Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa
File: b991e82a-2e7a-3467-997c-589f9374fc62.roa (raw, json)
Hash identifier: 7yJqGy2mV3jld2Ixb1/bwPCoCP6hArPaePheAJNALPI=
Subject key identifier: 5E:E8:00:34:FA:BB:68:9A:A1:28:C7:24:E1:7D:B3:0E:E0:DA:68:23
Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial: 010D0C9F43285849780F0EAFEA8A36455280FB00
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 16509
IP address blocks: 138.32.104.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:0e:af:ea:8a:36:45:52:80:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=1a894879-724a-46ae-baf8-acfa569c3953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:ac:65:2a:05:66:9f:92:f5:57:13:e9:9e:
02:62:2d:ca:33:b3:cf:2c:97:0a:e8:57:4a:c1:f3:
b7:7a:b1:6d:83:08:1b:4a:35:de:79:b1:21:7f:be:
db:ab:4e:a9:f4:df:51:fc:09:d9:95:47:19:48:10:
cc:db:b2:66:e6:eb:ac:fe:ab:f1:10:03:77:a5:28:
af:a3:07:44:0c:67:9f:05:62:25:f4:dd:26:d5:6b:
5c:79:37:4f:df:35:3b:74:68:fc:25:c8:21:e1:51:
15:be:f2:c9:ef:8d:40:3d:4b:fa:4e:f6:66:57:44:
3c:a1:1c:64:ed:d4:bc:69:41:1b:a0:e0:a7:92:39:
65:1b:a0:4b:ea:e1:dd:7a:37:68:9e:dd:1e:2b:6f:
88:d3:a2:ef:23:af:8c:9c:67:af:36:8c:54:b7:fc:
07:85:3d:f2:f6:9e:cb:22:ca:85:d9:a9:1e:0a:4f:
9f:89:80:e8:1f:74:b4:37:38:3b:c8:79:e8:c9:c1:
08:20:26:56:a8:d2:48:f9:88:ee:81:51:2d:0c:fd:
4a:73:00:3e:00:04:4f:47:16:9a:9e:c1:5c:66:f4:
d5:34:fd:eb:fd:20:56:6c:34:3f:62:08:a5:e9:48:
f1:47:e2:38:5a:49:0e:8b:97:f4:99:ce:b4:c0:7b:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E8:00:34:FA:BB:68:9A:A1:28:C7:24:E1:7D:B3:0E:E0:DA:68:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/b991e82a-2e7a-3467-997c-589f9374fc62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
X509v3 Authority Key Identifier:
keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
sbgp-ipAddrBlock: critical
IPv4:
138.32.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:35:7d:27:e5:07:bc:49:a6:ec:03:9e:33:b3:4b:b6:61:ef:
91:b4:b7:3a:f2:54:0d:58:59:02:0f:2b:76:80:71:db:f3:df:
bd:de:78:6d:ee:ce:cc:8e:24:38:3b:e6:16:e5:b6:f3:cd:ab:
81:bd:d6:d8:d7:52:ac:88:ae:44:35:a4:6c:59:5e:b1:e1:14:
36:5a:de:6d:c9:0a:20:08:e3:7d:a1:e0:b0:66:27:ae:16:1c:
70:18:74:16:a1:1e:05:be:41:c3:e0:4c:09:df:7b:84:96:1b:
1d:e6:b3:e6:98:11:2b:da:e2:4a:9b:e8:24:33:de:07:02:51:
6a:85:39:fa:c7:ed:21:79:95:72:a1:bf:4e:fb:84:71:17:8f:
ac:be:5b:87:ad:c5:0d:ae:2d:28:f2:c7:46:b0:26:fd:c1:02:
f5:56:5c:75:e4:56:1b:20:f8:51:e5:8e:4e:f1:62:93:4c:1b:
f1:27:b5:71:09:ce:9e:09:67:be:ed:b6:96:8f:f0:63:f6:e1:
ed:2c:69:48:a5:9f:29:d6:7e:79:f8:1b:16:fd:de:59:94:1b:
a7:6e:75:82:6b:ca:a3:60:fb:f9:f1:5a:c4:58:fc:67:3d:f6:
ce:5b:78:ee:02:aa:d7:a5:4e:8e:97:22:85:05:8a:2b:c7:35:
d3:f0:3b:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dw6v6oo2RVKA+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2
NmYzMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk
MWE4OTQ4NzktNzI0YS00NmFlLWJhZjgtYWNmYTU2OWMzOTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGOsZSoFZp+S9VcT6Z4CYi3KM7PPLJcK6FdK
wfO3erFtgwgbSjXeebEhf77bq06p9N9R/AnZlUcZSBDM27Jm5uus/qvxEAN3pSiv
owdEDGefBWIl9N0m1WtceTdP3zU7dGj8Jcgh4VEVvvLJ741APUv6TvZmV0Q8oRxk
7dS8aUEboOCnkjllG6BL6uHdejdont0eK2+I06LvI6+MnGevNoxUt/wHhT3y9p7L
IsqF2akeCk+fiYDoH3S0Nzg7yHnoycEIICZWqNJI+YjugVEtDP1KcwA+AARPRxaa
nsFcZvTVNP3r/SBWbDQ/Ygil6UjxR+I4WkkOi5f0mc60wHsbFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7oADT6u2iaoSjHJOF9sw7g2mgjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz
OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvYjk5MWU4MmEtMmU3YS0z
NDY3LTk5N2MtNTg5ZjkzNzRmYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi
ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex
NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy
YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiBoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACk1fSflB7xJpuwDnjOzS7Zh75G0tzryVA1YWQIPK3aAcdvz373eeG3u
zsyOJDg75hbltvPNq4G91tjXUqyIrkQ1pGxZXrHhFDZa3m3JCiAI432h4LBmJ64W
HHAYdBahHgW+QcPgTAnfe4SWGx3ms+aYESva4kqb6CQz3gcCUWqFOfrH7SF5lXKh
v077hHEXj6y+W4etxQ2uLSjyx0awJv3BAvVWXHXkVhsg+FHljk7xYpNMG/EntXEJ
zp4JZ77ttpaP8GP24e0saUilnynWfnn4Gxb93lmUG6dudYJryqNg+/nxWsRY/Gc9
9s5beO4CqtelTo6XIoUFiivHNdPwO68=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net