Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa
File: 29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa (raw, json)
Hash identifier: Nquz58g547zhPwyh/NUksNL514zWXZL77R9LzHkfEOU=
Subject key identifier: 66:FB:15:A3:5A:F1:8D:C4:E6:FD:39:DE:4A:5D:5B:30:E0:73:37:2A
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F4328584940394E2FA3E4AF4ADF860740
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 33392
IP address blocks: 137.83.102.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4e:2f:a3:e4:af:4a:df:86:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=0c39a4af-a242-4e72-ac0b-d4b01b37ffa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:16:26:9f:f1:ec:58:e3:b9:a3:1e:9d:b4:
09:a6:88:2b:9d:23:10:3f:24:34:86:dd:8c:93:f8:
c5:3c:87:a9:0c:52:82:b4:55:06:9c:ed:d3:6c:f8:
72:ae:a0:0e:59:15:fe:96:73:48:4d:87:64:91:15:
fa:bd:90:2f:4e:61:1b:f4:ea:49:5b:c7:d1:85:4c:
45:e9:0f:e0:52:75:08:90:06:ca:59:1f:fd:1f:da:
a7:a9:7c:fe:cf:68:72:a8:56:dd:b7:6c:30:d4:42:
28:f5:eb:73:2d:01:d9:04:ec:de:cd:c8:e3:90:63:
24:16:77:d3:4d:cc:1e:50:3d:be:50:c9:62:6d:a9:
60:07:e2:83:be:bd:9a:92:83:a7:a9:78:2a:10:50:
77:e3:96:d9:5b:8e:21:f4:dc:c5:aa:fe:f2:43:2c:
87:4a:a7:7e:9c:c0:e0:95:0c:16:1f:f8:41:40:45:
c8:64:94:c9:63:bb:b1:8b:c4:b3:51:8f:11:e4:ba:
45:56:21:66:24:35:a8:0a:02:c9:9e:7f:bb:93:5e:
29:3b:f8:2e:79:42:20:c3:3b:ae:17:25:fd:f1:9a:
f2:f2:48:71:79:3d:17:db:30:bd:3e:a5:4d:cc:4a:
68:41:ae:d8:e8:77:8b:31:61:13:20:36:7b:b1:b5:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FB:15:A3:5A:F1:8D:C4:E6:FD:39:DE:4A:5D:5B:30:E0:73:37:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.83.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:8d:70:fc:fc:82:8c:82:3f:27:97:13:f1:78:25:2a:2e:5b:
ca:8c:c5:86:70:3e:a6:5c:db:8f:1a:af:2d:7a:91:b4:8d:5f:
ea:30:df:a9:a1:05:3d:cc:80:a6:91:c8:db:7c:72:67:ac:b7:
e1:f1:3c:89:16:02:54:f4:be:3b:8e:4a:99:ca:d0:b4:cd:61:
5d:49:c5:9d:e7:5f:ad:23:70:84:40:ff:0d:3c:38:a1:00:0d:
86:b4:ef:e6:e5:ba:83:b4:ff:e3:95:02:b2:42:ea:8f:f9:b3:
b1:01:b6:0e:83:c6:e9:e3:96:98:c6:b8:98:23:e5:81:9b:27:
f2:95:44:9f:c0:98:62:b5:32:b5:41:89:d6:6e:43:ed:d6:89:
f0:f5:76:4a:ce:bb:65:15:b0:c0:0d:4c:48:6a:9d:ae:69:6c:
6f:ab:a7:8b:f0:81:e3:a9:72:27:f0:52:72:2f:79:63:78:c8:
a2:b9:e7:5c:37:42:b8:71:b4:2f:58:57:f1:92:16:3a:2d:b5:
76:01:70:fd:e2:b2:43:c2:f5:6b:87:0d:2d:52:0c:b5:60:02:
2d:65:09:b1:06:b0:08:99:90:8d:9a:94:c3:4f:54:cf:3b:be:
35:59:70:53:cd:e7:a6:ee:4b:2d:b9:28:f1:d9:b0:4f:9b:08:
d1:83:6d:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOU4vo+SvSt+GB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
MGMzOWE0YWYtYTI0Mi00ZTcyLWFjMGItZDRiMDFiMzdmZmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1YWJp/x7FjjuaMenbQJpogrnSMQPyQ0ht2M
k/jFPIepDFKCtFUGnO3TbPhyrqAOWRX+lnNITYdkkRX6vZAvTmEb9OpJW8fRhUxF
6Q/gUnUIkAbKWR/9H9qnqXz+z2hyqFbdt2ww1EIo9etzLQHZBOzezcjjkGMkFnfT
TcweUD2+UMlibalgB+KDvr2akoOnqXgqEFB345bZW44h9NzFqv7yQyyHSqd+nMDg
lQwWH/hBQEXIZJTJY7uxi8SzUY8R5LpFViFmJDWoCgLJnn+7k14pO/gueUIgwzuu
FyX98Zry8khxeT0X2zC9PqVNzEpoQa7Y6HeLMWETIDZ7sbVXHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGb7FaNa8Y3E5v053kpdWzDgczcqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMjljZjViZmYtOTFlNC0z
Y2Y3LWFkOTYtMjJkYzFjMmZjZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVNmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCNcPz8goyCPyeXE/F4JSouW8qMxYZwPqZc248ary16kbSNX+ow36mh
BT3MgKaRyNt8cmest+HxPIkWAlT0vjuOSpnK0LTNYV1JxZ3nX60jcIRA/w08OKEA
DYa07+bluoO0/+OVArJC6o/5s7EBtg6DxunjlpjGuJgj5YGbJ/KVRJ/AmGK1MrVB
idZuQ+3WifD1dkrOu2UVsMANTEhqna5pbG+rp4vwgeOpcifwUnIveWN4yKK551w3
QrhxtC9YV/GSFjottXYBcP3iskPC9WuHDS1SDLVgAi1lCbEGsAiZkI2alMNPVM87
vjVZcFPN56buSy25KPHZsE+bCNGDbeM=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:30 2025 by rpki-client on console.sobornost.net