Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa
File: ec2c1448-7a83-32e2-af8d-be65e30fd762.roa (raw, json)
Hash identifier: 5Zu/6yLMmw13BZq0Kxe1sZjAqcuBkk0QS0EwSjqWv4s=
Subject key identifier: 84:CF:13:7B:31:34:B4:36:39:40:81:8F:56:7B:3B:5E:AC:11:A4:52
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F4328584913AC1DFC7A0BEF877032A040
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 15123
IP address blocks: 72.250.232.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1d:fc:7a:0b:ef:87:70:32:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=a715aa5f-2719-4507-971e-3d50b6940fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:cf:d8:27:41:25:cb:97:16:bb:d1:14:ad:
33:99:bc:fd:7e:94:a0:c7:27:db:e8:ef:d8:33:bd:
b6:2e:20:f9:e2:07:27:df:93:e4:31:f3:98:21:08:
28:60:f9:0f:68:76:f4:b3:a9:41:aa:de:45:7a:3e:
ec:8d:77:a8:99:17:8c:52:b8:c7:8e:f1:02:13:b4:
ba:a9:c8:c5:b6:7b:82:58:37:71:0c:dd:40:a7:89:
9f:52:58:3f:c4:25:ac:e1:9f:4a:11:98:88:6b:b9:
1b:f8:94:c8:ac:3d:85:16:45:db:dc:ac:55:c0:65:
c8:b5:62:2c:fa:17:b4:0b:4e:53:70:bf:68:68:10:
98:ed:c4:f9:ea:48:45:9a:a7:88:b6:8d:34:5f:e1:
6b:ee:be:02:0c:ff:5d:43:25:32:40:a9:7c:1a:5f:
12:14:9f:d3:dd:b8:06:41:aa:6a:50:5a:7c:9e:83:
6f:18:44:b4:e8:79:ed:2e:d2:b6:78:6d:dc:de:3c:
f2:e6:09:17:e1:cf:5d:43:15:22:15:9d:d2:b7:76:
13:fa:6c:12:10:fc:f7:04:53:d4:2f:e5:b7:97:6b:
00:a1:b1:9c:1f:11:29:1a:95:79:9d:25:2b:30:f9:
22:50:c5:e6:12:b6:48:a6:a1:28:e6:a4:40:9e:20:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CF:13:7B:31:34:B4:36:39:40:81:8F:56:7B:3B:5E:AC:11:A4:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.250.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:6e:30:34:21:66:e5:1b:9c:e0:4f:22:70:b1:ee:f1:c8:96:
93:e4:f3:dd:5f:b3:6f:7b:c7:f2:fe:55:a9:de:00:18:71:ff:
c8:70:a6:ae:f3:82:6f:79:ce:cf:bf:fb:af:7a:8d:8d:b3:c3:
ee:22:40:df:66:f1:95:30:67:6f:c4:85:f4:92:20:51:f3:25:
9a:ff:d9:93:e2:0a:dc:71:e5:cb:b0:56:51:7e:9f:e7:e6:f9:
14:9a:96:ea:62:1f:96:b6:66:f5:d5:d8:9c:2a:e0:61:32:44:
2d:16:1a:5c:78:95:ac:9e:5f:a8:89:29:29:d0:00:07:2c:47:
79:7b:96:d8:b7:30:01:7d:96:10:45:f5:ce:a8:18:16:0f:35:
71:d8:84:bb:04:cd:91:77:d3:af:cc:f6:f5:6d:75:d9:44:54:
c1:c8:e2:66:fa:bf:6d:f6:91:38:50:7a:c9:a1:14:8b:d6:28:
ca:d8:38:02:7d:10:5e:f1:2c:02:38:b7:87:27:44:e2:9f:99:
79:4f:de:2c:1a:d4:2f:63:8d:11:68:45:08:37:a9:f9:0e:ca:
59:8f:62:b8:98:f8:d8:0b:e3:9f:d5:12:eb:36:2b:18:fd:75:
d4:31:a5:03:1a:04:e9:7d:0f:41:90:0c:8c:4f:ec:cd:0c:ea:
f1:d5:f0:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB38egvvh3AyoEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz
ODdkMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YTcxNWFhNWYtMjcxOS00NTA3LTk3MWUtM2Q1MGI2OTQwZmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5HP2CdBJcuXFrvRFK0zmbz9fpSgxyfb6O/Y
M722LiD54gcn35PkMfOYIQgoYPkPaHb0s6lBqt5Fej7sjXeomReMUrjHjvECE7S6
qcjFtnuCWDdxDN1Ap4mfUlg/xCWs4Z9KEZiIa7kb+JTIrD2FFkXb3KxVwGXItWIs
+he0C05TcL9oaBCY7cT56khFmqeIto00X+Fr7r4CDP9dQyUyQKl8Gl8SFJ/T3bgG
QapqUFp8noNvGES06HntLtK2eG3c3jzy5gkX4c9dQxUiFZ3St3YT+mwSEPz3BFPU
L+W3l2sAobGcHxEpGpV5nSUrMPkiUMXmErZIpqEo5qRAniB31wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITPE3sxNLQ2OUCBj1Z7O16sEaRSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw
N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZWMyYzE0NDgtN2E4My0z
MmUyLWFmOGQtYmU2NWUzMGZkNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi
MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh
Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4
OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASProMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5uMDQhZuUbnOBPInCx7vHIlpPk891fs297x/L+VaneABhx/8hwpq7z
gm95zs+/+696jY2zw+4iQN9m8ZUwZ2/EhfSSIFHzJZr/2ZPiCtxx5cuwVlF+n+fm
+RSalupiH5a2ZvXV2Jwq4GEyRC0WGlx4layeX6iJKSnQAAcsR3l7lti3MAF9lhBF
9c6oGBYPNXHYhLsEzZF306/M9vVtddlEVMHI4mb6v232kThQesmhFIvWKMrYOAJ9
EF7xLAI4t4cnROKfmXlP3iwa1C9jjRFoRQg3qfkOylmPYriY+NgL45/VEus2Kxj9
ddQxpQMaBOl9D0GQDIxP7M0M6vHV8Hg=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net