Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/9b788c72-aec8-3e82-a409-5b8355050a3b.roa
File: 9b788c72-aec8-3e82-a409-5b8355050a3b.roa (raw, json)
Hash identifier: J/Ge0IIIxpBCYyUPbpnrTKfNAE9dCYSNZ22p5Qx8cVE=
Subject key identifier: B4:78:39:0A:93:25:0F:C8:E1:5C:C6:AF:9D:9B:35:2B:D6:6B:A4:C6
Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial: 010D0C9F4328584967EC842E6E8666A4B2FBD300
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/9b788c72-aec8-3e82-a409-5b8355050a3b.roa
Signing time: Thu 03 Apr 2025 18:18:38 +0000
ROA not before: Thu 03 Apr 2025 18:18:38 +0000
ROA not after: Wed 02 Jul 2025 18:18:38 +0000
asID: 16509
IP address blocks: 66.235.114.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:67:ec:84:2e:6e:86:66:a4:b2:fb:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Validity
Not Before: Apr 3 18:18:38 2025 GMT
Not After : Jul 2 18:18:38 2025 GMT
Subject: CN=99c099b7-e9f6-4e8c-b636-c5ae58847e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:5d:f0:b2:45:67:38:ff:d9:b7:f7:3b:3a:
ae:11:63:9b:c5:f2:82:4d:13:01:b3:77:30:91:6b:
35:7b:3f:90:b3:5b:99:bb:50:e6:54:f7:5a:a5:04:
47:2c:1e:9b:2f:97:41:a1:b4:0b:9a:55:ea:99:a0:
9f:48:92:44:c9:32:b5:4a:fb:59:29:fd:c0:90:57:
79:55:a9:bf:0d:67:51:e3:50:74:db:fb:c3:7b:4f:
48:5a:b0:17:d5:41:27:c0:cd:cb:14:3f:57:71:51:
c1:2e:e3:d2:52:3f:f4:10:8d:0e:46:e7:4a:b1:35:
67:13:c1:ed:e5:4c:ba:8b:bc:b2:66:0b:43:08:c7:
0c:30:74:8f:0e:94:0f:b5:49:d9:27:9f:9c:39:36:
ff:28:69:7a:35:66:62:56:38:e3:98:77:2b:71:e9:
c7:53:c9:64:9e:14:f8:ae:12:9b:bd:5a:0d:7b:49:
dd:13:b7:4c:66:6e:42:11:e2:44:d2:7d:cd:e8:05:
a5:21:00:0f:6d:d3:66:79:0e:be:90:d5:53:75:69:
d8:b2:f1:35:e7:3a:7c:b6:06:34:88:71:fd:cb:2a:
bc:09:e4:14:79:d1:44:49:91:f0:19:84:26:d1:6d:
07:6c:6e:e7:8d:5b:c3:46:63:5c:7f:14:82:24:14:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:78:39:0A:93:25:0F:C8:E1:5C:C6:AF:9D:9B:35:2B:D6:6B:A4:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/9b788c72-aec8-3e82-a409-5b8355050a3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
X509v3 Authority Key Identifier:
keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
sbgp-ipAddrBlock: critical
IPv4:
66.235.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:c3:51:b8:c9:37:44:64:de:b9:73:1d:bb:a0:27:02:ce:73:
52:01:00:a5:88:8f:7b:dd:37:d2:44:30:d0:21:71:79:c1:8d:
31:70:99:6b:1a:94:e2:fe:34:c2:01:9c:69:f0:c7:43:69:81:
5a:4e:bc:82:64:01:cf:b9:72:87:60:d9:0c:e0:a1:be:38:2d:
69:60:49:16:32:17:8c:05:02:67:f7:26:1c:7e:04:30:cf:22:
11:c8:87:0f:a2:65:3f:15:83:7c:c0:27:db:46:48:2b:1f:cf:
ef:6c:e0:d6:16:9f:0a:f6:1c:38:92:ff:d3:4f:90:52:1a:8d:
c8:43:c2:a9:82:8d:0f:6d:2f:46:77:de:91:c7:12:eb:3e:d5:
7e:0c:5f:f1:46:a1:f0:5d:40:ac:48:1a:c8:37:db:7e:0f:01:
56:73:94:68:85:68:66:14:bf:60:93:4b:42:28:21:53:f7:d3:
0d:5e:b7:1b:4e:5f:62:ff:db:bb:16:82:08:b2:fb:68:2c:cc:
a4:a4:02:ea:94:11:3b:1d:9a:22:45:e5:70:df:da:14:9a:9f:
71:bd:b9:f6:cf:af:b9:59:48:73:8a:12:49:0a:44:66:0f:62:
de:f5:36:d1:40:2a:65:bb:40:79:06:b3:dc:cb:64:11:e9:5f:
46:3c:8c:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEln7IQuboZmpLL70wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ3MjJiMjAtZjI4OC00YmQ4LWJmYzctNGViN2VhZDlk
MTcwMB4XDTI1MDQwMzE4MTgzOFoXDTI1MDcwMjE4MTgzOFowLzEtMCsGA1UEAxMk
OTljMDk5YjctZTlmNi00ZThjLWI2MzYtYzVhZTU4ODQ3ZTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPVd8LJFZzj/2bf3OzquEWObxfKCTRMBs3cw
kWs1ez+Qs1uZu1DmVPdapQRHLB6bL5dBobQLmlXqmaCfSJJEyTK1SvtZKf3AkFd5
Vam/DWdR41B02/vDe09IWrAX1UEnwM3LFD9XcVHBLuPSUj/0EI0ORudKsTVnE8Ht
5Uy6i7yyZgtDCMcMMHSPDpQPtUnZJ5+cOTb/KGl6NWZiVjjjmHcrcenHU8lknhT4
rhKbvVoNe0ndE7dMZm5CEeJE0n3N6AWlIQAPbdNmeQ6+kNVTdWnYsvE15zp8tgY0
iHH9yyq8CeQUedFESZHwGYQm0W0HbG7njVvDRmNcfxSCJBQ1jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLR4OQqTJQ/I4VzGr52bNSvWa6TGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDcy
MmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3ZWFkOWQxNzAvOWI3ODhjNzItYWVjOC0z
ZTgyLWE0MDktNWI4MzU1MDUwYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ3MjJiMjAtZjI4OC00YmQ4LWJm
YzctNGViN2VhZDlkMTcwL2ZkNzIyYjIwLWYyODgtNGJkOC1iZmM3LTRlYjdlYWQ5
ZDE3MC5jcmwwHwYDVR0jBBgwFoAUD6H2SRALtv19Wb/tcfGsC09Uy7MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZDcyMmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3
ZWFkOWQxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQutyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/DUbjJN0Rk3rlzHbugJwLOc1IBAKWIj3vdN9JEMNAhcXnBjTFwmWsa
lOL+NMIBnGnwx0NpgVpOvIJkAc+5codg2Qzgob44LWlgSRYyF4wFAmf3Jhx+BDDP
IhHIhw+iZT8Vg3zAJ9tGSCsfz+9s4NYWnwr2HDiS/9NPkFIajchDwqmCjQ9tL0Z3
3pHHEus+1X4MX/FGofBdQKxIGsg3234PAVZzlGiFaGYUv2CTS0IoIVP30w1etxtO
X2L/27sWggiy+2gszKSkAuqUETsdmiJF5XDf2hSan3G9ufbPr7lZSHOKEkkKRGYP
Yt71NtFAKmW7QHkGs9zLZBHpX0Y8jJ4=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:06 2025 by rpki-client on console.sobornost.net