Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa
File: 853db1af-0c14-3537-afa6-b2429c1a8793.roa (raw, json)
Hash identifier: h0vQEGCJlj5Uff5P29poO3Lk401AyHq1dwkQMZ5V++Q=
Subject key identifier: 2E:64:8F:DC:7F:17:5E:EC:B8:12:68:32:3E:49:5D:A5:69:DB:18:79
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F4328584976A992393908AD5401DD49E0
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 3738
IP address blocks: 192.250.151.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:92:39:39:08:ad:54:01:dd:49:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=57f5edfd-15ac-4f93-aaa9-2426b987e296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9d:63:27:7e:53:08:c0:25:16:87:05:00:a2:
dd:1a:63:e5:d2:a2:a7:3a:85:ae:cb:5c:f3:6e:a0:
04:c0:59:0c:21:4b:b8:5e:1b:b8:41:41:d4:98:5f:
71:ae:26:ef:ea:ab:6c:39:4e:e5:e6:d3:64:6f:90:
7d:bf:1c:29:87:6c:0b:e9:01:41:a7:d9:47:44:f7:
69:82:ee:a3:5a:bf:2c:67:1e:86:88:e4:ef:46:44:
20:f0:8f:c8:73:38:fc:97:5e:e5:da:ce:76:19:a3:
e1:5c:ba:01:4b:9f:23:49:ee:ba:23:6b:8c:e1:c8:
2e:e7:35:cc:cc:f4:4a:51:36:f1:14:a0:fe:c8:3d:
5c:61:3b:7c:7a:e1:ba:f1:e0:2a:c4:be:b2:7d:6d:
95:83:fd:ae:04:13:15:13:cc:84:d0:98:41:97:5d:
bc:9e:9e:2c:e2:4a:d0:d7:7b:0e:2e:d9:3c:e8:16:
8b:55:7f:73:d3:f0:7f:e8:e1:7a:c7:37:73:bf:bf:
a0:8c:0d:da:f9:61:6d:fe:3f:8d:35:38:08:53:6e:
e5:68:8b:53:3b:0a:0a:1c:a2:13:5d:73:a4:52:6d:
e1:19:96:90:c3:77:23:3d:12:41:ce:64:7e:7a:b0:
2a:d4:b4:18:c8:77:30:a4:c1:bb:94:22:2b:07:0b:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:64:8F:DC:7F:17:5E:EC:B8:12:68:32:3E:49:5D:A5:69:DB:18:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:ff:76:01:20:ba:fd:7f:27:55:c3:88:5d:54:23:f0:91:8e:
c9:17:86:ed:09:2f:d0:57:a8:05:16:b7:56:72:4f:23:83:e3:
1f:ca:a8:16:53:02:2f:b6:18:f8:34:9e:b4:9a:4d:1c:fb:49:
0d:74:19:b8:56:d6:2e:21:0d:90:74:3f:bf:c3:b8:0b:2d:a0:
95:51:1e:04:c1:13:11:8b:de:e1:93:6e:8f:27:52:d4:2a:e9:
dc:e1:00:26:72:d1:85:b9:3f:d1:68:26:8f:26:8e:81:d3:b9:
02:b9:f4:91:28:8c:33:bd:b5:96:bc:2e:aa:9a:0b:e5:b6:10:
a8:31:2a:70:22:b7:af:24:6b:dd:39:1f:59:31:57:14:bc:75:
47:1f:4f:fc:1c:f7:1b:bf:fa:05:e5:ba:28:46:aa:17:e9:48:
cc:a4:09:45:bb:6b:d2:13:72:29:ad:5f:b6:5f:d3:eb:a6:e7:
5c:3d:ff:3d:22:0e:1d:0f:d9:91:43:b9:54:16:7d:6a:51:7f:
74:42:01:fd:16:ca:83:4f:f6:b0:da:07:f1:6a:7a:95:6c:55:
8c:a5:4e:1a:e1:a6:b8:3f:8e:78:f4:69:78:1f:fb:75:cf:c5:
fd:3b:57:aa:50:88:ba:bb:b2:98:01:e3:c9:f0:27:e9:91:30:
8d:48:3e:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qZI5OQitVAHdSeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl
YzAwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
NTdmNWVkZmQtMTVhYy00ZjkzLWFhYTktMjQyNmI5ODdlMjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7p1jJ35TCMAlFocFAKLdGmPl0qKnOoWuy1zz
bqAEwFkMIUu4Xhu4QUHUmF9xribv6qtsOU7l5tNkb5B9vxwph2wL6QFBp9lHRPdp
gu6jWr8sZx6GiOTvRkQg8I/Iczj8l17l2s52GaPhXLoBS58jSe66I2uM4cgu5zXM
zPRKUTbxFKD+yD1cYTt8euG68eAqxL6yfW2Vg/2uBBMVE8yE0JhBl128np4s4krQ
13sOLtk86BaLVX9z0/B/6OF6xzdzv7+gjA3a+WFt/j+NNTgIU27laItTOwoKHKIT
XXOkUm3hGZaQw3cjPRJBzmR+erAq1LQYyHcwpMG7lCIrBwt3RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5kj9x/F17suBJoMj5JXaVp2xh5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj
MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODUzZGIxYWYtMGMxNC0z
NTM3LWFmYTYtYjI0MjljMWE4NzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk
NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4
ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1
NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHf/dgEguv1/J1XDiF1UI/CRjskXhu0JL9BXqAUWt1ZyTyOD4x/KqBZT
Ai+2GPg0nrSaTRz7SQ10GbhW1i4hDZB0P7/DuAstoJVRHgTBExGL3uGTbo8nUtQq
6dzhACZy0YW5P9FoJo8mjoHTuQK59JEojDO9tZa8LqqaC+W2EKgxKnAit68ka905
H1kxVxS8dUcfT/wc9xu/+gXluihGqhfpSMykCUW7a9ITcimtX7Zf0+um51w9/z0i
Dh0P2ZFDuVQWfWpRf3RCAf0WyoNP9rDaB/FqepVsVYylThrhprg/jnj0aXgf+3XP
xf07V6pQiLq7spgB48nwJ+mRMI1IPjI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net