Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa
File: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (raw, json)
Hash identifier: +SOLk0RtR4b1jdX1nxR/dJqT780U4pQmldlvhmhHFSM=
Subject key identifier: 56:11:84:AB:CF:9A:88:D0:93:44:71:27:1F:C1:30:F4:1D:51:6D:E3
Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7
Certificate serial: 010D0C9F432858496F117A4D46F35727A9F76788
Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa
Signing time: Sun 06 Apr 2025 07:43:46 +0000
ROA not before: Sun 06 Apr 2025 07:43:46 +0000
ROA not after: Sat 05 Jul 2025 07:43:46 +0000
asID: 8095
IP address blocks: 23.181.248.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:11:7a:4d:46:f3:57:27:a9:f7:67:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7
Validity
Not Before: Apr 6 07:43:46 2025 GMT
Not After : Jul 5 07:43:46 2025 GMT
Subject: CN=33e4f0cc-2ccd-4dad-8497-91ea68f95b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:fd:aa:40:e6:b0:4a:df:8f:d3:7f:ea:78:
2c:e7:a7:df:a8:d5:4e:b1:d6:7f:77:e5:80:bf:56:
0c:a8:81:2f:e7:e1:58:c9:12:2c:a9:fa:c8:bd:01:
1b:aa:c8:52:ec:04:a9:3b:83:e5:29:74:e7:61:85:
d5:99:b8:76:a6:3d:c4:97:70:ff:cf:e9:14:40:00:
e6:b4:47:c1:03:67:62:ba:93:e0:00:d9:43:1f:d1:
94:fc:2a:30:c1:b7:66:75:5d:9e:96:fc:bc:b5:48:
0d:b0:87:92:1c:13:3f:16:44:27:a7:7a:76:92:14:
32:f2:ba:09:1c:8c:bf:94:3c:b7:00:9c:03:a8:1f:
62:06:36:a0:ce:2d:28:65:11:0b:ca:c1:de:33:6f:
40:d7:ad:0e:5f:2d:c9:a0:65:7d:3d:13:94:17:e2:
ba:ac:e3:6b:03:98:0b:62:76:b7:78:6a:6b:66:c5:
a0:40:da:a0:95:1e:27:8e:a3:93:5a:b6:25:33:40:
5b:e9:3a:d1:48:5e:c5:6a:75:b1:b6:73:6c:fa:2f:
15:4e:40:36:81:dc:78:41:d0:42:ac:d3:80:0e:08:
5f:cb:ce:b0:44:9b:dc:bf:17:bc:b9:0f:76:bd:13:
06:8b:51:73:52:4e:5e:dc:07:c5:fa:b1:d1:3e:fb:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:11:84:AB:CF:9A:88:D0:93:44:71:27:1F:C1:30:F4:1D:51:6D:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl
X509v3 Authority Key Identifier:
keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.181.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:38:81:66:c2:f5:83:75:a0:ad:f9:20:57:44:8e:24:72:c4:
13:9d:e9:50:a8:90:bf:17:ec:ab:a6:0c:16:78:a5:38:83:97:
61:7a:15:ff:14:bd:60:8b:3a:d7:7f:b7:2f:3c:1e:22:ec:e8:
83:0e:3c:6e:56:2a:9e:31:9a:0f:61:08:7a:c0:e7:c9:ac:ec:
81:83:2a:8d:38:53:64:45:0e:fa:8e:1b:17:22:7e:7f:87:cb:
75:2a:8c:90:7a:4e:0d:e5:db:d8:c7:07:ef:00:33:70:13:dc:
cb:61:38:55:a0:be:cf:3e:b4:14:5d:5f:f2:3d:67:ac:1f:73:
de:db:9c:93:ea:d7:78:d7:ab:14:d4:85:61:f8:98:db:87:e9:
27:30:b2:fc:a3:0d:42:9b:31:3e:c8:bc:c6:94:00:73:ea:66:
e9:37:85:cc:27:a0:67:25:cf:bb:a5:ac:46:3e:99:60:99:95:
24:3c:07:01:5c:bb:5a:3c:c3:c0:ce:5e:af:70:8f:08:47:be:
c6:bd:76:a6:b1:06:28:23:36:32:7a:7e:5f:6b:22:b4:b8:b0:
25:95:a1:b7:91:2b:d9:80:06:18:b8:fc:6e:3a:1e:fb:28:4a:
39:0a:9d:f5:2f:0b:17:d8:00:da:1d:61:e3:6f:c1:c0:32:fb:
73:d6:6e:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvEXpNRvNXJ6n3Z4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy
M2E3MB4XDTI1MDQwNjA3NDM0NloXDTI1MDcwNTA3NDM0NlowLzEtMCsGA1UEAxMk
MzNlNGYwY2MtMmNjZC00ZGFkLTg0OTctOTFlYTY4Zjk1Yjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNX9qkDmsErfj9N/6ngs56ffqNVOsdZ/d+WA
v1YMqIEv5+FYyRIsqfrIvQEbqshS7ASpO4PlKXTnYYXVmbh2pj3El3D/z+kUQADm
tEfBA2diupPgANlDH9GU/CowwbdmdV2elvy8tUgNsIeSHBM/FkQnp3p2khQy8roJ
HIy/lDy3AJwDqB9iBjagzi0oZRELysHeM29A160OXy3JoGV9PROUF+K6rONrA5gL
Yna3eGprZsWgQNqglR4njqOTWrYlM0Bb6TrRSF7FanWxtnNs+i8VTkA2gdx4QdBC
rNOADghfy86wRJvcvxe8uQ92vRMGi1FzUk5e3AfF+rHRPvsRYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYRhKvPmojQk0RxJx/BMPQdUW3jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2
NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMWUxYmU1MzUtNTA4Yy0z
MzBlLWE2ZTItODVhYTJhOTEzNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj
YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx
MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh
MmY5MTIzYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7X4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGo4gWbC9YN1oK35IFdEjiRyxBOd6VCokL8X7KumDBZ4pTiDl2F6Ff8U
vWCLOtd/ty88HiLs6IMOPG5WKp4xmg9hCHrA58ms7IGDKo04U2RFDvqOGxcifn+H
y3UqjJB6Tg3l29jHB+8AM3AT3MthOFWgvs8+tBRdX/I9Z6wfc97bnJPq13jXqxTU
hWH4mNuH6ScwsvyjDUKbMT7IvMaUAHPqZuk3hcwnoGclz7ulrEY+mWCZlSQ8BwFc
u1o8w8DOXq9wjwhHvsa9dqaxBigjNjJ6fl9rIrS4sCWVobeRK9mABhi4/G46Hvso
SjkKnfUvCxfYANodYeNvwcAy+3PWblE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net