Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa
File: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (raw, json)
Hash identifier: Q+i9RcGItOWyML/3lE21fDh3+gtkLiLCbpfkyYAq6Gc=
Subject key identifier: D3:05:4F:30:9B:DE:F9:DA:72:37:93:02:F1:04:AB:99:59:DA:0A:F6
Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711
Certificate serial: 010D0C9F43285848A830A7E832343B06C12B21E0
Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 11377
IP address blocks: 223.165.113.0/24 maxlen: 24
223.165.115.0/24 maxlen: 24
223.165.118.0/24 maxlen: 24
223.165.119.0/24 maxlen: 24
223.165.120.0/24 maxlen: 24
223.165.121.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:a7:e8:32:34:3b:06:c1:2b:21:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=48b2e19f-4d31-47ca-b7d3-549289939ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:e4:2b:19:77:dd:f8:84:d8:63:af:fb:18:
10:60:47:6a:b7:b8:ee:fe:bb:88:95:8c:46:b9:1e:
9c:4e:aa:84:2c:f8:fc:ca:93:35:1c:50:d0:95:c7:
bf:1e:20:06:6e:15:64:d4:c0:3b:43:90:b2:9f:e3:
f3:aa:f4:a5:06:50:e4:df:c6:5a:97:3b:07:39:c5:
c6:c3:34:fe:25:6c:c9:6c:5e:07:7d:c3:6d:f5:b2:
a9:6e:45:b3:bc:0d:64:d0:7d:82:bb:d6:e9:3d:8b:
5b:13:40:98:44:38:f0:c9:47:6a:21:08:3d:0b:1a:
2b:90:5b:1c:1a:64:d3:a0:b8:64:df:3a:6a:4d:70:
a4:21:cd:6c:7c:b9:6b:7a:8f:6f:f5:d4:7a:8c:08:
ff:6d:1a:14:0f:3f:93:ba:f0:16:42:e6:28:37:55:
30:12:2b:b7:36:e5:1c:2e:f7:d9:58:8f:c3:8e:7c:
39:27:f5:d5:da:d3:4e:83:1f:09:13:d1:42:4a:27:
f1:2f:0c:22:92:c7:ff:4a:38:25:6e:18:b0:f9:0c:
4c:94:ec:55:fb:1c:49:1c:34:2c:3a:b4:39:23:32:
40:82:cd:5d:ff:be:35:d6:c4:54:02:f1:2d:51:61:
02:0d:49:b3:33:33:9e:14:ca:ae:b9:e9:b2:7e:f6:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:05:4F:30:9B:DE:F9:DA:72:37:93:02:F1:04:AB:99:59:DA:0A:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl
X509v3 Authority Key Identifier:
keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer
sbgp-ipAddrBlock: critical
IPv4:
223.165.113.0/24
223.165.115.0/24
223.165.118.0-223.165.121.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:52:b9:d2:5c:3b:1d:e5:dc:bb:49:6d:e0:18:11:1a:f0:2a:
a5:d2:42:fa:fb:e7:3e:b2:df:3c:20:29:cf:d2:2a:2f:84:2b:
be:7d:7e:f5:b1:14:c4:7a:66:3f:b0:f2:3b:13:2a:05:b3:4e:
c1:76:bb:3f:df:36:f6:0a:01:8d:90:b7:22:4f:0e:0f:e4:c2:
e4:3f:ba:36:a1:3c:7f:31:2d:00:ee:1e:ca:0e:c8:fb:b8:bd:
fc:02:8c:2d:46:02:38:a9:23:38:12:92:f9:9f:3f:30:80:08:
04:b5:5b:d4:5a:cc:7f:ca:5d:78:90:ce:45:83:77:55:6c:ed:
9c:16:26:64:b3:1d:d1:1e:87:27:18:6b:f1:32:0b:48:ac:fd:
3f:fe:58:74:ea:6b:fa:f0:76:65:ee:93:d3:6a:5e:44:48:6c:
f8:f0:34:af:54:bb:f5:a1:c0:6f:0c:09:f9:8d:4b:48:d7:52:
cd:29:a4:d9:f7:db:0a:ab:39:e0:3d:d6:aa:86:14:25:ba:19:
95:35:e6:70:dd:e5:6d:03:b5:e4:81:6b:57:86:4b:60:f4:ee:
da:99:19:fc:6f:17:1e:ce:0b:91:28:8c:f8:62:d1:20:5d:de:
87:ff:d0:1c:49:3b:fa:f3:1b:20:c6:4b:5e:86:70:bd:21:2b:
3f:da:2b:1b
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEioMKfoMjQ7BsErIeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz
NzExMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
NDhiMmUxOWYtNGQzMS00N2NhLWI3ZDMtNTQ5Mjg5OTM5ZWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcDkKxl33fiE2GOv+xgQYEdqt7ju/ruIlYxG
uR6cTqqELPj8ypM1HFDQlce/HiAGbhVk1MA7Q5Cyn+PzqvSlBlDk38ZalzsHOcXG
wzT+JWzJbF4HfcNt9bKpbkWzvA1k0H2Cu9bpPYtbE0CYRDjwyUdqIQg9CxorkFsc
GmTToLhk3zpqTXCkIc1sfLlreo9v9dR6jAj/bRoUDz+TuvAWQuYoN1UwEiu3NuUc
LvfZWI/Djnw5J/XV2tNOgx8JE9FCSifxLwwiksf/Sjglbhiw+QxMlOxV+xxJHDQs
OrQ5IzJAgs1d/7411sRUAvEtUWECDUmzMzOeFMquuemyfvZo0QIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFNMFTzCb3vnacjeTAvEEq5lZ2gr2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx
YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvNDNlYjhhZmItNGVjMC0z
YTdmLThjOWEtMmNhMmNiZmY0Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm
YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3
MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj
MDk2NzM3MTEuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQA36VxAwQA
36VzMAwDBAHfpXYDBAHfpXgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADVK50lw7HeXcu0lt4BgRGvAqpdJC
+vvnPrLfPCApz9IqL4Qrvn1+9bEUxHpmP7DyOxMqBbNOwXa7P9829goBjZC3Ik8O
D+TC5D+6NqE8fzEtAO4eyg7I+7i9/AKMLUYCOKkjOBKS+Z8/MIAIBLVb1FrMf8pd
eJDORYN3VWztnBYmZLMd0R6HJxhr8TILSKz9P/5YdOpr+vB2Ze6T02peREhs+PA0
r1S79aHAbwwJ+Y1LSNdSzSmk2ffbCqs54D3WqoYUJboZlTXmcN3lbQO15IFrV4ZL
YPTu2pkZ/G8XHs4LkSiM+GLRIF3eh//QHEk7+vMbIMZLXoZwvSErP9orGw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:25 2025 by rpki-client on console.sobornost.net