:6d:9d:d6:0d:b7:94:99:92:a7:6c:05:01:a6:
15:30:1c:d1
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuabwOui7Pyovz8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZWJjZDM4ZTgtYWJhYi00MTk0LWFkOGQtNzM5ZjRjNjc4MmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna0IVF2Nz10/u7J9D+aH6UWiDIgKRWEqMmXP
hRrtWIn3irLvCfLj4sX9hEP5Z/Nmz8QO4+lsc8tdI+Fxl6W+XeTyFEPY/mJzbH1O
L0e9vRZ+agp1Nf1SlA6oOhYoGLF+9lb0kWVxSaKm/4urgd7fc0Zhqjw6Xjz2Gb0I
ACvG1Hc9bSVEqs/ZrhxFufCDMKErj/G+Acz3i6oxJRwHxCo185XWRiFAgPfsMVWu
74sGUsr47FyPxYOHuqqkjHxPw6u2bBTCnCumjXKKhmCvTAvLjga5G9VtoFA/a6K/
HUBBO5qldyMdozmqwGp8MJ2gbDReiwO6VW432wv1hEFKspRYfwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCN5rfSDP9JFTpW0EGD1nppql2wrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQ4NDZmNjYtMjk4My0z
YjBiLThkNGItZjRmMWVjNjE5MTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBfK/uXb/C1oBNo6xJy2kd3jyECdaFEyHTh3883
nNq6bRJiXtn9WOhWW3hPouW7ENCApB2O1txJ8yK9biROuRWpadoKE42L7TJkBwxj
6+eKnZ88b+Bv3CmI1bJikjsexko83zdOgPYTEDSn1Xms4rhCfsM8zKcjgjVzAUBR
TUaozTUpX9iaPtvdZZ+b1TZOR40QwB5HRahkixmNqGhOgkf72FODEAPx2z4mB6jQ
xLBEVrehpMDpZIMmDSRWMNLbVPntZqDnFg9UgWHhyOteMz+5T6YIG32e60HsumSz
mQegIOq4yanB78o+C+lNvgN/Qm2d1g23lJmSp2wFAaYVMBzR
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:17 2025 by rpki-client on console.sobornost.net