Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/d8d325c9-b65a-3269-8aa7-2b6f2a54e8c7.roa
File: d8d325c9-b65a-3269-8aa7-2b6f2a54e8c7.roa (raw, json)
Hash identifier: 9NJ2sjh64swEJvH+FhUBwOhpyVnH3gEC07YjqBN2Ds0=
Subject key identifier: 7E:65:22:EB:95:91:11:2B:C0:C5:76:71:24:7A:16:6E:EF:F8:08:19
Certificate issuer: /CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc
Certificate serial: 010D0C9F432858496E497A05F3894214DA9AD1C0
Authority key identifier: 8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/d8d325c9-b65a-3269-8aa7-2b6f2a54e8c7.roa
Signing time: Sun 06 Apr 2025 01:00:47 +0000
ROA not before: Sun 06 Apr 2025 01:00:47 +0000
ROA not after: Sat 05 Jul 2025 01:00:47 +0000
asID: 401556
IP address blocks: 23.132.60.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6e:49:7a:05:f3:89:42:14:da:9a:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc
Validity
Not Before: Apr 6 01:00:47 2025 GMT
Not After : Jul 5 01:00:47 2025 GMT
Subject: CN=a5c509b8-cbe8-42cb-bdfc-1eb6c04d0d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6b:15:23:5b:88:d0:8c:c4:8b:af:7c:3b:f4:
53:69:84:77:5b:f6:25:da:f3:8d:5e:e8:85:77:c6:
f8:ca:aa:fc:79:43:35:98:98:37:19:0f:1f:87:e0:
4c:a2:9e:8e:5f:14:ca:b0:0f:b1:5f:43:2b:94:5a:
59:3b:26:1c:e0:75:25:ba:b7:cb:e6:8e:a8:07:9b:
9d:03:66:7b:82:d3:c0:38:01:56:d3:95:df:32:6d:
f8:49:d7:9c:0a:96:85:35:ce:aa:ac:c7:22:97:2e:
a0:7f:5a:44:1f:5e:4e:c0:6f:a5:c9:c7:80:af:38:
fa:71:98:58:f0:36:16:af:08:57:ec:58:4f:17:d4:
d4:b6:e5:91:04:74:59:3e:6c:c8:18:d9:9d:48:e9:
e4:ca:19:cd:e2:21:54:f3:f4:8e:11:3b:cf:21:05:
eb:18:eb:b5:a1:4a:21:89:78:5b:71:30:22:a6:9e:
81:b9:a5:c8:7a:1b:5e:38:89:04:2e:af:7b:fd:28:
d6:05:72:a6:53:5e:a5:93:5f:06:f6:46:39:a4:e8:
b5:75:f6:f4:36:b4:8f:31:13:01:5a:ec:bc:35:ac:
e5:22:b6:02:bf:23:7e:42:1a:17:98:d2:50:a2:c4:
ab:5d:36:23:54:37:24:01:1b:85:3b:53:42:46:49:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:65:22:EB:95:91:11:2B:C0:C5:76:71:24:7A:16:6E:EF:F8:08:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/d8d325c9-b65a-3269-8aa7-2b6f2a54e8c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl
X509v3 Authority Key Identifier:
keyid:8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:9d:83:b7:1b:1d:03:32:ca:90:24:01:28:15:69:4c:23:68:
da:74:63:65:2c:34:e2:ff:21:8a:35:65:5f:a5:2f:a3:28:e9:
70:08:d0:69:99:f9:7d:cc:41:35:b8:37:a7:7a:4f:d2:f2:f7:
f3:7c:cc:58:56:88:60:2c:3f:51:07:c4:d1:73:15:6d:1e:60:
ef:6f:c4:31:e0:5a:37:2a:69:a1:5d:88:29:e2:90:80:b9:c7:
c1:77:17:9d:b2:d7:f1:21:fe:b8:58:f3:98:18:53:86:8e:12:
ec:53:cd:b3:ec:5f:2c:57:b1:e4:75:fc:64:70:db:9b:82:b9:
cf:08:22:cf:62:9d:d8:ab:91:d2:17:6f:8a:95:e0:ab:11:82:
06:90:72:64:e3:2c:dd:ac:dc:ae:c3:5a:c5:5a:62:7f:ac:e1:
2b:04:db:9f:7d:58:33:a7:8e:21:5a:ff:6e:2a:b1:3d:c0:39:
1d:dd:b4:a8:89:24:fc:39:17:61:1f:c2:38:14:bb:61:6e:12:
d0:91:e3:50:c1:73:1e:73:8e:ae:1a:41:2f:b9:7f:87:be:c8:
a0:92:5c:da:95:a2:4c:c7:e4:3a:c1:7e:bb:bd:b8:e0:41:fe:
2d:54:e2:bd:2b:dd:e6:7f:0f:ce:a1:41:88:23:3d:79:dc:24:
2e:57:3c:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSXoF84lCFNqa0cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDI5ZGY4YmQtNDFjNS00ZjIyLWE0YmMtZjg0ZjFiYzA0
YmZjMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk
YTVjNTA5YjgtY2JlOC00MmNiLWJkZmMtMWViNmMwNGQwZDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2sVI1uI0IzEi698O/RTaYR3W/Yl2vONXuiF
d8b4yqr8eUM1mJg3GQ8fh+BMop6OXxTKsA+xX0MrlFpZOyYc4HUlurfL5o6oB5ud
A2Z7gtPAOAFW05XfMm34SdecCpaFNc6qrMcily6gf1pEH15OwG+lyceArzj6cZhY
8DYWrwhX7FhPF9TUtuWRBHRZPmzIGNmdSOnkyhnN4iFU8/SOETvPIQXrGOu1oUoh
iXhbcTAipp6BuaXIehteOIkELq97/SjWBXKmU16lk18G9kY5pOi1dfb0NrSPMRMB
Wuy8NazlIrYCvyN+QhoXmNJQosSrXTYjVDckARuFO1NCRkl9uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5lIuuVkRErwMV2cSR6Fm7v+AgZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMjlk
ZjhiZC00MWM1LTRmMjItYTRiYy1mODRmMWJjMDRiZmMvZDhkMzI1YzktYjY1YS0z
MjY5LThhYTctMmI2ZjJhNTRlOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDI5ZGY4YmQtNDFjNS00ZjIyLWE0
YmMtZjg0ZjFiYzA0YmZjLzAyOWRmOGJkLTQxYzUtNGYyMi1hNGJjLWY4NGYxYmMw
NGJmYy5jcmwwHwYDVR0jBBgwFoAUiu0rJxfUa0HGaiYjCIeo2I+RbXwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMjlkZjhiZC00MWM1LTRmMjItYTRiYy1mODRm
MWJjMDRiZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4Q8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKdg7cbHQMyypAkASgVaUwjaNp0Y2UsNOL/IYo1ZV+lL6Mo6XAI0GmZ
+X3MQTW4N6d6T9Ly9/N8zFhWiGAsP1EHxNFzFW0eYO9vxDHgWjcqaaFdiCnikIC5
x8F3F52y1/Eh/rhY85gYU4aOEuxTzbPsXyxXseR1/GRw25uCuc8IIs9indirkdIX
b4qV4KsRggaQcmTjLN2s3K7DWsVaYn+s4SsE2599WDOnjiFa/24qsT3AOR3dtKiJ
JPw5F2EfwjgUu2FuEtCR41DBcx5zjq4aQS+5f4e+yKCSXNqVokzH5DrBfru9uOBB
/i1U4r0r3eZ/D86hQYgjPXncJC5XPHg=
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:21 2025 by rpki-client on console.sobornost.net