Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa
File: ef6ef0be-d7e9-316c-ac17-32c51d629568.roa (raw, json)
Hash identifier: wIqdjDVwbYPO9DFmIes9GVHkkZZMxHlQDIrNVZson2g=
Subject key identifier: 97:D1:FB:15:E1:F4:D0:DE:C8:91:4E:BC:60:52:FF:04:1C:63:9F:A0
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584930DE60872561B2D40E922980
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 25843
IP address blocks: 68.168.93.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:60:87:25:61:b2:d4:0e:92:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=1580f8e0-a149-41ef-93c4-4e85ab1fa0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:f5:de:ad:73:2c:37:ea:52:34:98:09:81:
63:f7:50:66:c7:ad:cd:b1:15:0d:c5:0d:8c:25:ee:
c9:d6:46:d3:77:3c:84:d7:dd:c1:fe:79:26:04:53:
6e:27:b9:7a:d9:39:a1:5f:04:e0:3f:a2:74:80:af:
fe:fa:68:2f:9b:2b:7f:88:aa:ba:d0:a4:28:37:bb:
ef:0e:90:f0:85:86:89:dd:51:30:19:bb:5d:55:f9:
af:ef:8a:e3:b4:a6:e8:c7:a7:63:96:aa:41:83:b1:
21:46:33:03:66:e6:7f:cb:79:de:94:1a:2e:a6:77:
88:51:08:8d:f8:81:b5:75:e1:f0:84:d0:bc:aa:f5:
cf:37:c6:78:75:2b:4b:98:4e:e3:ea:ce:b8:2b:db:
fc:63:0e:3b:d4:8b:c8:c9:78:a7:1a:06:11:a3:53:
62:cf:d0:c8:00:16:c9:df:1e:be:35:81:8c:08:31:
11:27:90:81:7a:b4:98:39:10:ed:39:0b:00:02:4d:
03:43:69:3a:3d:7e:f2:5a:80:61:8e:98:8b:73:58:
9e:fd:17:fc:ca:b1:09:0c:18:45:88:59:79:66:62:
0c:30:7c:59:b1:00:58:d3:dc:81:06:40:fd:2f:0d:
51:12:50:e1:c6:87:7c:c3:d1:4f:f1:b9:b6:52:5a:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:FB:15:E1:F4:D0:DE:C8:91:4E:BC:60:52:FF:04:1C:63:9F:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.168.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:29:08:4c:71:68:cc:58:4e:3d:61:0e:48:6a:91:9c:ea:e7:
ac:a4:a3:79:66:a3:bb:64:60:cd:be:b1:ce:64:59:01:2a:3c:
2a:4b:79:42:9a:aa:57:9a:4b:87:64:9d:8b:64:f3:88:e8:55:
38:85:eb:22:42:6f:c6:9f:2e:2f:82:03:a8:9f:5d:04:d4:a0:
10:a8:7b:3c:0f:41:77:06:40:28:97:c9:ab:f6:e1:1f:cb:1d:
7b:56:53:83:46:ed:3a:d1:25:12:f4:e7:08:49:58:72:01:7b:
9f:33:b0:03:04:7a:45:4f:d8:39:a5:55:30:a3:66:e7:14:81:
96:41:9c:ec:da:28:e1:b5:61:59:59:05:8d:00:e9:03:51:cc:
1a:d0:32:b7:f9:f5:48:e7:ce:03:b0:d7:f6:3c:4c:45:1e:ac:
44:1c:b3:3c:3c:22:4d:d2:61:a9:7d:9f:e8:40:db:7a:ab:73:
d2:a2:bc:3b:eb:b0:5b:78:aa:82:e4:d0:45:f1:6f:70:d1:9e:
a2:10:1a:e3:f0:b4:a1:1d:31:ae:5d:9c:8a:8a:31:de:bb:88:
e2:bf:c6:90:fd:e1:c1:e2:4d:8e:30:ea:7a:6c:b5:6e:56:fb:
be:4a:0e:f4:f6:5e:7a:b4:be:59:f4:55:11:66:3d:02:4d:68:
1a:41:32:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mCHJWGy1A6SKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
MTU4MGY4ZTAtYTE0OS00MWVmLTkzYzQtNGU4NWFiMWZhMGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x713q1zLDfqUjSYCYFj91Bmx63NsRUNxQ2M
Je7J1kbTdzyE193B/nkmBFNuJ7l62TmhXwTgP6J0gK/++mgvmyt/iKq60KQoN7vv
DpDwhYaJ3VEwGbtdVfmv74rjtKbox6djlqpBg7EhRjMDZuZ/y3nelBoupneIUQiN
+IG1deHwhNC8qvXPN8Z4dStLmE7j6s64K9v8Yw471IvIyXinGgYRo1Niz9DIABbJ
3x6+NYGMCDERJ5CBerSYORDtOQsAAk0DQ2k6PX7yWoBhjpiLc1ie/Rf8yrEJDBhF
iFl5ZmIMMHxZsQBY09yBBkD9Lw1RElDhxod8w9FP8bm2UloZ7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJfR+xXh9NDeyJFOvGBS/wQcY5+gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvZWY2ZWYwYmUtZDdlOS0z
MTZjLWFjMTctMzJjNTFkNjI5NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8pCExxaMxYTj1hDkhqkZzq56yko3lmo7tkYM2+sc5kWQEqPCpLeUKa
qleaS4dknYtk84joVTiF6yJCb8afLi+CA6ifXQTUoBCoezwPQXcGQCiXyav24R/L
HXtWU4NG7TrRJRL05whJWHIBe58zsAMEekVP2DmlVTCjZucUgZZBnOzaKOG1YVlZ
BY0A6QNRzBrQMrf59UjnzgOw1/Y8TEUerEQcszw8Ik3SYal9n+hA23qrc9KivDvr
sFt4qoLk0EXxb3DRnqIQGuPwtKEdMa5dnIqKMd67iOK/xpD94cHiTY4w6npstW5W
+75KDvT2Xnq0vln0VRFmPQJNaBpBMqU=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net