Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa
File: 39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa (raw, json)
Hash identifier: vOdQkW99O00SxzFAUoGuxA4cBcsp3+H037wnQErEdlM=
Subject key identifier: 30:11:A9:53:B2:3D:1F:03:E8:7C:1F:8D:FF:DC:9A:31:4D:67:42:4E
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848FD56C258034637B43BE95300
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53508
IP address blocks: 206.255.132.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c2:58:03:46:37:b4:3b:e9:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=466a2eef-705b-41ad-95d1-aabc18553f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:8a:13:30:02:a5:c0:62:25:8f:38:5c:5a:
a4:ae:89:ea:4c:9e:c1:51:23:f6:0b:ad:ec:d1:f3:
12:31:ad:87:05:66:f4:47:8c:dd:fb:26:58:7d:d7:
db:32:b7:a5:4b:a5:73:ce:4f:c2:8e:8f:31:cb:25:
6f:a9:eb:9c:f5:11:42:3f:4a:52:2b:53:c0:61:85:
e7:12:2f:f7:a5:04:c9:c1:0c:b1:96:33:65:2b:40:
c8:e9:b4:79:ba:71:3e:66:f6:11:79:8a:44:a4:61:
c8:2a:e2:2e:e9:65:36:20:59:7e:8f:66:92:14:e5:
f9:c9:6b:79:35:76:b3:c9:7c:44:43:56:a3:87:b5:
40:e9:e6:20:8f:fd:a1:27:65:02:e3:e4:1e:9e:48:
96:75:13:b4:6d:6f:ae:96:ee:f1:9c:8d:7d:b4:4b:
f2:a5:99:31:e9:7e:5b:c2:3e:4d:fe:6d:14:98:06:
c7:66:76:a0:09:e8:02:7f:ba:64:11:8e:12:3d:da:
b0:d8:1a:0d:b3:c6:6b:95:75:83:fb:f1:8c:80:53:
cf:9d:23:2c:6b:4d:6a:ab:e7:d7:e5:3a:03:6a:85:
2f:d0:85:33:12:2c:f1:2c:45:82:79:d7:1d:de:e0:
f1:e3:dc:d8:a1:7a:ff:6c:b2:a4:d7:c6:cc:4b:02:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:A9:53:B2:3D:1F:03:E8:7C:1F:8D:FF:DC:9A:31:4D:67:42:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:3e:c6:e3:c8:35:98:d5:17:7a:aa:54:78:d3:9b:49:bf:da:
62:29:5c:0f:6c:92:cf:fd:a9:3d:14:29:70:2d:d8:67:e6:25:
5f:80:0d:0e:46:dd:79:0d:ba:e3:70:1a:25:18:e9:84:7c:af:
21:35:6b:69:99:cb:26:08:f4:b8:85:e9:0d:fb:29:c2:e2:54:
8f:0a:b9:4c:37:c5:04:a3:6d:22:a4:95:e8:05:55:56:45:71:
e0:4a:ef:fc:24:73:67:6e:e4:d0:fc:12:56:77:86:15:b4:56:
14:30:df:31:64:4f:13:e0:95:19:f1:cf:5a:81:63:f9:e3:58:
cf:5d:19:50:b3:4e:03:aa:35:05:bd:7f:6f:4e:ae:a8:dd:00:
88:18:90:a0:12:2e:58:09:aa:e9:7b:13:1b:13:4b:aa:91:28:
91:a9:e6:d6:94:6a:9b:09:99:b1:1e:3c:7b:a5:f7:f3:fe:fb:
a2:a7:5f:a3:8c:10:57:40:b3:81:3a:1e:b7:44:21:8b:ff:b6:
26:60:69:c1:cc:e9:86:54:0c:94:cd:09:a1:a2:ec:0e:27:6a:
d8:56:b7:ba:16:b9:a8:fd:e2:0e:0f:59:41:95:3d:e7:49:fb:
5d:36:a5:79:d2:27:7f:6f:c1:de:dd:b4:59:3b:8d:c5:9f:5f:
00:81:f6:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsJYA0Y3tDvpUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NDY2YTJlZWYtNzA1Yi00MWFkLTk1ZDEtYWFiYzE4NTUzZjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRiKEzACpcBiJY84XFqkronqTJ7BUSP2C63s
0fMSMa2HBWb0R4zd+yZYfdfbMrelS6Vzzk/Cjo8xyyVvqeuc9RFCP0pSK1PAYYXn
Ei/3pQTJwQyxljNlK0DI6bR5unE+ZvYReYpEpGHIKuIu6WU2IFl+j2aSFOX5yWt5
NXazyXxEQ1ajh7VA6eYgj/2hJ2UC4+QenkiWdRO0bW+ulu7xnI19tEvypZkx6X5b
wj5N/m0UmAbHZnagCegCf7pkEY4SPdqw2BoNs8ZrlXWD+/GMgFPPnSMsa01qq+fX
5ToDaoUv0IUzEizxLEWCedcd3uDx49zYoXr/bLKk18bMSwL2bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDARqVOyPR8D6Hwfjf/cmjFNZ0JOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzllZjVmODUtNmVkNC0z
ODczLTk3MzEtY2U5OWRjMWE2YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACU+xuPINZjVF3qqVHjTm0m/2mIpXA9sks/9qT0UKXAt2GfmJV+ADQ5G
3XkNuuNwGiUY6YR8ryE1a2mZyyYI9LiF6Q37KcLiVI8KuUw3xQSjbSKklegFVVZF
ceBK7/wkc2du5ND8ElZ3hhW0VhQw3zFkTxPglRnxz1qBY/njWM9dGVCzTgOqNQW9
f29OrqjdAIgYkKASLlgJqul7ExsTS6qRKJGp5taUapsJmbEePHul9/P++6KnX6OM
EFdAs4E6HrdEIYv/tiZgacHM6YZUDJTNCaGi7A4nathWt7oWuaj94g4PWUGVPedJ
+102pXnSJ39vwd7dtFk7jcWfXwCB9jw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net