Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/944447fb-baad-3395-926c-c3422f01b462.roa
File: 944447fb-baad-3395-926c-c3422f01b462.roa (raw, json)
Hash identifier: pSySiv9BAnKdHkTob9cufI/Ij4qxXO4x/fM+ppmD/Gk=
Subject key identifier: 2D:CF:DE:B4:A1:59:65:A3:6C:FC:29:D2:53:6F:61:4F:05:7D:58:6E
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F432858496FAF0BBDB574A86C60387B00
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/944447fb-baad-3395-926c-c3422f01b462.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 46432
IP address blocks: 2602:fe59:40::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0b:bd:b5:74:a8:6c:60:38:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=7eea523c-4f87-46b4-9709-8d2c06b84423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:20:db:73:b3:13:e8:7b:30:a4:a9:e1:8d:
77:32:57:b1:95:92:1a:a0:eb:b5:97:09:40:83:e0:
63:8c:a9:57:59:2d:88:d1:7d:eb:b3:d9:3b:69:51:
57:5c:24:8c:b5:86:13:ef:78:c9:5d:f5:f1:79:77:
ad:eb:99:5b:9e:99:f9:89:68:20:2a:54:51:5a:37:
55:e9:c8:3f:87:aa:0a:cb:1b:71:a0:d5:31:e0:84:
89:8f:37:f2:81:1f:62:2c:06:a5:6a:2f:b3:9d:3f:
1c:f0:a6:61:e4:a6:4e:e4:73:9f:94:30:4a:c6:c9:
c3:c0:32:15:29:b9:c4:36:b7:3d:97:ed:0b:0f:7c:
33:0b:58:c8:f3:0c:81:87:37:2d:4d:83:e8:2f:20:
f5:c2:64:1c:d3:57:f1:03:f4:6e:f1:d6:b9:4a:ec:
c0:5b:0b:5e:79:98:2c:e2:b8:f3:e3:16:86:14:a6:
a3:f1:d2:e2:db:66:e7:ac:f8:0f:68:08:6f:b5:45:
89:cf:54:00:87:18:c6:f2:04:f7:dd:74:89:04:a5:
89:15:c8:80:6a:cb:0d:e1:54:39:43:79:99:7b:9e:
c2:9d:75:c5:b1:3a:0a:c2:d7:4b:45:f6:88:f5:42:
00:e5:32:d4:b2:75:f0:78:d2:a8:64:ad:c2:95:56:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:DE:B4:A1:59:65:A3:6C:FC:29:D2:53:6F:61:4F:05:7D:58:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/944447fb-baad-3395-926c-c3422f01b462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fe59:40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:dd:87:90:15:eb:86:9a:a5:5b:a6:b4:73:85:44:9a:44:d5:
51:2b:2f:75:99:01:d0:46:77:73:f4:e3:2a:bd:cf:48:56:be:
18:e5:a9:e6:fb:fa:90:5e:bb:e6:be:2a:3d:41:46:66:3f:56:
5c:e5:a6:cd:bf:af:c0:a4:77:d9:21:a4:7e:f8:20:46:88:03:
c7:b9:73:48:74:9f:8f:e4:68:a2:a6:25:c7:74:d2:c2:2f:20:
53:76:e1:29:bd:16:18:c5:a8:bb:8e:90:27:7a:58:67:15:ba:
ad:64:31:9e:55:f0:63:2d:33:63:bb:31:4b:7c:1c:15:71:9d:
2d:5a:0a:b7:e3:7a:53:d0:4c:e2:21:e1:1f:f3:bf:c8:62:77:
0e:bb:a2:75:33:66:08:79:bb:28:da:52:17:2e:e0:55:df:a8:
0e:16:2a:0c:9a:56:91:f6:17:27:ef:93:49:7f:47:d1:98:34:
74:5b:16:16:8c:8e:83:38:6e:d9:b4:93:f6:82:43:86:cd:ed:
c2:4f:62:2b:d5:19:d1:ab:0f:37:bf:56:21:02:d1:83:b3:35:
7b:3e:e8:47:0f:3a:47:9a:a9:d4:f1:85:3d:ba:77:91:18:9f:
42:fd:56:0d:17:ef:d7:d7:e1:21:b0:4d:db:a8:cf:09:33:ee:
d0:9a:13:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElvrwu9tXSobGA4ewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm
Yjg1MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
N2VlYTUyM2MtNGY4Ny00NmI0LTk3MDktOGQyYzA2Yjg0NDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPMg23OzE+h7MKSp4Y13MlexlZIaoOu1lwlA
g+BjjKlXWS2I0X3rs9k7aVFXXCSMtYYT73jJXfXxeXet65lbnpn5iWggKlRRWjdV
6cg/h6oKyxtxoNUx4ISJjzfygR9iLAalai+znT8c8KZh5KZO5HOflDBKxsnDwDIV
KbnENrc9l+0LD3wzC1jI8wyBhzctTYPoLyD1wmQc01fxA/Ru8da5SuzAWwteeZgs
4rjz4xaGFKaj8dLi22bnrPgPaAhvtUWJz1QAhxjG8gT33XSJBKWJFciAassN4VQ5
Q3mZe57CnXXFsToKwtdLRfaI9UIA5TLUsnXweNKoZK3ClVZ0BQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC3P3rShWWWjbPwp0lNvYU8FfVhuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw
ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvOTQ0NDQ3ZmItYmFhZC0z
Mzk1LTkyNmMtYzM0MjJmMDFiNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh
NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm
ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1
Y2U3ZmZiODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+WQBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGzdh5AV64aapVumtHOFRJpE1VErL3WZAdBGd3P04yq9z0hWvhjl
qeb7+pBeu+a+Kj1BRmY/Vlzlps2/r8Ckd9khpH74IEaIA8e5c0h0n4/kaKKmJcd0
0sIvIFN24Sm9FhjFqLuOkCd6WGcVuq1kMZ5V8GMtM2O7MUt8HBVxnS1aCrfjelPQ
TOIh4R/zv8hidw67onUzZgh5uyjaUhcu4FXfqA4WKgyaVpH2Fyfvk0l/R9GYNHRb
FhaMjoM4btm0k/aCQ4bN7cJPYivVGdGrDze/ViEC0YOzNXs+6EcPOkeaqdTxhT26
d5EYn0L9Vg0X79fX4SGwTduozwkz7tCaE8c=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:37 2025 by rpki-client on console.sobornost.net