Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa
File: 60e73e07-f4ae-3c71-9e25-99a3e612e843.roa (raw, json)
Hash identifier: UPsFRqbVWWnIqDPbOGLIqhI3XVrLdaiXMY0vtUvgXbM=
Subject key identifier: 97:0F:BD:A3:F5:CA:FF:8C:23:D9:16:D9:37:79:91:BF:0F:3A:D0:44
Certificate issuer: /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
Certificate serial: 010D0C9F432858494733EE593E66D4556091D0A0
Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 199.233.102.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ee:59:3e:66:d4:55:60:91:d0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=d9cb2241-0115-45e5-8f54-8dd1c1915135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:99:78:60:45:d5:a9:8f:dd:8e:30:4d:72:37:
2e:e5:c6:b4:77:8a:bd:03:c0:6f:b6:f7:60:dd:ff:
b9:97:d5:d4:72:b4:b4:d0:4a:98:13:16:0e:d5:08:
01:68:99:ba:c8:ca:65:03:9b:25:dc:10:8d:65:b3:
92:f4:af:c8:1a:d5:72:ce:dc:68:26:22:72:be:c0:
a1:f8:d7:22:f3:0f:0b:c7:3f:42:99:2e:3d:f8:96:
cd:95:de:84:c8:a9:17:f4:ca:e2:d0:f4:dc:f7:18:
dd:3c:39:93:d7:af:dd:5c:46:ad:54:c8:84:c2:8e:
75:08:b0:d2:c4:ed:56:aa:5b:46:57:f8:8d:55:13:
dc:24:b7:19:64:ca:bf:88:ca:0b:43:27:b5:c7:20:
3f:ae:0c:f1:20:dd:81:34:ac:6d:70:2f:60:15:68:
1f:05:a5:2d:b0:4f:5c:f4:7d:23:18:9c:b4:4f:8f:
03:a0:49:a0:3d:25:a7:f6:45:9a:1b:de:45:38:cf:
fc:1d:d4:32:d1:47:28:2b:53:91:3e:3a:54:e1:a6:
60:f0:9a:e2:a5:a6:5e:10:20:95:7e:60:83:19:98:
0a:6f:9a:bd:96:3d:d0:bc:83:b7:52:c2:c5:ba:18:
4f:54:2c:3b:e5:ce:af:a2:16:7a:df:72:50:d5:a2:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:BD:A3:F5:CA:FF:8C:23:D9:16:D9:37:79:91:BF:0F:3A:D0:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl
X509v3 Authority Key Identifier:
keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.233.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:f2:cb:9f:61:1c:41:e7:b9:68:cd:73:62:76:fa:61:cc:22:
ab:8c:3b:f6:6a:15:74:70:cf:cb:78:c2:64:ae:81:b7:ad:67:
49:7f:84:54:ae:7b:7b:c8:5d:63:62:59:af:ed:a1:35:01:ce:
11:33:66:2d:99:68:ac:0b:da:31:4e:59:a4:af:7d:07:bb:7c:
87:dd:51:7e:02:80:e8:6b:cf:90:62:81:0e:db:50:09:36:51:
f2:04:a7:c6:92:f1:71:9f:f9:04:09:13:ac:f7:f9:11:3e:c4:
92:8d:6b:33:fb:8e:7e:1b:67:76:2d:5e:ac:e2:99:d5:f9:84:
3d:e9:14:28:a2:e6:1c:b6:3c:58:50:9c:60:8d:25:6d:ff:27:
1f:39:cc:2a:bc:91:72:cd:6d:34:82:60:e6:67:a4:08:d7:c5:
97:a9:40:8e:41:25:31:09:ca:64:62:6f:32:07:4b:ee:01:87:
41:33:b2:ad:7b:42:63:4b:d9:5c:01:df:19:7c:5e:35:2b:f0:
af:b8:ed:20:3f:9f:7f:a6:80:5a:e0:d5:e5:5a:b2:94:93:14:
30:3d:5c:8d:e5:ee:53:b6:14:11:00:ee:89:48:0a:44:90:d4:
11:d9:ec:fc:09:1f:f8:2f:45:69:48:fd:8e:a5:c0:37:b8:77:
99:4c:9d:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+5ZPmbUVWCR0KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM5MGNhOWUtNjQxMi00YmQ2LTg2MjEtZWVhZjQ0OTMw
YjFmMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZDljYjIyNDEtMDExNS00NWU1LThmNTQtOGRkMWMxOTE1MTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZl4YEXVqY/djjBNcjcu5ca0d4q9A8Bvtvdg
3f+5l9XUcrS00EqYExYO1QgBaJm6yMplA5sl3BCNZbOS9K/IGtVyztxoJiJyvsCh
+Nci8w8Lxz9CmS49+JbNld6EyKkX9Mri0PTc9xjdPDmT16/dXEatVMiEwo51CLDS
xO1WqltGV/iNVRPcJLcZZMq/iMoLQye1xyA/rgzxIN2BNKxtcC9gFWgfBaUtsE9c
9H0jGJy0T48DoEmgPSWn9kWaG95FOM/8HdQy0UcoK1ORPjpU4aZg8JripaZeECCV
fmCDGZgKb5q9lj3QvIO3UsLFuhhPVCw75c6vohZ633JQ1aIbyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJcPvaP1yv+MI9kW2Td5kb8POtBEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkw
Y2E5ZS02NDEyLTRiZDYtODYyMS1lZWFmNDQ5MzBiMWYvNjBlNzNlMDctZjRhZS0z
YzcxLTllMjUtOTlhM2U2MTJlODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmM5MGNhOWUtNjQxMi00YmQ2LTg2
MjEtZWVhZjQ0OTMwYjFmL2JjOTBjYTllLTY0MTItNGJkNi04NjIxLWVlYWY0NDkz
MGIxZi5jcmwwHwYDVR0jBBgwFoAUZ1ggbyYWDhdeFkLwk/8nyE63iWcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkwY2E5ZS02NDEyLTRiZDYtODYyMS1lZWFm
NDQ5MzBiMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+lmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFryy59hHEHnuWjNc2J2+mHMIquMO/ZqFXRwz8t4wmSugbetZ0l/hFSu
e3vIXWNiWa/toTUBzhEzZi2ZaKwL2jFOWaSvfQe7fIfdUX4CgOhrz5BigQ7bUAk2
UfIEp8aS8XGf+QQJE6z3+RE+xJKNazP7jn4bZ3YtXqzimdX5hD3pFCii5hy2PFhQ
nGCNJW3/Jx85zCq8kXLNbTSCYOZnpAjXxZepQI5BJTEJymRibzIHS+4Bh0Ezsq17
QmNL2VwB3xl8XjUr8K+47SA/n3+mgFrg1eVaspSTFDA9XI3l7lO2FBEA7olICkSQ
1BHZ7PwJH/gvRWlI/Y6lwDe4d5lMnc0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net