Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa
File: 74295fbe-6636-37e1-8ba4-1835f48000f7.roa (raw, json)
Hash identifier: OXNiac5mpFJMqn0Jt9cDgYJf9bmnTznvSXqKdS7sAeA=
Subject key identifier: 8E:47:81:07:2D:A1:0C:27:77:D0:4B:13:AA:17:4C:38:7F:EB:FA:84
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858496CE44D4ED0B013F4D2498180
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 4760
IP address blocks: 209.9.192.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:4d:4e:d0:b0:13:f4:d2:49:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=ba6dcde7-aa95-4f9f-9c9a-110eaedd48ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:d1:e4:c4:79:af:7b:8b:af:f7:65:76:2a:
20:25:4c:bd:cb:30:4e:44:04:28:59:ab:8e:88:dd:
45:0d:d8:8c:55:cc:2e:ca:b9:54:69:9d:ca:de:41:
40:af:8d:30:63:49:f6:95:bc:d0:3d:7b:73:7d:cf:
31:51:9f:3f:d0:18:67:e4:c8:bb:a9:6f:61:67:57:
78:99:4c:31:35:bb:39:d9:65:34:56:1d:25:64:d8:
2e:ae:69:0a:a3:3f:d0:2f:4a:5c:5c:78:26:b9:93:
e1:81:d4:85:66:f9:7e:15:21:86:b4:54:03:38:17:
de:62:32:ce:6c:c9:0d:6f:21:cb:8f:26:03:c5:ab:
c7:c9:12:08:e2:5c:c6:ad:8e:bd:e6:d5:54:fa:98:
9c:3f:4a:f2:bf:46:77:a8:7b:f1:1a:1e:63:81:fd:
20:db:1d:ae:bc:1d:e5:49:27:c4:37:73:02:98:3d:
74:92:b2:28:a2:3c:15:db:09:c5:55:33:6a:78:9c:
54:5d:70:33:88:7c:1b:d3:a3:c4:e3:bb:6b:68:84:
4e:52:c3:ef:f9:a2:ce:24:ff:47:55:45:6f:98:f8:
20:45:39:54:19:4d:e8:7a:c4:51:63:69:48:a0:35:
98:d9:41:3e:00:49:d3:86:d2:39:05:84:be:c0:0e:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:47:81:07:2D:A1:0C:27:77:D0:4B:13:AA:17:4C:38:7F:EB:FA:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:49:d2:1a:16:70:73:b8:03:d0:7f:b4:9d:e8:13:ae:c6:0c:
43:d7:3a:f2:81:ac:ef:04:84:6b:50:68:b1:48:3f:0f:b0:44:
99:59:d9:c3:a2:c8:58:ff:14:65:7f:07:62:24:66:de:8f:e8:
58:ff:d1:5a:0a:22:71:e8:de:a6:7f:df:42:80:83:c5:94:89:
98:66:9e:bb:6d:ed:91:3a:df:6a:11:e5:d1:3b:47:97:f4:81:
06:50:60:ad:bd:60:ff:1f:7a:25:fb:d9:07:db:7f:d2:4e:8c:
e3:58:32:b5:8e:94:d8:27:6b:de:8f:46:2a:ff:ef:9b:e6:17:
e1:78:1a:13:2a:34:e4:8e:93:16:7d:d2:68:32:32:8b:ca:e3:
16:a2:6b:b1:e3:20:56:28:4d:fe:60:c8:42:3e:c8:33:b8:02:
8d:c4:40:ea:02:18:32:5b:b8:56:fa:1b:10:21:16:7b:6f:ba:
09:4b:f0:71:63:ee:8e:b0:8e:ed:9b:a0:c8:f2:09:94:93:66:
76:26:2e:53:38:0c:df:45:51:27:c3:5f:3a:6c:c5:10:52:97:
19:54:35:6f:da:9a:0e:32:8c:cf:68:cf:62:a2:6b:a8:9d:33:
82:2b:d8:df:a0:16:87:95:0a:6a:07:ed:ce:2f:52:37:52:0c:
ac:3c:d0:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5E1O0LAT9NJJgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
YmE2ZGNkZTctYWE5NS00ZjlmLTljOWEtMTEwZWFlZGQ0OGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3LR5MR5r3uLr/dldiogJUy9yzBORAQoWauO
iN1FDdiMVcwuyrlUaZ3K3kFAr40wY0n2lbzQPXtzfc8xUZ8/0Bhn5Mi7qW9hZ1d4
mUwxNbs52WU0Vh0lZNgurmkKoz/QL0pcXHgmuZPhgdSFZvl+FSGGtFQDOBfeYjLO
bMkNbyHLjyYDxavHyRII4lzGrY695tVU+picP0ryv0Z3qHvxGh5jgf0g2x2uvB3l
SSfEN3MCmD10krIoojwV2wnFVTNqeJxUXXAziHwb06PE47traIROUsPv+aLOJP9H
VUVvmPggRTlUGU3oesRRY2lIoDWY2UE+AEnThtI5BYS+wA5frwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5HgQctoQwnd9BLE6oXTDh/6/qEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNzQyOTVmYmUtNjYzNi0z
N2UxLThiYTQtMTgzNWY0ODAwMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QnAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBJ0hoWcHO4A9B/tJ3oE67GDEPXOvKBrO8EhGtQaLFIPw+wRJlZ2cOi
yFj/FGV/B2IkZt6P6Fj/0VoKInHo3qZ/30KAg8WUiZhmnrtt7ZE632oR5dE7R5f0
gQZQYK29YP8feiX72Qfbf9JOjONYMrWOlNgna96PRir/75vmF+F4GhMqNOSOkxZ9
0mgyMovK4xaia7HjIFYoTf5gyEI+yDO4Ao3EQOoCGDJbuFb6GxAhFntvuglL8HFj
7o6wju2boMjyCZSTZnYmLlM4DN9FUSfDXzpsxRBSlxlUNW/amg4yjM9oz2Kia6id
M4Ir2N+gFoeVCmoH7c4vUjdSDKw80Ns=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net