Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa
File: 2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa (raw, json)
Hash identifier: xn2TjZfvmNj5qYJp7RpmQxa6kPhzoRHx0v6H/zFIUEA=
Subject key identifier: BE:77:6F:0A:80:25:A8:8C:7D:7F:BC:9D:5E:E4:7E:B6:90:6A:25:F8
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858496FAF05CC09CF72B476AB1180
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 19437
IP address blocks: 131.153.239.0/24 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:05:cc:09:cf:72:b4:76:ab:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=037d449e-78fc-4cbe-bf82-e930f9e11582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:0f:f4:d2:3b:c9:7a:25:bf:74:26:d2:84:
b5:8f:ed:2e:ef:11:f9:85:c9:06:c8:b0:56:f6:7e:
6f:d6:f3:99:1e:27:39:b6:8e:63:a6:83:77:0f:0a:
bf:b2:ae:81:ef:e5:de:2a:60:2f:3b:d7:42:b8:48:
e0:e8:48:f9:91:b8:f2:94:e6:59:e2:ed:d6:49:4f:
e0:f8:41:1a:b3:ff:d3:b9:f4:18:b8:33:b1:31:45:
6b:dc:2c:be:6a:db:e8:f4:13:46:c3:cd:de:3e:a2:
8e:14:af:eb:e5:b9:71:da:96:05:13:53:64:7f:22:
ea:1d:b7:0a:39:bd:3b:d7:a5:c4:77:bf:13:ca:17:
f9:9b:1a:9e:f3:02:36:c0:f4:5d:73:b7:66:f1:8c:
34:7e:b9:10:16:21:f5:8d:24:d3:b5:d3:f5:58:e8:
8a:75:1e:20:a6:0c:c1:77:e7:97:91:38:02:4f:d3:
52:c0:b5:75:14:dc:4f:50:40:73:e8:e5:51:06:ee:
58:3f:64:6e:db:6e:90:c8:bc:c7:61:5a:ad:6f:b8:
6a:fa:2a:85:28:08:a0:79:42:ac:fc:5a:ce:84:3c:
43:f1:0d:cd:cd:69:3e:16:e5:83:7d:5b:c1:8b:fc:
2f:7b:e7:1a:7a:11:3d:67:13:36:75:5c:ac:f0:0a:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:6F:0A:80:25:A8:8C:7D:7F:BC:9D:5E:E4:7E:B6:90:6A:25:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:2f:9c:0c:15:60:33:d7:34:42:f5:00:66:38:a4:f5:f4:a9:
8b:2a:bb:84:7b:05:37:3b:be:33:20:46:1e:83:c3:56:60:15:
6e:f2:56:c8:8a:c5:23:5d:03:cc:cf:0e:10:2c:f2:09:25:da:
4f:14:7f:cf:bc:0d:66:27:03:a3:83:03:55:0c:5d:c7:3b:b7:
f8:18:e2:c9:38:e0:7b:ff:69:23:e4:48:4c:02:2a:8a:78:4f:
92:2a:e9:10:3a:40:2b:d7:59:4d:a8:0b:a0:bf:0b:bc:3a:4e:
3d:3c:49:0d:3b:95:ae:7a:12:26:91:8c:55:87:1c:22:86:03:
99:b3:66:87:86:c7:c8:40:f9:25:b8:7b:09:62:2e:12:80:f3:
60:0e:35:14:ad:15:2f:96:f7:46:ad:32:61:17:6e:0a:ea:74:
7e:ff:08:1f:e6:d0:0d:72:f6:57:c2:fe:ba:5d:86:83:6a:a6:
fb:9c:3d:64:dd:ac:4c:bd:72:df:60:72:b1:53:4a:e1:1e:a3:
8f:30:8c:9c:d0:74:08:02:77:fb:25:cd:58:26:ed:85:80:70:
06:4e:a5:c2:de:44:78:f6:8b:96:96:73:6a:ad:39:5e:d9:7c:
1e:3c:76:70:a8:98:ca:ee:45:44:78:1d:b1:2f:44:e5:67:86:
4c:ae:e5:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrwXMCc9ytHarEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
MDM3ZDQ0OWUtNzhmYy00Y2JlLWJmODItZTkzMGY5ZTExNTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZsP9NI7yXolv3Qm0oS1j+0u7xH5hckGyLBW
9n5v1vOZHic5to5jpoN3Dwq/sq6B7+XeKmAvO9dCuEjg6Ej5kbjylOZZ4u3WSU/g
+EEas//TufQYuDOxMUVr3Cy+atvo9BNGw83ePqKOFK/r5blx2pYFE1NkfyLqHbcK
Ob0716XEd78Tyhf5mxqe8wI2wPRdc7dm8Yw0frkQFiH1jSTTtdP1WOiKdR4gpgzB
d+eXkTgCT9NSwLV1FNxPUEBz6OVRBu5YP2Ru226QyLzHYVqtb7hq+iqFKAigeUKs
/FrOhDxD8Q3NzWk+FuWDfVvBi/wve+caehE9ZxM2dVys8ArDiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL53bwqAJaiMfX+8nV7kfraQaiX4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMmIzZGVkOTgtNTRhMi0z
YWZmLWExYjQtMTlkY2YxMGVmZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEvnAwVYDPXNEL1AGY4pPX0qYsqu4R7BTc7vjMgRh6Dw1ZgFW7yVsiK
xSNdA8zPDhAs8gkl2k8Uf8+8DWYnA6ODA1UMXcc7t/gY4sk44Hv/aSPkSEwCKop4
T5Iq6RA6QCvXWU2oC6C/C7w6Tj08SQ07la56EiaRjFWHHCKGA5mzZoeGx8hA+SW4
ewliLhKA82AONRStFS+W90atMmEXbgrqdH7/CB/m0A1y9lfC/rpdhoNqpvucPWTd
rEy9ct9gcrFTSuEeo48wjJzQdAgCd/slzVgm7YWAcAZOpcLeRHj2i5aWc2qtOV7Z
fB48dnComMruRUR4HbEvROVnhkyu5XE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:26 2025 by rpki-client on console.sobornost.net