Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/93751b68-c899-3188-87f2-1f795bbf78a9.roa
File: 93751b68-c899-3188-87f2-1f795bbf78a9.roa (raw, json)
Hash identifier: ePMtpkd3uoTlrlSoPMEZhe0hg67TRxpk6BS8D6DOa40=
Subject key identifier: 3C:B7:EE:80:33:00:D9:1B:F8:F0:60:59:3C:43:8E:24:4B:B9:24:12
Certificate issuer: /CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Certificate serial: 010D0C9F4328584961B99EDF5C7220D959555680
Authority key identifier: DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/93751b68-c899-3188-87f2-1f795bbf78a9.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 40772
IP address blocks: 104.36.107.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:9e:df:5c:72:20:d9:59:55:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=af65dfdc-3410-494e-a06f-7c27386178a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:e0:4c:c6:81:1c:38:8a:97:58:c5:e0:f2:
5d:67:b6:3c:6a:8e:1d:70:2c:9b:ef:97:d2:9f:26:
57:0d:58:c6:27:9e:81:a5:4a:9a:5d:01:70:00:f2:
71:58:48:3a:6c:3f:57:82:35:4c:93:6d:a9:90:b8:
39:52:cc:31:d4:c8:4f:db:be:9b:86:25:3d:70:e8:
82:72:e6:6d:aa:77:b2:6e:dd:2c:48:c9:50:af:8f:
cd:53:f2:b4:f4:81:b0:2e:b9:c4:8e:c1:ce:db:08:
bf:c8:94:b8:98:33:92:cc:de:83:4a:11:e3:91:2f:
03:7b:f4:16:b2:26:4d:0f:39:bd:64:50:9c:20:4c:
ef:9c:8c:a8:8b:eb:f2:7a:f7:09:0d:91:4b:fd:9b:
4e:fb:c3:da:c7:51:39:f8:50:43:71:9e:ad:7e:25:
80:3d:24:e1:fa:3f:1b:2f:38:78:2c:c1:59:09:ff:
38:99:ef:0b:48:e5:45:85:e4:53:fd:e5:6f:6e:da:
b1:ec:41:34:96:da:65:d7:a4:70:0a:f8:1e:b9:e5:
83:8b:96:f6:28:e8:03:e0:69:4b:e8:8f:09:38:2b:
c7:21:55:1e:eb:d6:ad:a7:74:5b:32:02:20:09:78:
54:ed:7d:60:02:c0:05:49:83:5f:d2:26:7d:47:f1:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:EE:80:33:00:D9:1B:F8:F0:60:59:3C:43:8E:24:4B:B9:24:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/93751b68-c899-3188-87f2-1f795bbf78a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl
X509v3 Authority Key Identifier:
keyid:DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:85:33:a2:c3:1e:f3:97:d3:60:f7:b0:5c:c7:4c:7f:f3:a1:
40:db:cf:61:fd:5f:7f:64:01:dd:a0:dc:03:24:3e:24:6e:af:
d0:90:d5:5c:87:c0:76:62:ce:88:a0:fc:41:bd:9e:46:44:b0:
5a:0b:8b:18:fa:8b:5f:ca:45:d5:93:49:36:2b:24:2b:9c:5e:
53:a9:24:77:f4:e2:18:d8:ed:87:8c:33:c9:3c:5c:7c:fd:0f:
7a:32:5b:a5:7e:e5:82:f0:72:15:29:10:17:ac:2f:9e:42:ef:
1b:49:10:ed:66:43:11:7e:5b:91:1b:68:f2:50:8b:fd:b9:96:
f5:8f:ae:62:69:ed:cd:04:08:c7:b2:7c:af:5c:ad:8d:9f:cf:
9d:4b:83:b4:ed:61:99:0b:d3:ae:65:78:86:b8:78:9e:09:8a:
ff:59:d6:54:99:22:af:ac:b5:72:1b:05:cd:08:a0:a5:58:ac:
88:1b:0d:b4:98:71:00:84:93:0c:9b:fb:50:ed:13:b3:f6:a0:
13:82:2e:bd:a1:76:3f:b6:ec:d1:da:83:92:78:36:4e:c3:91:
02:9d:ce:a4:eb:ee:ed:fb:c5:bb:cd:69:b2:67:85:41:44:4e:
77:ea:cf:39:ba:8d:59:47:e7:d9:18:9b:3e:7a:0a:99:61:05:
82:4d:a7:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZ7fXHIg2VlVVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWYwYjBkMWUtZjI2Yi00N2VkLTk2OGUtZDMwYzllMGVi
YTk4MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
YWY2NWRmZGMtMzQxMC00OTRlLWEwNmYtN2MyNzM4NjE3OGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuLgTMaBHDiKl1jF4PJdZ7Y8ao4dcCyb75fS
nyZXDVjGJ56BpUqaXQFwAPJxWEg6bD9XgjVMk22pkLg5Uswx1MhP276bhiU9cOiC
cuZtqneybt0sSMlQr4/NU/K09IGwLrnEjsHO2wi/yJS4mDOSzN6DShHjkS8De/QW
siZNDzm9ZFCcIEzvnIyoi+vyevcJDZFL/ZtO+8Pax1E5+FBDcZ6tfiWAPSTh+j8b
Lzh4LMFZCf84me8LSOVFheRT/eVvbtqx7EE0ltpl16RwCvgeueWDi5b2KOgD4GlL
6I8JOCvHIVUe69atp3RbMgIgCXhU7X1gAsAFSYNf0iZ9R/HXJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDy37oAzANkb+PBgWTxDjiRLuSQSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85ZjBi
MGQxZS1mMjZiLTQ3ZWQtOTY4ZS1kMzBjOWUwZWJhOTgvOTM3NTFiNjgtYzg5OS0z
MTg4LTg3ZjItMWY3OTViYmY3OGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWYwYjBkMWUtZjI2Yi00N2VkLTk2
OGUtZDMwYzllMGViYTk4LzlmMGIwZDFlLWYyNmItNDdlZC05NjhlLWQzMGM5ZTBl
YmE5OC5jcmwwHwYDVR0jBBgwFoAU3O+fr0NqIU9PMyK0rqOcjo8k5nkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85ZjBiMGQxZS1mMjZiLTQ3ZWQtOTY4ZS1kMzBj
OWUwZWJhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCRrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImFM6LDHvOX02D3sFzHTH/zoUDbz2H9X39kAd2g3AMkPiRur9CQ1VyH
wHZizoig/EG9nkZEsFoLixj6i1/KRdWTSTYrJCucXlOpJHf04hjY7YeMM8k8XHz9
D3oyW6V+5YLwchUpEBesL55C7xtJEO1mQxF+W5EbaPJQi/25lvWPrmJp7c0ECMey
fK9crY2fz51Lg7TtYZkL065leIa4eJ4Jiv9Z1lSZIq+stXIbBc0IoKVYrIgbDbSY
cQCEkwyb+1DtE7P2oBOCLr2hdj+27NHag5J4Nk7DkQKdzqTr7u37xbvNabJnhUFE
Tnfqzzm6jVlH59kYmz56CplhBYJNp90=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:29 2025 by rpki-client on console.sobornost.net