Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa
File: 2ef408ad-35f8-33e4-b29d-64037f1ae171.roa (raw, json)
Hash identifier: t9JJS3vYqZsBbrKLL15rKSpX6glARko7pr+wrVV0/Y0=
Subject key identifier: 56:FB:86:00:0F:72:A6:F5:C2:9F:1E:64:D7:C6:3C:34:16:45:4C:B2
Certificate issuer: /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Certificate serial: 010D0C9F432858495D896D84028138ECB3866240
Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 2055
IP address blocks: 173.253.128.0/17 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:6d:84:02:81:38:ec:b3:86:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=450582f7-9b38-4b96-8d48-9595af47f24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:be:6e:ed:ea:82:42:92:ce:9e:91:54:ed:
e2:a9:95:ad:f0:40:da:c9:7e:26:cb:c5:e4:df:eb:
4f:68:14:65:22:c3:f9:23:b8:73:a1:c9:f2:b5:74:
ec:05:6d:01:fc:d3:6b:f7:46:ad:74:66:be:ba:08:
1e:45:3d:cd:64:3d:34:20:ac:95:d4:c2:5f:68:e1:
be:df:87:b6:92:c6:8b:a2:92:9b:83:49:5f:a3:2d:
5d:b5:9c:8b:ab:79:46:d0:6b:58:60:47:d5:8c:ae:
c5:bf:58:c9:12:65:a5:cf:d5:49:ee:1e:1e:45:22:
f6:cd:8a:ca:8c:34:c1:cc:66:8e:39:18:98:91:16:
dc:61:1e:2c:5d:85:f4:b1:1c:64:d2:9a:58:5c:7e:
8c:6f:20:30:d0:3f:95:14:a8:c0:bc:16:9a:4f:84:
bf:a2:4d:e0:1e:db:43:d4:4e:c4:ab:d1:b6:e4:5a:
bf:66:94:c6:ba:97:45:9b:9a:0e:49:f1:50:73:3e:
5b:a0:b6:5c:34:ff:96:d1:f1:64:c3:81:84:f4:76:
60:f1:af:a7:5f:fb:ac:9b:76:45:8c:fd:7d:53:50:
4c:3b:0a:a6:53:4f:20:18:b2:2b:17:1e:35:45:16:
42:b8:d9:eb:8a:af:d5:07:4b:8c:06:d0:97:d6:86:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FB:86:00:0F:72:A6:F5:C2:9F:1E:64:D7:C6:3C:34:16:45:4C:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl
X509v3 Authority Key Identifier:
keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
sbgp-ipAddrBlock: critical
IPv4:
173.253.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:db:77:8a:7b:65:fa:23:98:6a:ae:25:15:b3:87:30:81:9a:
b7:b0:c4:17:da:1e:0b:f1:b7:64:cd:03:d2:0a:f3:5d:4e:b8:
1a:39:31:ea:c5:98:55:b2:e6:2e:54:e7:05:21:9d:79:39:be:
05:d2:22:dc:b8:72:2c:91:8e:da:2d:53:9f:b0:de:fb:fc:0b:
e0:5b:06:97:17:ae:f6:5a:c8:bc:76:ee:40:82:6c:11:bb:2a:
14:be:fa:73:07:49:a9:61:f0:92:b7:6a:b1:fc:0d:74:c5:0c:
4d:31:49:f9:71:56:40:6c:54:02:99:ef:03:24:57:d1:25:4e:
4a:72:17:7c:c6:af:f2:d4:e7:ca:f2:3b:c2:47:4b:2e:ed:15:
a0:38:c0:d6:28:bf:d2:bb:aa:e5:3d:24:2f:72:0f:35:b2:34:
a4:58:06:e1:57:ea:cc:38:b7:b8:e4:08:c2:d4:1b:f8:16:f0:
ea:fc:86:5e:cd:19:07:be:03:72:9e:72:41:57:ee:3c:7f:fe:
40:94:e2:16:cc:88:a8:12:eb:b1:44:8a:ee:63:d8:52:d5:64:
82:ab:ee:9a:2d:4f:c3:49:5a:95:d7:b1:58:57:16:52:f5:19:
b3:5b:38:3d:4c:5c:3a:3e:a4:f6:69:d2:d0:73:d6:79:c9:1f:
2f:aa:36:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiW2EAoE47LOGYkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFmOTc2ZmQtN2ZhMC00MzIzLTk3ZmEtMzViYjg2OWE5
MjMxMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk
NDUwNTgyZjctOWIzOC00Yjk2LThkNDgtOTU5NWFmNDdmMjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5a+bu3qgkKSzp6RVO3iqZWt8EDayX4my8Xk
3+tPaBRlIsP5I7hzocnytXTsBW0B/NNr90atdGa+uggeRT3NZD00IKyV1MJfaOG+
34e2ksaLopKbg0lfoy1dtZyLq3lG0GtYYEfVjK7Fv1jJEmWlz9VJ7h4eRSL2zYrK
jDTBzGaOORiYkRbcYR4sXYX0sRxk0ppYXH6MbyAw0D+VFKjAvBaaT4S/ok3gHttD
1E7Eq9G25Fq/ZpTGupdFm5oOSfFQcz5boLZcNP+W0fFkw4GE9HZg8a+nX/usm3ZF
jP19U1BMOwqmU08gGLIrFx41RRZCuNnriq/VB0uMBtCX1obnRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFb7hgAPcqb1wp8eZNfGPDQWRUyyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMWY5
NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5YTkyMzEvMmVmNDA4YWQtMzVmOC0z
M2U0LWIyOWQtNjQwMzdmMWFlMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjFmOTc2ZmQtN2ZhMC00MzIzLTk3
ZmEtMzViYjg2OWE5MjMxL2IxZjk3NmZkLTdmYTAtNDMyMy05N2ZhLTM1YmI4Njlh
OTIzMS5jcmwwHwYDVR0jBBgwFoAUrpokcZiF5gtdP+4v/cqhapTgJzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iMWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJi
ODY5YTkyMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrf2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnbd4p7ZfojmGquJRWzhzCBmrewxBfaHgvxt2TNA9IK811OuBo5MerF
mFWy5i5U5wUhnXk5vgXSIty4ciyRjtotU5+w3vv8C+BbBpcXrvZayLx27kCCbBG7
KhS++nMHSalh8JK3arH8DXTFDE0xSflxVkBsVAKZ7wMkV9ElTkpyF3zGr/LU58ry
O8JHSy7tFaA4wNYov9K7quU9JC9yDzWyNKRYBuFX6sw4t7jkCMLUG/gW8Or8hl7N
GQe+A3KeckFX7jx//kCU4hbMiKgS67FEiu5j2FLVZIKr7potT8NJWpXXsVhXFlL1
GbNbOD1MXDo+pPZp0tBz1nnJHy+qNtQ=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:30 2025 by rpki-client on console.sobornost.net