Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa
File: 0d31c566-d234-3f99-8c25-5aa651e59579.roa (raw, json)
Hash identifier: FyrQODNrEMxz2mGxpjf02zeN/2Y2dJcNKdSl8xLmoXc=
Subject key identifier: EB:03:DF:C4:C8:4D:06:C8:65:81:CD:37:33:B7:15:9B:F9:FB:68:70
Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial: 010D0C9F4328584973DEE9963A3AEAF8466B7B80
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa
Signing time: Tue 08 Apr 2025 01:00:47 +0000
ROA not before: Tue 08 Apr 2025 01:00:47 +0000
ROA not after: Mon 07 Jul 2025 01:00:47 +0000
asID: 40342
IP address blocks: 199.47.138.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:73:de:e9:96:3a:3a:ea:f8:46:6b:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Validity
Not Before: Apr 8 01:00:47 2025 GMT
Not After : Jul 7 01:00:47 2025 GMT
Subject: CN=a569e79c-f1f3-487e-9dc4-966ddfa5c009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:bc:d5:0c:24:78:ff:90:65:72:72:b3:13:
dd:f8:f2:05:68:18:78:3e:d6:6e:32:77:8e:8b:4d:
65:09:77:38:2e:b3:2f:0d:57:b2:da:f4:70:76:28:
2c:e0:39:af:0e:c2:e4:ac:b7:4d:02:9b:ae:9d:3a:
50:c3:86:20:56:17:02:af:99:b7:75:11:a8:42:68:
35:8a:bc:8d:56:3e:b5:0b:28:e3:06:7d:35:38:66:
87:ef:8c:1b:a3:14:61:7c:b7:e9:ff:64:ed:28:a9:
c9:9c:33:ec:4e:de:e4:95:70:3c:3c:e1:c5:50:83:
02:58:89:b7:da:d1:3f:b2:75:9c:b9:78:da:88:6f:
9e:10:da:09:76:6c:69:c9:6f:df:d9:d2:a2:bf:25:
5b:64:91:09:ae:57:66:f9:0d:1b:42:ca:9f:f3:e4:
a6:ac:c0:3d:28:20:67:e3:3f:4f:20:ae:cc:f1:4d:
cc:2a:09:62:17:57:be:0b:f1:10:11:f7:93:d2:25:
65:9c:e2:3c:44:15:70:db:63:95:12:00:e3:5e:ee:
db:aa:dc:0e:4c:2c:11:4f:b1:12:6e:af:e2:74:d1:
44:53:e7:d1:b9:97:ff:5b:53:0e:f7:8e:e5:cd:67:
0c:41:96:e8:fc:35:b7:5d:74:31:a6:d8:3d:47:29:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:DF:C4:C8:4D:06:C8:65:81:CD:37:33:B7:15:9B:F9:FB:68:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
X509v3 Authority Key Identifier:
keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:f3:cd:7f:fe:41:c8:61:6e:34:f3:ea:77:56:41:17:a8:8e:
10:c4:f4:6c:02:64:31:da:60:19:00:10:a9:f9:8d:cb:c7:9e:
12:fa:d8:22:37:38:23:f7:7b:be:e4:ea:35:31:fb:91:23:95:
47:55:61:49:c0:b1:4f:41:f4:eb:f7:f2:c9:08:b6:6a:c7:69:
1f:47:13:c9:46:22:ab:67:a6:33:47:11:54:3d:87:1e:9e:38:
88:eb:ed:92:e1:5c:fc:1c:fb:e2:95:86:6d:b6:ed:87:ac:c6:
4e:c3:05:8b:af:c1:a0:58:28:e1:a0:17:4f:b6:8e:53:6d:8e:
52:51:dd:44:de:2e:fc:4a:0e:04:d9:6a:c1:a9:67:ae:aa:29:
14:74:8d:e1:f1:b8:2c:12:04:45:6e:80:88:b3:8e:87:3f:c1:
b8:66:4a:1f:18:06:48:0b:a7:12:91:aa:3a:00:c5:a6:b6:ba:
f5:80:06:76:63:90:06:6d:6f:59:3f:b6:14:89:ce:5c:54:22:
58:a3:23:47:6c:fd:c5:60:37:22:a3:c0:91:73:a9:1a:72:fc:
9a:3d:21:84:32:c5:5f:a7:6e:a6:ea:56:93:42:4e:0f:86:1a:
2b:be:93:96:f8:20:af:b2:e4:bd:b0:bb:25:66:55:a8:28:58:
93:80:86:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3umWOjrq+EZre4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1
ODJhMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
YTU2OWU3OWMtZjFmMy00ODdlLTlkYzQtOTY2ZGRmYTVjMDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsC81QwkeP+QZXJysxPd+PIFaBh4PtZuMneO
i01lCXc4LrMvDVey2vRwdigs4DmvDsLkrLdNApuunTpQw4YgVhcCr5m3dRGoQmg1
iryNVj61CyjjBn01OGaH74wboxRhfLfp/2TtKKnJnDPsTt7klXA8POHFUIMCWIm3
2tE/snWcuXjaiG+eENoJdmxpyW/f2dKivyVbZJEJrldm+Q0bQsqf8+SmrMA9KCBn
4z9PIK7M8U3MKgliF1e+C/EQEfeT0iVlnOI8RBVw22OVEgDjXu7bqtwOTCwRT7ES
bq/idNFEU+fRuZf/W1MO947lzWcMQZbo/DW3XXQxptg9RylnEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsD38TITQbIZYHNNzO3FZv5+2hwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi
ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMGQzMWM1NjYtZDIzNC0z
Zjk5LThjMjUtNWFhNjUxZTU5NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm
NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh
NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx
ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy+KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/zzX/+QchhbjTz6ndWQReojhDE9GwCZDHaYBkAEKn5jcvHnhL62CI3
OCP3e77k6jUx+5EjlUdVYUnAsU9B9Ov38skItmrHaR9HE8lGIqtnpjNHEVQ9hx6e
OIjr7ZLhXPwc++KVhm227Yesxk7DBYuvwaBYKOGgF0+2jlNtjlJR3UTeLvxKDgTZ
asGpZ66qKRR0jeHxuCwSBEVugIizjoc/wbhmSh8YBkgLpxKRqjoAxaa2uvWABnZj
kAZtb1k/thSJzlxUIlijI0ds/cVgNyKjwJFzqRpy/Jo9IYQyxV+nbqbqVpNCTg+G
Giu+k5b4IK+y5L2wuyVmVagoWJOAhvY=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net