Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa
File: d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa (raw, json)
Hash identifier: fVoWvNbD39Oypq8VSY5ZeapGU54uSIl3dCGEDjGUmAE=
Subject key identifier: F9:50:FE:EC:66:2E:51:EE:3D:1E:DE:7F:91:75:EC:A3:D6:C3:99:20
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584971142DE4DA46D88982645800
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 23473
IP address blocks: 216.171.20.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:2d:e4:da:46:d8:89:82:64:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=6b63b291-2b31-4c2b-801f-f4d1f34384d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:24:bb:fc:b4:63:2b:69:e8:1d:21:b3:1c:
27:f5:44:9c:cc:c1:69:d4:7d:b9:e7:a8:13:6c:23:
71:b6:9b:2e:2a:c4:2e:cd:d5:be:e5:31:c4:a5:32:
f7:1a:f1:90:b9:70:1a:9a:3c:fb:8a:34:d8:a4:ec:
d3:8c:0a:c1:29:7c:3e:d6:a2:1a:84:21:73:4b:93:
73:0a:c2:39:da:60:30:17:ec:e7:02:6b:5c:f8:50:
c5:88:9f:d3:3f:ca:25:55:14:33:f2:d9:cd:90:d6:
fa:96:8d:7a:00:27:d7:db:48:46:9c:97:17:be:c5:
1a:e0:cb:a2:81:22:eb:1a:8f:8f:38:46:ff:07:0d:
5f:39:ef:32:9d:39:f0:27:68:31:ad:b2:a2:91:83:
df:58:1d:ea:ab:fc:df:77:dc:8a:7d:91:5c:4f:99:
55:ba:bf:f2:83:d7:31:be:44:d6:7e:05:fc:bf:4c:
66:32:d3:cc:6f:4d:f6:cf:50:1e:a2:34:1e:ec:9a:
6b:66:bc:81:00:2c:f6:8f:1d:fc:e1:bc:da:f6:c8:
50:1f:11:35:5b:43:c9:9f:65:20:f5:0c:77:77:b6:
7d:ff:31:32:b7:45:0d:64:ad:ea:e4:1e:d1:ec:a2:
b1:ec:21:22:91:02:80:8f:56:83:52:71:35:39:df:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:50:FE:EC:66:2E:51:EE:3D:1E:DE:7F:91:75:EC:A3:D6:C3:99:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:46:90:c1:65:bd:00:b4:55:a5:12:d5:82:cd:2c:c8:e0:7d:
96:e5:b3:2e:f2:d3:1e:f7:b4:cb:37:05:e3:f2:71:e2:58:d9:
6c:89:8a:18:13:7d:18:60:d2:d2:10:c4:9c:fc:75:19:30:fa:
29:0f:3a:1d:4d:35:04:2e:d8:a4:6a:c7:f5:0f:29:c0:8a:8e:
01:51:e1:33:19:f3:31:42:5a:31:6f:8d:86:04:cc:0e:21:c5:
b9:ab:71:dc:1e:bc:58:2d:f2:e9:83:84:ba:27:06:cb:a2:b7:
72:0e:b7:47:d8:e2:04:c8:0b:1a:0f:53:51:97:a1:df:ab:ce:
35:04:2a:70:d2:ad:82:87:1a:8a:d3:6d:9d:cc:d5:39:40:5d:
a8:b1:ab:90:b0:bb:c3:c0:87:21:41:c0:a9:78:dd:b4:fc:f0:
3d:25:9a:f6:5c:ad:9d:fd:b9:07:56:32:6f:52:a0:61:9e:b4:
c3:ac:eb:21:de:bc:b6:a4:c0:5e:66:53:90:56:e3:f9:7a:1a:
c5:e5:a5:4f:c9:33:1d:ba:52:8c:60:71:0a:71:73:e3:7a:3e:
5f:37:ae:18:51:1e:04:3c:db:e6:d8:01:3f:81:7f:60:11:4e:
8f:34:3e:f5:31:29:19:38:06:9a:43:83:5a:aa:ab:76:26:0d:
af:3a:dc:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFC3k2kbYiYJkWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk
NmI2M2IyOTEtMmIzMS00YzJiLTgwMWYtZjRkMWYzNDM4NGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMcku/y0Yytp6B0hsxwn9USczMFp1H2556gT
bCNxtpsuKsQuzdW+5THEpTL3GvGQuXAamjz7ijTYpOzTjArBKXw+1qIahCFzS5Nz
CsI52mAwF+znAmtc+FDFiJ/TP8olVRQz8tnNkNb6lo16ACfX20hGnJcXvsUa4Mui
gSLrGo+POEb/Bw1fOe8ynTnwJ2gxrbKikYPfWB3qq/zfd9yKfZFcT5lVur/yg9cx
vkTWfgX8v0xmMtPMb032z1AeojQe7JprZryBACz2jx384bza9shQHxE1W0PJn2Ug
9Qx3d7Z9/zEyt0UNZK3q5B7R7KKx7CEikQKAj1aDUnE1Od87lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPlQ/uxmLlHuPR7ef5F17KPWw5kgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDFlZGQxMmUtZWNmOC0z
YzA2LWJmNjktNWQ5OTE4ZjM4NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpGkMFlvQC0VaUS1YLNLMjgfZblsy7y0x73tMs3BePyceJY2WyJihgT
fRhg0tIQxJz8dRkw+ikPOh1NNQQu2KRqx/UPKcCKjgFR4TMZ8zFCWjFvjYYEzA4h
xbmrcdwevFgt8umDhLonBsuit3IOt0fY4gTICxoPU1GXod+rzjUEKnDSrYKHGorT
bZ3M1TlAXaixq5Cwu8PAhyFBwKl43bT88D0lmvZcrZ39uQdWMm9SoGGetMOs6yHe
vLakwF5mU5BW4/l6GsXlpU/JMx26UoxgcQpxc+N6Pl83rhhRHgQ82+bYAT+Bf2AR
To80PvUxKRk4BppDg1qqq3YmDa863Os=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net