Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa
File: a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa (raw, json)
Hash identifier: IZlkH5+XUvqtUU1yDtKjDOOLpRIujMkqPZQgdoLYilQ=
Subject key identifier: 27:07:F2:AA:AF:19:C2:45:C7:56:1B:03:30:A4:35:3D:DC:51:DC:B2
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848FD56C9734920F22C0510ADE0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53508
IP address blocks: 206.255.64.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c9:73:49:20:f2:2c:05:10:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=9e48a46d-631e-4962-8ead-ff7034264b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:60:12:dd:a4:a7:31:f4:21:46:b3:92:61:
58:95:68:97:ce:a7:7e:b6:fd:98:fd:a7:ef:48:7f:
56:c1:cf:0a:d3:f1:f8:d2:75:60:22:ec:17:fc:e3:
94:18:be:0c:aa:89:55:60:cc:3e:77:a1:4d:ae:be:
79:5f:51:41:60:ff:f2:fb:b7:b1:e3:3e:39:47:dd:
8a:d7:9a:49:c0:5b:b1:b2:ec:28:e8:cc:6c:c7:95:
e8:27:b1:3a:fa:8f:5c:2e:75:91:45:9b:70:c7:ae:
de:a3:95:79:4f:fb:88:75:02:b2:2b:f0:77:b6:f0:
9f:9b:30:3f:bd:a9:2e:5e:82:bf:29:83:52:95:a1:
a8:e7:ab:11:00:55:53:21:18:72:57:a6:be:19:ad:
f8:b1:d2:05:99:bf:4d:b0:04:f7:d2:bb:bb:98:6d:
57:b7:95:8c:7f:77:d9:9e:08:bc:f2:6b:e5:db:a2:
cb:ad:8a:35:c7:a5:e4:93:7a:34:ba:7c:e1:5f:19:
c1:d4:b7:00:ed:08:44:58:94:5a:f9:51:fa:ad:10:
e5:fb:16:17:26:19:58:6f:c6:24:a8:13:ee:7a:f4:
6a:7c:a9:d0:df:b0:df:ba:24:fa:16:9a:cb:8c:6f:
3c:67:6e:6d:24:e5:71:60:b1:fa:e7:12:d9:e2:af:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:F2:AA:AF:19:C2:45:C7:56:1B:03:30:A4:35:3D:DC:51:DC:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:cf:a9:c5:2e:81:54:d2:e8:15:06:df:60:51:55:b7:e9:52:
f8:2b:11:98:f1:99:27:9a:8c:e9:fb:db:7f:fd:4a:2f:62:3a:
c5:44:c5:aa:58:2d:3e:39:5b:3e:ff:3a:62:77:20:db:c9:73:
64:df:41:f7:eb:55:48:2a:1b:0a:10:25:e4:bf:78:b5:84:dc:
83:1b:c2:79:7a:50:75:86:37:d4:8e:b1:94:c6:51:7c:f3:19:
c8:d7:56:2c:c4:ba:e9:b0:71:26:91:cb:98:60:c7:56:60:33:
fa:30:7a:46:87:ce:03:54:aa:7d:c5:2d:3b:a7:8c:16:a9:79:
21:7e:4a:ae:95:d2:2c:1e:df:d8:60:a4:04:1a:75:44:76:e0:
21:31:60:52:cc:8c:4b:25:2b:3c:ff:23:27:57:38:57:f0:11:
77:d0:de:c6:14:12:3c:e7:25:91:06:a2:0b:25:72:f6:d2:c1:
56:7f:48:93:fe:e5:85:81:ee:4e:37:b2:d2:a5:f0:3d:d6:fb:
d9:a7:57:d0:88:96:a9:5e:5e:90:71:67:6d:e8:4c:0c:cb:5d:
66:7b:2a:6a:07:0b:50:cd:46:e6:5b:fd:47:14:a3:91:80:ce:
86:ab:f8:24:92:b0:77:a3:4b:02:5d:ae:25:96:7d:1b:33:ab:
69:b4:f5:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VslzSSDyLAUQreAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
OWU0OGE0NmQtNjMxZS00OTYyLThlYWQtZmY3MDM0MjY0YjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitFgEt2kpzH0IUazkmFYlWiXzqd+tv2Y/afv
SH9Wwc8K0/H40nVgIuwX/OOUGL4MqolVYMw+d6FNrr55X1FBYP/y+7ex4z45R92K
15pJwFuxsuwo6Mxsx5XoJ7E6+o9cLnWRRZtwx67eo5V5T/uIdQKyK/B3tvCfmzA/
vakuXoK/KYNSlaGo56sRAFVTIRhyV6a+Ga34sdIFmb9NsAT30ru7mG1Xt5WMf3fZ
ngi88mvl26LLrYo1x6Xkk3o0unzhXxnB1LcA7QhEWJRa+VH6rRDl+xYXJhlYb8Yk
qBPuevRqfKnQ37DfuiT6FprLjG88Z25tJOVxYLH65xLZ4q+aRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcH8qqvGcJFx1YbAzCkNT3cUdyyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYTcxZTc1MmItMzAyMS0z
ZDBhLThjN2YtY2Y4YTg2MmJhY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzPqcUugVTS6BUG32BRVbfpUvgrEZjxmSeajOn723/9Si9iOsVExapY
LT45Wz7/OmJ3INvJc2TfQffrVUgqGwoQJeS/eLWE3IMbwnl6UHWGN9SOsZTGUXzz
GcjXVizEuumwcSaRy5hgx1ZgM/owekaHzgNUqn3FLTunjBapeSF+Sq6V0iwe39hg
pAQadUR24CExYFLMjEslKzz/IydXOFfwEXfQ3sYUEjznJZEGogslcvbSwVZ/SJP+
5YWB7k43stKl8D3W+9mnV9CIlqleXpBxZ23oTAzLXWZ7KmoHC1DNRuZb/UcUo5GA
zoar+CSSsHejSwJdriWWfRszq2m09Zo=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net