Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/6cf09c11-cdfc-3291-a79f-6993e6710f10.roa
File: 6cf09c11-cdfc-3291-a79f-6993e6710f10.roa (raw, json)
Hash identifier: O1MJYSthpaoNi2MOlAZiGnDQTBUNbRc/xgc9MKYMBTQ=
Subject key identifier: 65:7E:1C:F4:66:BF:26:EB:AD:30:B5:19:2F:AD:97:85:2B:EA:0A:6E
Certificate issuer: /CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
Certificate serial: 010D0C9F43285849350EA879A6C4386B27E9B740
Authority key identifier: 56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/6cf09c11-cdfc-3291-a79f-6993e6710f10.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 195.85.108.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a8:79:a6:c4:38:6b:27:e9:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=8dbe40ca-9ab7-4ecc-bbee-bbade4fcc1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:b3:5d:fb:b4:6f:24:c7:69:0f:d3:c0:d4:
d9:77:75:21:34:ba:a6:61:5a:3b:83:59:8a:ec:9a:
c9:93:48:1c:e2:4c:38:81:52:f8:0b:ba:bd:03:91:
47:f7:93:37:23:56:18:11:b5:7c:dc:e7:4b:af:98:
7b:94:12:87:2c:64:7d:a6:56:c9:0c:d9:1f:3f:1b:
0f:d7:10:38:8e:39:be:2b:59:99:27:21:83:f2:7a:
6f:bc:cc:9a:e6:05:71:fd:e4:5c:10:8d:5f:c1:92:
99:94:68:e6:28:da:09:d0:ee:2a:d1:72:ee:e1:1b:
da:30:1b:87:0f:39:f3:eb:2d:bd:bf:87:6f:88:99:
a0:9f:9f:7a:d2:38:cf:17:ee:eb:bc:15:4c:a1:67:
db:34:b8:49:dd:97:36:dc:59:54:44:22:84:75:37:
95:71:b9:94:3a:61:8c:15:f7:78:91:43:09:50:1b:
00:37:e5:23:e5:31:07:3d:27:99:41:30:2d:94:85:
2d:ed:a8:c1:88:85:15:53:ec:fa:45:03:13:93:8a:
76:09:d4:28:bd:30:01:78:f8:40:21:ac:d8:5b:b0:
d6:5f:42:6c:a5:a2:4b:09:20:24:9c:5a:c4:75:02:
95:a9:84:29:6c:69:58:67:1d:60:46:25:33:33:05:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7E:1C:F4:66:BF:26:EB:AD:30:B5:19:2F:AD:97:85:2B:EA:0A:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/6cf09c11-cdfc-3291-a79f-6993e6710f10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl
X509v3 Authority Key Identifier:
keyid:56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
sbgp-ipAddrBlock: critical
IPv4:
195.85.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b6:d8:6b:31:b0:50:9d:ee:d9:80:4d:ee:c1:d4:e5:f6:2b:
b7:9e:27:74:64:f6:92:b5:8b:36:5a:af:e8:9d:c6:4b:d5:2a:
7a:40:1d:b8:3a:8c:74:a0:49:e0:49:d6:0c:76:0f:cc:05:97:
6e:b2:5f:a8:d7:32:62:13:54:0f:b9:7e:b9:a8:56:24:4e:c8:
63:cd:47:b7:fe:51:48:f2:c6:56:a1:82:f7:37:83:7e:a6:58:
28:22:59:02:c1:eb:2c:0c:31:72:3f:0f:2c:be:b1:42:41:88:
0e:c0:90:f4:7e:f1:02:1c:61:8a:58:41:52:17:80:16:98:6a:
29:87:93:4a:a8:fd:e6:98:2b:7b:bb:0e:3f:98:04:31:9e:85:
f1:46:bf:88:19:bc:dc:9c:3d:62:79:fe:c7:6b:0c:46:85:15:
14:81:20:11:a6:d7:02:8d:df:94:6a:1b:9a:c8:2b:b4:1a:8c:
ec:46:f4:8e:39:31:b3:78:30:49:58:30:df:2a:f5:0b:93:ee:
e3:42:52:15:08:0f:32:12:37:87:f1:49:b5:95:d8:37:8a:18:
ea:32:2f:a0:f9:78:81:32:b5:1e:3c:5d:f4:e7:bd:12:fa:20:
60:94:4d:00:62:d6:8a:6c:f4:91:e3:9c:d2:87:d9:fe:55:f7:
3f:1e:df:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dqh5psQ4ayfpt0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUwZWJjZTMtZGRmNS00ZmIwLWI4ZWQtYjlhNDVkOGI0
NmIyMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OGRiZTQwY2EtOWFiNy00ZWNjLWJiZWUtYmJhZGU0ZmNjMWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVCzXfu0byTHaQ/TwNTZd3UhNLqmYVo7g1mK
7JrJk0gc4kw4gVL4C7q9A5FH95M3I1YYEbV83OdLr5h7lBKHLGR9plbJDNkfPxsP
1xA4jjm+K1mZJyGD8npvvMya5gVx/eRcEI1fwZKZlGjmKNoJ0O4q0XLu4RvaMBuH
Dznz6y29v4dviJmgn5960jjPF+7rvBVMoWfbNLhJ3Zc23FlURCKEdTeVcbmUOmGM
Ffd4kUMJUBsAN+Uj5TEHPSeZQTAtlIUt7ajBiIUVU+z6RQMTk4p2CdQovTABePhA
IazYW7DWX0JspaJLCSAknFrEdQKVqYQpbGlYZx1gRiUzMwXqtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGV+HPRmvybrrTC1GS+tl4Ur6gpuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBl
YmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0NWQ4YjQ2YjIvNmNmMDljMTEtY2RmYy0z
MjkxLWE3OWYtNjk5M2U2NzEwZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjUwZWJjZTMtZGRmNS00ZmIwLWI4
ZWQtYjlhNDVkOGI0NmIyL2I1MGViY2UzLWRkZjUtNGZiMC1iOGVkLWI5YTQ1ZDhi
NDZiMi5jcmwwHwYDVR0jBBgwFoAUVs/TeO1FMPG70WFTkaT81Dem6iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBlYmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0
NWQ4YjQ2YjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADS22GsxsFCd7tmATe7B1OX2K7eeJ3Rk9pK1izZar+idxkvVKnpAHbg6
jHSgSeBJ1gx2D8wFl26yX6jXMmITVA+5frmoViROyGPNR7f+UUjyxlahgvc3g36m
WCgiWQLB6ywMMXI/Dyy+sUJBiA7AkPR+8QIcYYpYQVIXgBaYaimHk0qo/eaYK3u7
Dj+YBDGehfFGv4gZvNycPWJ5/sdrDEaFFRSBIBGm1wKN35RqG5rIK7QajOxG9I45
MbN4MElYMN8q9QuT7uNCUhUIDzISN4fxSbWV2DeKGOoyL6D5eIEytR48XfTnvRL6
IGCUTQBi1ops9JHjnNKH2f5V9z8e3/s=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:46 2025 by rpki-client on console.sobornost.net