Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa
File: 6910e57a-19e1-35c1-a202-faf2127b1fe1.roa (raw, json)
Hash identifier: Q8yE3+PLl0M+qHBaBlfRFVJF7oS+zRNu017tqgOck5Y=
Subject key identifier: 71:A5:5B:E8:B8:2C:9B:09:A4:B0:6A:7A:C2:CE:78:A0:F7:97:51:CC
Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial: 010D0C9F432858494733E5A64CDD61262D6BEF00
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 209.114.0.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:e5:a6:4c:dd:61:26:2d:6b:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=ef7bf7ef-78b6-4fb7-9e9e-31fbe584e68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:8a:78:d3:d4:d4:10:93:bb:88:54:f4:e9:
0b:42:c5:8a:76:2e:05:ac:74:e6:6b:76:72:32:a4:
f8:93:4e:c9:38:14:9b:06:28:66:1a:d1:a6:5c:f6:
85:99:99:ce:e1:d5:ff:c4:5f:84:30:cf:57:50:91:
be:ca:1b:4e:ff:f4:01:b2:9c:07:61:1e:68:2c:d0:
a6:f6:c6:e1:44:31:56:cd:f1:04:00:25:93:15:f3:
5f:19:b2:48:07:ed:89:09:ef:1c:46:86:a6:f9:0a:
27:5a:ce:ce:ea:65:02:a0:98:36:b1:63:7b:db:c4:
7b:cf:de:c4:84:2e:18:d5:33:83:a8:89:1a:b8:e9:
2a:58:85:78:f2:0e:c6:68:3a:68:4f:fb:58:1e:b9:
6f:f8:e3:d4:2b:7a:75:82:4c:f2:97:fd:0c:82:49:
43:5d:3a:fe:d6:a8:7d:f3:10:6a:de:62:82:58:e9:
4c:b0:4a:55:36:49:4b:d9:3f:98:5b:62:7b:61:8d:
ac:02:96:f7:3d:06:98:d9:fe:67:da:03:f7:01:94:
97:0b:cd:b5:59:3d:dc:04:29:f6:8b:54:b9:1d:e1:
d7:13:4f:9f:b5:42:e5:a4:54:42:1b:18:18:17:0a:
d5:66:64:b6:92:59:d3:ef:c9:97:82:31:80:6b:1b:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:5B:E8:B8:2C:9B:09:A4:B0:6A:7A:C2:CE:78:A0:F7:97:51:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
X509v3 Authority Key Identifier:
keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.114.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:56:95:81:ad:22:07:a0:9b:5c:6b:af:b5:8f:c8:6c:ef:e9:
b4:bb:bd:85:1e:88:c5:40:a0:b6:65:3c:8a:69:77:f9:06:b3:
27:87:e7:aa:33:c1:50:55:1b:18:78:8d:7d:31:6f:11:8e:89:
11:be:50:bd:b2:71:c3:6b:82:a8:26:f7:f7:8a:56:c3:c8:a2:
c3:55:c5:b0:d1:d4:41:2e:a3:8e:46:bf:2a:f4:fc:d6:37:bc:
af:41:02:99:41:0e:01:b4:6b:67:0b:da:03:ae:c2:af:89:2e:
83:8b:e5:06:74:31:ec:b6:88:0d:31:fe:6e:fa:18:6f:43:40:
a3:66:46:f7:5b:f8:34:65:4f:0e:2b:95:fb:69:02:1a:5f:e0:
30:76:0f:a0:ee:d5:71:f4:10:74:fd:c5:78:f1:2c:74:66:da:
97:b2:56:d9:7c:a3:0a:25:96:36:c8:c4:b0:9c:68:12:ed:53:
23:3b:1d:f7:85:cd:b3:0c:ab:33:79:c6:4f:25:e1:b5:93:9b:
91:7e:f5:2c:6d:ea:ad:b5:a8:05:cc:86:9f:35:34:b6:3b:fc:
0b:f8:db:ee:df:c5:20:54:4a:da:cf:46:b6:d9:e2:d0:74:29:
ff:ec:09:f0:4c:5f:e8:44:68:01:01:89:60:4b:c5:5f:70:eb:
6a:e4:ce:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+WmTN1hJi1r7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz
MjVhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZWY3YmY3ZWYtNzhiNi00ZmI3LTllOWUtMzFmYmU1ODRlNjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7KKeNPU1BCTu4hU9OkLQsWKdi4FrHTma3Zy
MqT4k07JOBSbBihmGtGmXPaFmZnO4dX/xF+EMM9XUJG+yhtO//QBspwHYR5oLNCm
9sbhRDFWzfEEACWTFfNfGbJIB+2JCe8cRoam+QonWs7O6mUCoJg2sWN728R7z97E
hC4Y1TODqIkauOkqWIV48g7GaDpoT/tYHrlv+OPUK3p1gkzyl/0MgklDXTr+1qh9
8xBq3mKCWOlMsEpVNklL2T+YW2J7YY2sApb3PQaY2f5n2gP3AZSXC821WT3cBCn2
i1S5HeHXE0+ftULlpFRCGxgYFwrVZmS2klnT78mXgjGAaxsq3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGlW+i4LJsJpLBqesLOeKD3l1HMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1
NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvNjkxMGU1N2EtMTllMS0z
NWMxLWEyMDItZmFmMjEyN2IxZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh
NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj
MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz
MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpWlYGtIgegm1xrr7WPyGzv6bS7vYUeiMVAoLZlPIppd/kGsyeH56oz
wVBVGxh4jX0xbxGOiRG+UL2yccNrgqgm9/eKVsPIosNVxbDR1EEuo45Gvyr0/NY3
vK9BAplBDgG0a2cL2gOuwq+JLoOL5QZ0Mey2iA0x/m76GG9DQKNmRvdb+DRlTw4r
lftpAhpf4DB2D6Du1XH0EHT9xXjxLHRm2peyVtl8owolljbIxLCcaBLtUyM7HfeF
zbMMqzN5xk8l4bWTm5F+9Sxt6q21qAXMhp81NLY7/Av42+7fxSBUStrPRrbZ4tB0
Kf/sCfBMX+hEaAEBiWBLxV9w62rkzmQ=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:31 2025 by rpki-client on console.sobornost.net