Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa
File: cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa (raw, json)
Hash identifier: z0NP1D6HBUCxcoHknuvwxAjj5YnTqWKy81k4vT3WANQ=
Subject key identifier: 33:6D:66:33:A1:25:24:2E:8C:4B:2A:F5:0F:1F:BB:0F:74:E1:63:1A
Certificate issuer: /CN=ef573c37-3920-4b85-b5ca-50707eefe4b3
Certificate serial: 010D0C9F432858498339F49DA69D662D19745A80
Authority key identifier: AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 25617
IP address blocks: 204.9.32.0/24 maxlen: 24
204.9.33.0/24 maxlen: 24
204.9.34.0/24 maxlen: 24
204.9.35.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:f4:9d:a6:9d:66:2d:19:74:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef573c37-3920-4b85-b5ca-50707eefe4b3
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=e09eeb85-3b13-4dbf-b4a5-ba54d1ce0386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:a3:5a:15:15:d2:5f:e4:e7:f6:a5:a0:c0:
b5:f8:13:68:66:c8:68:88:34:e2:58:4f:3b:6d:15:
29:d5:7b:a3:77:f7:d1:cc:dd:8b:f6:c9:1c:24:b5:
48:9f:f6:b4:91:22:21:61:dc:4b:b7:5d:78:d6:6d:
87:52:83:f8:5b:d8:e4:84:a3:10:25:95:a6:a7:91:
de:3d:cb:c1:ee:fb:48:8a:93:9a:c3:8d:96:6a:51:
72:57:7c:e9:2d:e2:77:74:f8:e4:7f:38:cd:05:85:
ea:10:74:ef:1c:24:0f:f5:73:c2:0f:85:71:e0:b1:
fb:bc:f4:f3:c5:fd:66:19:d1:23:e7:c4:6b:7e:44:
e3:0e:ef:eb:71:48:5e:44:ed:8a:2f:94:d8:d0:e1:
ee:de:3c:4d:aa:35:90:e6:13:bc:7a:6f:b6:65:37:
80:20:10:6c:7e:e4:b7:10:03:5d:f0:6a:c2:14:ef:
44:63:81:94:5a:fd:4f:e1:0d:f5:ab:88:41:d0:c6:
07:f1:df:0f:c1:81:e4:6b:49:2b:60:0d:57:82:80:
9a:16:0f:86:b3:3b:51:d3:b7:01:fa:a0:cf:20:71:
40:a1:ea:70:1c:03:19:8c:bf:e8:f9:cb:c4:ff:2f:
53:76:f8:63:68:c3:77:ea:63:6b:d6:5a:78:18:45:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6D:66:33:A1:25:24:2E:8C:4B:2A:F5:0F:1F:BB:0F:74:E1:63:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl
X509v3 Authority Key Identifier:
keyid:AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.9.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:92:d2:97:fd:ad:ff:af:b7:45:e9:53:dc:f9:f9:ae:84:f3:
75:f8:c5:fc:a8:3d:aa:99:01:57:14:d1:cf:cc:0c:c9:a2:13:
10:f5:9c:99:0f:b0:86:85:96:25:21:bf:5d:13:20:1f:01:4f:
bf:f3:a3:74:af:4b:9a:7e:ff:d7:1b:b6:a5:04:6c:30:9b:f0:
56:74:bd:19:df:34:4f:59:13:53:75:16:79:bd:84:16:9c:f8:
6b:1a:e8:be:8b:14:19:3a:81:5d:0f:d8:4b:4b:64:4a:22:3e:
f0:dc:ed:cf:f5:50:f8:36:d0:de:b8:84:7e:4d:f0:de:c2:f0:
d8:96:49:f7:f4:09:a7:3c:e3:2c:f9:c5:00:b1:b9:fa:6f:87:
b1:7c:d4:32:f3:be:e2:90:62:02:79:0e:60:31:77:21:03:45:
99:f6:59:67:d8:ed:50:12:82:10:b4:1f:20:92:c5:91:b4:bb:
c0:a3:a9:25:5c:cd:8d:8c:c5:52:e8:a1:69:dd:19:71:9c:be:
36:f8:40:c7:39:e1:34:91:10:14:08:80:a5:5d:08:ea:6b:13:
7d:ee:b6:87:2a:25:26:6b:6a:39:38:bf:0a:8b:9c:8e:b9:ec:
62:b1:38:3f:7a:60:bc:e9:72:25:be:7c:1d:40:56:5a:00:b3:
b7:ce:9c:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfSdpp1mLRl0WoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY1NzNjMzctMzkyMC00Yjg1LWI1Y2EtNTA3MDdlZWZl
NGIzMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
ZTA5ZWViODUtM2IxMy00ZGJmLWI0YTUtYmE1NGQxY2UwMzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6jWhUV0l/k5/aloMC1+BNoZshoiDTiWE87
bRUp1Xujd/fRzN2L9skcJLVIn/a0kSIhYdxLt1141m2HUoP4W9jkhKMQJZWmp5He
PcvB7vtIipOaw42WalFyV3zpLeJ3dPjkfzjNBYXqEHTvHCQP9XPCD4Vx4LH7vPTz
xf1mGdEj58RrfkTjDu/rcUheRO2KL5TY0OHu3jxNqjWQ5hO8em+2ZTeAIBBsfuS3
EANd8GrCFO9EY4GUWv1P4Q31q4hB0MYH8d8PwYHka0krYA1XgoCaFg+GsztR07cB
+qDPIHFAoepwHAMZjL/o+cvE/y9TdvhjaMN36mNr1lp4GEWJxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNtZjOhJSQujEsq9Q8fuw904WMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3
M2MzNy0zOTIwLTRiODUtYjVjYS01MDcwN2VlZmU0YjMvY2JmODQ5NDktNWE0MS0z
YWFiLWI2ZjktZjk2YjU5NmRkM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWY1NzNjMzctMzkyMC00Yjg1LWI1
Y2EtNTA3MDdlZWZlNGIzL2VmNTczYzM3LTM5MjAtNGI4NS1iNWNhLTUwNzA3ZWVm
ZTRiMy5jcmwwHwYDVR0jBBgwFoAUqlGXAopqaIABm+jS6NlGUMvdY98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3M2MzNy0zOTIwLTRiODUtYjVjYS01MDcw
N2VlZmU0YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+S0pf9rf+vt0XpU9z5+a6E83X4xfyoPaqZAVcU0c/MDMmiExD1nJkP
sIaFliUhv10TIB8BT7/zo3SvS5p+/9cbtqUEbDCb8FZ0vRnfNE9ZE1N1Fnm9hBac
+Gsa6L6LFBk6gV0P2EtLZEoiPvDc7c/1UPg20N64hH5N8N7C8NiWSff0Cac84yz5
xQCxufpvh7F81DLzvuKQYgJ5DmAxdyEDRZn2WWfY7VASghC0HyCSxZG0u8CjqSVc
zY2MxVLooWndGXGcvjb4QMc54TSREBQIgKVdCOprE33utocqJSZrajk4vwqLnI65
7GKxOD96YLzpciW+fB1AVloAs7fOnMI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net