Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa
File: 400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa (raw, json)
Hash identifier: dzmXpvN/itRWxt/6N4qYJS0/7PzMd4fA4mjM1uA5ZTA=
Subject key identifier: 5E:6E:4C:0E:8F:0C:D7:34:E5:4E:1D:33:3B:F4:AD:3A:56:ED:AC:42
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F43285849806F22256C91403B416F9700
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa
Signing time: Sat 12 Apr 2025 13:01:01 +0000
ROA not before: Sat 12 Apr 2025 13:01:01 +0000
ROA not after: Fri 11 Jul 2025 13:01:01 +0000
asID: 63240
IP address blocks: 192.254.109.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:80:6f:22:25:6c:91:40:3b:41:6f:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Apr 12 13:01:01 2025 GMT
Not After : Jul 11 13:01:01 2025 GMT
Subject: CN=935165fe-b022-41d3-b940-90aa3bf3e90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6e:27:73:f6:53:ca:79:35:41:6c:18:6d:d1:
ee:c5:9c:54:90:3e:24:a9:37:43:96:c5:61:64:c2:
88:8e:4e:25:24:5a:1d:ad:35:57:89:33:ea:fc:b0:
11:e6:6f:a7:69:5d:eb:54:15:be:33:16:33:a1:fd:
b8:73:7a:38:f5:82:f1:97:2d:99:f8:b7:b6:b3:81:
d7:d3:65:e7:76:33:13:4f:d6:4f:b4:34:f8:65:5b:
eb:9c:cf:10:ce:cc:27:aa:a8:c5:06:e5:36:33:aa:
47:b3:79:bd:64:b3:96:02:f8:43:7b:f8:c9:4e:7a:
ac:2a:e7:d7:12:e4:24:55:f6:a8:1e:be:7b:f6:93:
c1:a6:ae:d5:5e:bc:a1:a3:24:84:0b:dc:5b:f2:09:
43:af:53:ec:78:58:3c:bf:55:98:bd:ec:b3:2b:44:
1e:5a:2d:6d:71:a9:8b:80:68:70:13:fe:d7:b4:e3:
06:7e:a4:a7:8a:f9:9a:36:95:88:4c:ed:f0:23:d8:
82:b4:71:ee:2b:49:c5:65:5b:8f:62:59:c3:0b:a4:
2e:6d:86:ed:5a:f7:5e:70:77:3c:35:da:72:a6:97:
72:70:aa:d2:b6:02:35:3b:5d:6e:55:69:c7:f7:10:
67:d1:9c:9c:0b:6e:d8:23:d4:38:aa:f5:fc:4d:d6:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6E:4C:0E:8F:0C:D7:34:E5:4E:1D:33:3B:F4:AD:3A:56:ED:AC:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.254.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:ee:31:7f:6f:b6:26:fe:0c:14:ab:94:67:51:e4:37:55:49:
cc:5b:9b:f0:ec:39:80:86:ff:a3:97:60:13:96:0b:23:08:73:
57:69:9b:0e:0b:e8:1d:e1:ef:b9:71:24:73:05:d7:0b:31:e6:
f1:33:cf:4d:28:e6:e5:0d:fc:45:85:85:69:74:7e:04:10:61:
23:ee:c5:46:e0:33:a2:11:41:a0:e7:ee:78:cc:05:13:28:dc:
65:5e:af:c3:6b:30:cc:4e:71:f9:52:48:91:2b:97:1e:bb:9b:
03:7d:ef:b4:78:40:71:3d:57:5b:91:4d:e8:16:df:98:25:7f:
71:5f:34:82:bb:f5:b8:bb:3c:b9:93:65:cf:f2:2d:89:94:e1:
be:97:2c:a4:9b:a3:10:ee:c4:5b:3a:de:6f:14:71:47:16:a4:
39:3d:ca:10:64:46:62:9c:96:ba:f8:f1:49:f3:ca:56:5f:81:
64:f2:73:e4:89:38:1a:f5:4e:6a:e2:98:69:80:98:5a:49:c8:
5d:55:26:23:17:bb:b0:f5:fb:5b:df:06:a7:3e:8c:c9:d8:5f:
17:ea:7e:ac:83:c8:b1:ac:c3:ce:1e:34:4d:f3:0b:c0:56:a9:
f8:4d:1f:8e:b1:e7:90:ed:08:46:05:14:fd:8b:f6:a1:fe:84:
31:28:b4:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyIlbJFAO0FvlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5
ZDVhMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
OTM1MTY1ZmUtYjAyMi00MWQzLWI5NDAtOTBhYTNiZjNlOTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg24nc/ZTynk1QWwYbdHuxZxUkD4kqTdDlsVh
ZMKIjk4lJFodrTVXiTPq/LAR5m+naV3rVBW+MxYzof24c3o49YLxly2Z+Le2s4HX
02XndjMTT9ZPtDT4ZVvrnM8QzswnqqjFBuU2M6pHs3m9ZLOWAvhDe/jJTnqsKufX
EuQkVfaoHr579pPBpq7VXryhoySEC9xb8glDr1PseFg8v1WYveyzK0QeWi1tcamL
gGhwE/7XtOMGfqSnivmaNpWITO3wI9iCtHHuK0nFZVuPYlnDC6QubYbtWvdecHc8
NdpyppdycKrStgI1O11uVWnH9xBn0ZycC27YI9Q4qvX8TdbVfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF5uTA6PDNc05U4dMzv0rTpW7axCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj
YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDAwZGZmOTQtYThkMC0z
ZGIyLWJiZGMtMGY1YjI5NzAxNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj
MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy
OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk
ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP5tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB7uMX9vtib+DBSrlGdR5DdVScxbm/DsOYCG/6OXYBOWCyMIc1dpmw4L
6B3h77lxJHMF1wsx5vEzz00o5uUN/EWFhWl0fgQQYSPuxUbgM6IRQaDn7njMBRMo
3GVer8NrMMxOcflSSJErlx67mwN977R4QHE9V1uRTegW35glf3FfNIK79bi7PLmT
Zc/yLYmU4b6XLKSboxDuxFs63m8UcUcWpDk9yhBkRmKclrr48UnzylZfgWTyc+SJ
OBr1TmrimGmAmFpJyF1VJiMXu7D1+1vfBqc+jMnYXxfqfqyDyLGsw84eNE3zC8BW
qfhNH46x55DtCEYFFP2L9qH+hDEotE4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net