Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa
File: 24e9780f-da80-3241-86e2-93db72785a5f.roa (raw, json)
Hash identifier: WKmT0SBQR1x3mvm6lX0VUrVoZqUqiH9ku27fFdcihnc=
Subject key identifier: 64:B2:C2:31:29:1B:B6:13:97:A2:9F:46:14:9F:0E:A6:12:50:91:43
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F432858494B63FBC04CFE1820ACEFC800
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 25961
IP address blocks: 209.237.66.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:63:fb:c0:4c:fe:18:20:ac:ef:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=38aab889-0618-4cb1-bcf2-1e342a966123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:fc:4b:53:f6:05:aa:96:52:1c:59:39:1f:
85:9c:eb:cd:c6:d4:ac:52:ea:8e:03:85:8a:d6:4b:
3e:a8:e4:b1:b6:55:a5:ad:8b:d2:2b:5d:10:f9:d0:
ff:86:28:e2:c7:f1:d3:37:b9:62:c9:82:d1:11:5e:
e6:ad:03:a4:4c:fe:b8:54:84:f9:99:cd:75:92:6c:
01:ac:0f:eb:86:90:18:f2:6d:cb:31:2e:7f:59:73:
be:51:d5:b6:c4:f7:41:9e:49:1f:e6:1f:df:c1:20:
ce:6b:89:02:4e:36:f1:75:6b:8e:7c:cf:22:96:a7:
0c:db:da:d5:8f:71:15:71:68:d0:cb:39:ce:f2:fb:
0c:a5:3e:60:ea:4b:27:92:b1:33:40:81:e2:fa:39:
42:69:46:7a:ce:46:5c:d5:6c:e6:c1:07:8a:a1:e1:
22:16:8b:a4:3e:b0:0c:3e:c2:31:a9:1f:a0:68:0b:
2a:4d:d8:5e:75:85:28:11:01:d5:09:b0:c9:5d:23:
74:c4:13:4e:d0:fc:92:d8:cd:4b:5b:bf:3d:10:b4:
6a:97:85:2a:53:83:16:82:a6:7f:a3:e1:a1:6a:7d:
10:19:d5:62:f8:a4:3a:89:64:27:d0:74:a3:b5:f2:
a1:bf:0c:ce:b5:86:05:3c:f2:a8:78:46:53:d1:23:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:C2:31:29:1B:B6:13:97:A2:9F:46:14:9F:0E:A6:12:50:91:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:56:ea:57:2d:b7:2b:27:04:8a:57:9a:4c:e8:d7:0f:49:b9:
d2:16:83:ff:89:b8:b2:cb:c4:97:98:78:2b:c5:94:dc:3b:c2:
e0:3e:47:23:75:26:e1:e9:a3:ff:a6:31:5e:df:cf:09:be:58:
c2:6b:d6:2a:7c:9d:aa:c8:09:da:36:61:52:84:29:e8:d7:2c:
c3:ae:2d:e8:04:cb:30:cd:b6:68:86:f7:27:5b:d6:08:e5:37:
e9:7b:e2:b6:21:d4:cf:b2:b0:ac:70:ec:c7:5e:91:3a:26:16:
7d:cd:f9:96:7f:90:6f:26:23:f6:e6:82:44:cc:fa:fc:95:74:
5e:29:6f:85:d9:ed:99:bf:20:2a:6f:2c:3a:5c:65:a4:2e:41:
f5:1a:0d:b0:9f:72:0f:34:75:42:f8:dc:89:43:55:0c:2a:fd:
49:08:f0:72:e5:e2:c4:94:bc:08:86:e3:ed:34:bb:d6:e0:6e:
e7:f1:e5:af:1d:fd:e3:23:6e:20:8c:97:02:0c:49:50:ae:0c:
ee:19:39:14:fc:6b:a8:7c:f6:f8:25:a2:56:26:de:a2:85:b7:
1c:2c:0a:7b:31:1b:8f:73:5d:0e:af:0c:e4:ce:00:a8:cf:1f:
50:b7:a4:af:30:3e:0d:bf:5d:41:ba:c8:0e:83:d4:8c:74:19:
53:fe:eb:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY/vATP4YIKzvyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
MzhhYWI4ODktMDYxOC00Y2IxLWJjZjItMWUzNDJhOTY2MTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKX8S1P2BaqWUhxZOR+FnOvNxtSsUuqOA4WK
1ks+qOSxtlWlrYvSK10Q+dD/hijix/HTN7liyYLREV7mrQOkTP64VIT5mc11kmwB
rA/rhpAY8m3LMS5/WXO+UdW2xPdBnkkf5h/fwSDOa4kCTjbxdWuOfM8ilqcM29rV
j3EVcWjQyznO8vsMpT5g6ksnkrEzQIHi+jlCaUZ6zkZc1WzmwQeKoeEiFoukPrAM
PsIxqR+gaAsqTdhedYUoEQHVCbDJXSN0xBNO0PyS2M1LW789ELRql4UqU4MWgqZ/
o+Ghan0QGdVi+KQ6iWQn0HSjtfKhvwzOtYYFPPKoeEZT0SMRAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSywjEpG7YTl6KfRhSfDqYSUJFDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMjRlOTc4MGYtZGE4MC0z
MjQxLTg2ZTItOTNkYjcyNzg1YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxW6lcttysnBIpXmkzo1w9JudIWg/+JuLLLxJeYeCvFlNw7wuA+RyN1
JuHpo/+mMV7fzwm+WMJr1ip8narICdo2YVKEKejXLMOuLegEyzDNtmiG9ydb1gjl
N+l74rYh1M+ysKxw7MdekTomFn3N+ZZ/kG8mI/bmgkTM+vyVdF4pb4XZ7Zm/ICpv
LDpcZaQuQfUaDbCfcg80dUL43IlDVQwq/UkI8HLl4sSUvAiG4+00u9bgbufx5a8d
/eMjbiCMlwIMSVCuDO4ZORT8a6h89vglolYm3qKFtxwsCnsxG49zXQ6vDOTOAKjP
H1C3pK8wPg2/XUG6yA6D1Ix0GVP+68w=
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:12 2025 by rpki-client on console.sobornost.net