Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/39e3616a-2c95-33e4-bb9f-abf4e24da626.roa
File: 39e3616a-2c95-33e4-bb9f-abf4e24da626.roa (raw, json)
Hash identifier: l9gRWp9BeZbyloG5pNCMFeXPduoLsUjZh9qzNxUa8DA=
Subject key identifier: EB:AE:D5:92:8D:76:0A:C2:F3:BA:D2:83:6C:C3:F3:68:D3:AE:8A:25
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858495ABEE0E2D6C6122C40CD0D00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/39e3616a-2c95-33e4-bb9f-abf4e24da626.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 22652
IP address blocks: 64.187.190.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:e0:e2:d6:c6:12:2c:40:cd:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=dbbf4a83-da88-4eca-8b50-44d4e9e4c4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:42:c5:72:39:cb:4d:1c:b6:fb:f1:d4:fc:
5d:5f:67:28:46:0c:d0:dc:e3:37:fa:f8:55:2c:79:
53:0b:b1:36:f7:07:21:b8:32:92:21:ec:40:05:30:
1c:3a:b3:fb:95:a1:04:20:df:f7:87:1c:f5:dc:3e:
ed:bd:ce:72:65:1a:d1:60:18:a1:ce:7e:2b:b0:53:
93:cd:06:11:0f:e9:86:74:d7:7e:b6:ab:40:1b:d2:
cf:42:58:48:12:13:19:9c:50:28:aa:cb:0b:a0:10:
03:4b:e1:79:4c:b9:30:21:f8:e6:f9:61:68:49:07:
89:a2:ca:4e:d4:d1:41:46:c9:c0:80:95:eb:c3:69:
bb:47:10:28:09:c7:a6:2e:32:b4:d3:2c:71:1b:31:
44:5a:4b:36:75:32:c3:42:71:5a:fb:23:b8:1e:f9:
65:19:10:95:9a:ac:8c:ed:df:13:b1:29:e4:80:74:
1f:cc:ce:b6:fc:9a:f3:f2:cb:2a:ac:99:72:d5:4f:
72:3e:f1:55:c2:5a:44:92:e0:3f:45:4b:f4:82:37:
f3:44:6b:d9:d6:2c:15:cd:59:d2:31:b2:86:cb:37:
3a:83:a6:60:fd:a3:40:aa:39:1e:ff:d1:99:29:45:
53:f2:78:6f:5d:65:a8:4b:84:cd:36:05:c5:31:71:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:D5:92:8D:76:0A:C2:F3:BA:D2:83:6C:C3:F3:68:D3:AE:8A:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/39e3616a-2c95-33e4-bb9f-abf4e24da626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
64.187.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:34:5d:69:5f:9f:11:92:35:a1:b3:b4:e9:ff:53:2f:9a:b3:
05:4e:dd:47:f7:aa:98:bf:5f:f5:24:16:d9:20:3b:52:9f:0b:
8b:d1:41:78:0e:91:16:7a:43:e0:90:92:26:53:2c:3b:21:03:
7f:c4:48:6c:7b:d4:55:41:c1:66:17:84:62:28:a4:98:12:33:
fc:61:1c:0f:56:ec:b4:99:fa:46:2f:a0:b8:25:64:ff:13:e4:
e6:16:84:fd:5c:a0:65:52:71:06:a5:2f:ea:0e:d1:87:6e:93:
b1:19:ba:2b:5e:78:cb:de:0b:5f:b0:ba:aa:8d:96:39:08:ae:
8c:b1:21:ea:4a:8b:2c:ec:63:63:96:1f:8d:10:00:dc:e3:f3:
9c:c7:c9:cc:23:30:a6:dd:3a:cf:b4:c3:f3:ab:bb:92:58:bd:
36:7c:bb:1b:63:6e:83:2d:d7:63:e0:f4:92:a1:30:88:51:eb:
fd:48:9b:6e:86:5b:69:f6:10:08:5c:c9:3f:6c:82:c2:c7:d2:
0d:89:4f:b4:85:b9:8a:5b:29:d6:cc:62:47:48:14:89:32:9f:
89:7a:5a:a7:2a:8e:cc:b5:2d:39:17:29:26:75:2e:4e:fe:ee:
a2:b8:35:13:ac:e2:0d:ea:d4:e0:49:44:d8:96:ec:49:52:d6:
80:80:41:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuDi1sYSLEDNDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
ZGJiZjRhODMtZGE4OC00ZWNhLThiNTAtNDRkNGU5ZTRjNGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw51CxXI5y00ctvvx1PxdX2coRgzQ3OM3+vhV
LHlTC7E29wchuDKSIexABTAcOrP7laEEIN/3hxz13D7tvc5yZRrRYBihzn4rsFOT
zQYRD+mGdNd+tqtAG9LPQlhIEhMZnFAoqssLoBADS+F5TLkwIfjm+WFoSQeJospO
1NFBRsnAgJXrw2m7RxAoCcemLjK00yxxGzFEWks2dTLDQnFa+yO4HvllGRCVmqyM
7d8TsSnkgHQfzM62/Jrz8ssqrJly1U9yPvFVwlpEkuA/RUv0gjfzRGvZ1iwVzVnS
MbKGyzc6g6Zg/aNAqjke/9GZKUVT8nhvXWWoS4TNNgXFMXHIhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuu1ZKNdgrC87rSg2zD82jTroolMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzllMzYxNmEtMmM5NS0z
M2U0LWJiOWYtYWJmNGUyNGRhNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLu+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEI0XWlfnxGSNaGztOn/Uy+aswVO3Uf3qpi/X/UkFtkgO1KfC4vRQXgO
kRZ6Q+CQkiZTLDshA3/ESGx71FVBwWYXhGIopJgSM/xhHA9W7LSZ+kYvoLglZP8T
5OYWhP1coGVScQalL+oO0Yduk7EZuiteeMveC1+wuqqNljkIroyxIepKiyzsY2OW
H40QANzj85zHycwjMKbdOs+0w/Oru5JYvTZ8uxtjboMt12Pg9JKhMIhR6/1Im26G
W2n2EAhcyT9sgsLH0g2JT7SFuYpbKdbMYkdIFIkyn4l6Wqcqjsy1LTkXKSZ1Lk7+
7qK4NROs4g3q1OBJRNiW7ElS1oCAQXI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net