Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa
File: e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa (raw, json)
Hash identifier: qu1NfdigXX55pcpEDA4JAtwvD5WM1wAXEsdEoPgjgAY=
Subject key identifier: 0F:36:01:89:CD:3D:7B:B0:C3:7E:82:96:D8:50:7F:19:31:8D:34:98
Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial: 010D0C9F432858497DA4718EC85D25B34A3611B8
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 16509
IP address blocks: 208.64.80.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a4:71:8e:c8:5d:25:b3:4a:36:11:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=f4090a06-0132-42f3-ad22-f2e98699a382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ee:2b:02:96:ca:47:8c:5e:44:ad:1f:5e:8c:
5a:18:96:f0:e7:60:e3:47:f4:e7:d4:a0:ec:9e:1b:
7c:4f:ef:50:e8:5d:9b:56:ab:d9:5e:90:b1:50:00:
ee:90:20:6d:de:35:20:a7:fc:7e:28:13:21:ce:78:
b9:7d:e7:be:f5:5f:8d:a8:26:ae:a8:0d:30:7f:d3:
a0:5d:f6:d3:b5:15:ad:8e:b3:14:f4:97:4b:62:b3:
c4:f2:38:0e:24:11:26:d5:10:09:b8:0c:e7:ad:12:
47:42:ca:05:a6:66:59:23:91:30:7e:23:45:d5:37:
bb:27:e8:90:22:e1:e1:49:0f:1f:17:45:1b:ea:07:
9a:d3:7c:74:fc:87:13:4e:11:a7:59:37:9f:3e:e0:
96:d3:86:a8:48:82:da:b8:b0:34:10:2e:91:49:06:
66:f1:7a:74:9f:a9:4e:8e:6a:73:05:26:14:71:75:
bb:3d:df:25:cb:b6:bb:0b:96:e3:4f:94:8d:f1:08:
a5:be:0e:2d:a9:82:65:9c:06:91:87:2d:48:66:5e:
5d:dd:dc:99:af:f5:59:ea:4f:b5:77:b2:fe:92:e5:
00:89:87:bb:fb:15:25:18:62:53:30:34:9a:94:e1:
2b:e7:76:39:bd:bf:3d:69:61:0a:8c:9d:ed:0d:7b:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:01:89:CD:3D:7B:B0:C3:7E:82:96:D8:50:7F:19:31:8D:34:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
X509v3 Authority Key Identifier:
keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
sbgp-ipAddrBlock: critical
IPv4:
208.64.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:70:e7:8a:2c:d8:25:d6:0d:fa:d5:78:f5:92:98:5c:cd:6c:
33:0a:f8:0f:24:80:c0:33:35:73:46:0f:0a:28:33:1c:93:24:
74:c3:ea:be:02:f1:f7:1d:8e:d1:f5:47:fd:ae:e7:9a:86:a2:
4b:00:a3:1b:82:9c:3c:fd:01:be:bd:c4:72:9a:f2:a5:bc:3d:
36:9a:5a:64:c3:be:06:77:9c:ee:cd:07:d2:3d:55:36:0f:da:
66:97:0d:c6:8c:01:63:a6:16:b3:bd:9c:d3:ab:9c:d1:17:3b:
c6:11:ac:78:d5:8a:e7:fc:9d:ad:a0:27:50:1a:d0:b7:d1:3b:
4f:42:3d:80:7f:37:45:2e:15:b8:99:5b:20:53:5b:4d:a2:21:
0d:b9:a5:47:63:bb:3b:e4:99:fa:17:07:89:8e:f2:56:21:18:
66:5a:d4:96:35:de:89:c2:2b:5f:4b:5c:ad:5b:8b:f7:ba:4e:
72:6f:55:9b:31:18:c3:d8:23:6c:a8:f2:16:60:03:a8:96:1f:
fd:fc:0f:99:f3:f9:a5:a6:51:9d:8f:1b:a8:9b:54:6f:8b:b4:
08:3e:b8:f6:e6:a9:a1:12:1a:1b:0f:61:49:94:8c:a5:09:2f:
97:ea:c3:18:ad:b9:4a:6e:dd:fa:f2:3c:09:d7:24:09:d5:4d:
b0:fa:d2:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHGOyF0ls0o2EbgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl
MDYxMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjQwOTBhMDYtMDEzMi00MmYzLWFkMjItZjJlOTg2OTlhMzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu4rApbKR4xeRK0fXoxaGJbw52DjR/Tn1KDs
nht8T+9Q6F2bVqvZXpCxUADukCBt3jUgp/x+KBMhzni5fee+9V+NqCauqA0wf9Og
XfbTtRWtjrMU9JdLYrPE8jgOJBEm1RAJuAznrRJHQsoFpmZZI5EwfiNF1Te7J+iQ
IuHhSQ8fF0Ub6gea03x0/IcTThGnWTefPuCW04aoSILauLA0EC6RSQZm8Xp0n6lO
jmpzBSYUcXW7Pd8ly7a7C5bjT5SN8Qilvg4tqYJlnAaRhy1IZl5d3dyZr/VZ6k+1
d7L+kuUAiYe7+xUlGGJTMDSalOEr53Y5vb89aWEKjJ3tDXvzDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA82AYnNPXuww36ClthQfxkxjTSYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3
YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvZTIwODUxMGUtOTE5Yi0z
YWNjLWEwMmEtOWU2Y2M5YmE1YWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh
NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw
ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk
ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxw54os2CXWDfrVePWSmFzNbDMK+A8kgMAzNXNGDwooMxyTJHTD6r4C
8fcdjtH1R/2u55qGoksAoxuCnDz9Ab69xHKa8qW8PTaaWmTDvgZ3nO7NB9I9VTYP
2maXDcaMAWOmFrO9nNOrnNEXO8YRrHjViuf8na2gJ1Aa0LfRO09CPYB/N0UuFbiZ
WyBTW02iIQ25pUdjuzvkmfoXB4mO8lYhGGZa1JY13onCK19LXK1bi/e6TnJvVZsx
GMPYI2yo8hZgA6iWH/38D5nz+aWmUZ2PG6ibVG+LtAg+uPbmqaESGhsPYUmUjKUJ
L5fqwxituUpu3fryPAnXJAnVTbD60jo=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:27 2025 by rpki-client on console.sobornost.net