Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/672fb467-c784-34fd-bc35-8456d88cbeb5.roa
File: 672fb467-c784-34fd-bc35-8456d88cbeb5.roa (raw, json)
Hash identifier: d7r1hhln6O5W1F/v2/VBSuiKdNtiEeQ53u7uSWfmQ28=
Subject key identifier: 69:D3:05:73:26:7C:6A:9C:95:A6:D9:FF:3B:77:8F:53:57:C5:9D:BD
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F432858497AD9BBAD751AF643721D40B6
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/672fb467-c784-34fd-bc35-8456d88cbeb5.roa
Signing time: Thu 10 Apr 2025 13:00:59 +0000
ROA not before: Thu 10 Apr 2025 13:00:59 +0000
ROA not after: Wed 09 Jul 2025 13:00:59 +0000
asID: 6649
IP address blocks: 199.193.238.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:d9:bb:ad:75:1a:f6:43:72:1d:40:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Apr 10 13:00:59 2025 GMT
Not After : Jul 9 13:00:59 2025 GMT
Subject: CN=7493c952-0e22-4a30-a76e-222b56dffce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:14:d6:4d:e3:70:34:4d:80:57:15:06:37:
e4:a7:fa:58:cc:b8:e0:db:b2:b9:d3:ce:a2:5c:96:
af:a7:73:5f:b0:21:43:b8:ab:18:f6:8f:c9:0f:d8:
2b:36:a0:f8:af:0a:da:47:95:2c:d5:a5:8a:bb:c2:
3c:4e:31:2a:e9:83:3e:2a:0e:06:2d:ab:93:6b:d7:
9b:d6:cc:a6:e9:c9:86:ff:4a:74:2f:88:14:15:07:
d6:3e:a8:96:61:73:06:2e:a7:2a:66:ee:b1:a0:a5:
b9:6c:f0:25:ff:0a:90:7d:59:45:1a:5a:ed:32:41:
48:5f:e0:56:74:f0:fb:9d:66:6b:d0:dc:94:f4:35:
ca:46:8f:78:38:e6:2a:ec:5a:86:a0:18:63:ab:21:
90:67:3f:25:34:9e:49:3d:37:7d:41:d1:9c:c5:fa:
03:35:aa:4b:42:1f:ea:38:2b:bb:40:dc:a4:fa:6b:
21:82:4a:9d:8c:b4:5f:51:c5:ee:e3:7b:46:5d:bd:
92:28:93:c7:a3:39:cf:d9:6e:d7:7a:02:9f:64:29:
19:38:c0:f5:55:47:32:4c:ef:7b:4c:c2:29:9d:14:
6d:24:93:4c:ba:29:52:e4:1c:7d:5d:5d:4c:8f:e4:
8e:22:8b:09:5f:98:fa:ed:8d:72:28:e4:3b:49:6e:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D3:05:73:26:7C:6A:9C:95:A6:D9:FF:3B:77:8F:53:57:C5:9D:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/672fb467-c784-34fd-bc35-8456d88cbeb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
199.193.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b3:cc:03:c2:e7:91:d8:72:a0:dc:5a:23:13:e8:ea:d8:69:
5f:39:28:12:19:4a:23:f5:51:8d:23:b8:e9:08:87:0f:e2:04:
80:a5:b5:48:81:ce:0a:3f:02:d1:29:bb:ad:c3:f3:38:3d:26:
9c:52:ad:00:7b:e7:25:03:44:39:1f:60:57:f1:c2:45:19:ba:
b6:3e:07:f6:80:60:cc:3f:bc:f6:68:09:2c:a9:81:65:b7:e4:
aa:b1:37:7c:30:ba:e9:a2:c1:b6:9a:aa:c6:58:cb:bb:0a:37:
09:84:63:3e:db:ec:bb:b8:ec:7f:39:42:57:85:99:10:4e:06:
79:eb:a2:83:f7:22:b6:01:de:3c:78:9d:3f:56:46:a3:14:65:
09:35:27:71:88:76:1d:8a:39:e0:65:7a:d7:ae:17:7a:d0:38:
bf:e7:d0:56:8f:23:54:3b:86:b2:4b:a3:e7:41:99:f7:42:d3:
ad:eb:1b:62:54:3f:3b:69:15:97:94:4b:ce:77:ff:08:3a:73:
b8:b7:22:6f:96:b9:c6:ea:de:55:ad:54:bb:38:74:21:dd:51:
09:a4:b7:c0:59:47:7c:2f:f7:70:6a:52:ba:c5:f2:ab:fd:5a:
5a:bf:f5:65:76:d0:66:75:3a:b5:d7:62:ec:9d:ac:cb:20:56:
47:ce:93:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62butdRr2Q3IdQLYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk
NzQ5M2M5NTItMGUyMi00YTMwLWE3NmUtMjIyYjU2ZGZmY2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjgU1k3jcDRNgFcVBjfkp/pYzLjg27K5086i
XJavp3NfsCFDuKsY9o/JD9grNqD4rwraR5Us1aWKu8I8TjEq6YM+Kg4GLauTa9eb
1sym6cmG/0p0L4gUFQfWPqiWYXMGLqcqZu6xoKW5bPAl/wqQfVlFGlrtMkFIX+BW
dPD7nWZr0NyU9DXKRo94OOYq7FqGoBhjqyGQZz8lNJ5JPTd9QdGcxfoDNapLQh/q
OCu7QNyk+mshgkqdjLRfUcXu43tGXb2SKJPHoznP2W7XegKfZCkZOMD1VUcyTO97
TMIpnRRtJJNMuilS5Bx9XV1Mj+SOIosJX5j67Y1yKOQ7SW7OZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnTBXMmfGqclabZ/zt3j1NXxZ29MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNjcyZmI0NjctYzc4NC0z
NGZkLWJjMzUtODQ1NmQ4OGNiZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8HuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKzzAPC55HYcqDcWiMT6OrYaV85KBIZSiP1UY0juOkIhw/iBICltUiB
zgo/AtEpu63D8zg9JpxSrQB75yUDRDkfYFfxwkUZurY+B/aAYMw/vPZoCSypgWW3
5KqxN3wwuumiwbaaqsZYy7sKNwmEYz7b7Lu47H85QleFmRBOBnnrooP3IrYB3jx4
nT9WRqMUZQk1J3GIdh2KOeBleteuF3rQOL/n0FaPI1Q7hrJLo+dBmfdC063rG2JU
PztpFZeUS853/wg6c7i3Im+Wucbq3lWtVLs4dCHdUQmkt8BZR3wv93BqUrrF8qv9
Wlq/9WV20GZ1OrXXYuydrMsgVkfOk2Q=
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:12 2025 by rpki-client on console.sobornost.net