Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa
File: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (raw, json)
Hash identifier: c8W4mUEwymiiuUv2IgnZEghwnpQVBYoIf0TLvwj7jVw=
Subject key identifier: 61:F8:04:42:77:2E:76:89:A8:6D:B9:0F:68:E9:52:0E:FD:B8:B2:A3
Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263
Certificate serial: 010D0C9F432858495C243ED6E499A1B48D39FB80
Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 21902
IP address blocks: 64.110.16.0/21 maxlen: 21
108.163.68.0/22 maxlen: 22
216.189.128.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:3e:d6:e4:99:a1:b4:8d:39:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=7d5b5449-2fa2-44ff-8a6a-726afcbcb021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:bf:03:42:23:83:6a:bf:07:0e:e4:c9:6d:
22:19:96:5c:c7:ad:6f:83:b1:16:e9:9c:46:59:88:
1a:b2:9b:2a:96:dc:c6:a6:8f:da:14:0c:b1:4a:67:
5e:59:db:a1:18:d2:68:2e:bb:f9:36:fa:b1:e8:06:
10:ec:b2:bf:72:38:91:cb:90:18:cf:d0:c3:f8:60:
ac:b3:08:a0:09:44:69:75:c7:cf:45:87:e4:d2:00:
93:88:d8:d8:f9:35:1f:48:cf:1c:93:1d:44:6b:aa:
e3:1f:10:5d:12:a2:dd:50:9e:60:a7:ef:a4:09:72:
d2:fe:87:42:bd:04:a2:56:0d:9b:a6:3b:ff:02:ea:
a5:e6:68:45:ff:06:ee:a1:4f:23:65:8e:bf:73:26:
d8:32:99:29:36:b9:04:a0:ea:bc:c6:f7:c0:f4:dd:
1a:99:54:2d:42:31:9d:5e:ee:6d:ae:0a:af:9a:a6:
d8:36:08:d9:aa:d2:f2:41:44:3f:13:f2:63:d5:c1:
fd:6c:dd:a3:95:09:2a:20:2b:48:14:cc:b2:b8:85:
b3:fc:c7:d4:85:6f:53:f8:a6:f3:66:11:52:b6:9a:
20:ed:06:06:78:18:a5:5c:3d:38:35:16:c3:df:58:
e5:e7:13:27:5b:7b:58:5c:1f:88:f0:31:a7:ab:39:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:04:42:77:2E:76:89:A8:6D:B9:0F:68:E9:52:0E:FD:B8:B2:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl
X509v3 Authority Key Identifier:
keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer
sbgp-ipAddrBlock: critical
IPv4:
64.110.16.0/21
108.163.68.0/22
216.189.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:f4:1e:8c:fe:60:d1:b1:a0:22:d7:44:0a:80:39:4b:57:76:
f6:25:cb:dd:16:5c:4c:d4:bb:a9:02:23:c8:a8:7f:c1:96:69:
d1:88:27:6e:cf:8b:5c:6b:80:33:5f:2b:47:5f:a1:48:6d:65:
f6:6c:a0:40:00:4b:f9:c3:3f:33:83:1f:78:e0:ea:a5:8c:1f:
11:9a:9f:c0:8b:eb:ab:af:a2:23:0b:c3:a2:94:5f:ce:0b:10:
54:8a:6e:6c:48:5e:bd:af:0a:df:1c:e1:e0:74:27:4a:02:47:
c5:79:60:dc:eb:8a:c5:56:2d:e1:3f:cb:e8:3e:33:e9:44:a1:
bc:28:55:45:a4:21:5a:06:0e:f3:b0:90:ef:7a:6a:6a:ae:41:
45:b6:a8:d2:74:7a:3f:85:03:9e:52:a1:b1:43:15:ac:ca:f9:
ae:17:d7:24:c3:19:d9:e0:7c:f3:f2:e6:39:a6:67:8e:28:f9:
b9:ae:08:5b:6b:e6:41:ab:f6:66:fc:ba:42:c7:98:3f:cc:1a:
ad:33:d1:51:10:99:99:6c:8a:8e:e0:80:03:2e:4b:4d:1d:db:
a4:89:42:b3:6b:d3:a5:98:fa:16:87:a4:21:d1:31:b7:8d:d5:
2a:ca:de:5e:12:df:40:7c:91:d5:88:cb:23:b4:10:93:fa:b7:
9f:d4:70:22
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWElcJD7W5JmhtI05+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz
MjYzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
N2Q1YjU0NDktMmZhMi00NGZmLThhNmEtNzI2YWZjYmNiMDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0C/A0Ijg2q/Bw7kyW0iGZZcx61vg7EW6ZxG
WYgaspsqltzGpo/aFAyxSmdeWduhGNJoLrv5Nvqx6AYQ7LK/cjiRy5AYz9DD+GCs
swigCURpdcfPRYfk0gCTiNjY+TUfSM8ckx1Ea6rjHxBdEqLdUJ5gp++kCXLS/odC
vQSiVg2bpjv/Auql5mhF/wbuoU8jZY6/cybYMpkpNrkEoOq8xvfA9N0amVQtQjGd
Xu5trgqvmqbYNgjZqtLyQUQ/E/Jj1cH9bN2jlQkqICtIFMyyuIWz/MfUhW9T+Kbz
ZhFStpog7QYGeBilXD04NRbD31jl5xMnW3tYXB+I8DGnqzlQzQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGH4BEJ3LnaJqG25D2jpUg79uLKjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4
ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvNjViMWFkMzYtY2JlOS0z
NzcxLTljOTYtZTcwMDc0NGU2OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1
NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy
MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4
YmJiMjMyNjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG4QAwQC
bKNEAwQE2L2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGL0Hoz+YNGxoCLXRAqAOUtXdvYly90WXEzUu6kC
I8iof8GWadGIJ27Pi1xrgDNfK0dfoUhtZfZsoEAAS/nDPzODH3jg6qWMHxGan8CL
66uvoiMLw6KUX84LEFSKbmxIXr2vCt8c4eB0J0oCR8V5YNzrisVWLeE/y+g+M+lE
obwoVUWkIVoGDvOwkO96amquQUW2qNJ0ej+FA55SobFDFazK+a4X1yTDGdngfPPy
5jmmZ44o+bmuCFtr5kGr9mb8ukLHmD/MGq0z0VEQmZlsio7ggAMuS00d26SJQrNr
06WY+haHpCHRMbeN1SrK3l4S30B8kdWIyyO0EJP6t5/UcCI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net