Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa
File: 2f3ad59c-eada-3be0-952f-428ebee1b82d.roa (raw, json)
Hash identifier: yzZXmLe2q89Skh88h6LMrrFALn26hVLrTZxYbTJdrsk=
Subject key identifier: C8:FF:09:B9:E3:27:BE:E3:16:59:97:D0:19:0A:CD:33:DB:1D:03:01
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810C83EE4FDD35382044B8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.37.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:0c:83:ee:4f:dd:35:38:20:44:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=577dfe7d-8ffb-47aa-9d5f-77ac00f518c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:0b:2e:d2:7a:a6:e2:3d:a2:c4:38:44:5e:
eb:63:8f:3c:c1:eb:07:a3:e7:63:2c:73:bf:11:72:
60:c6:69:a9:c7:3b:8b:a9:1d:5d:4b:a1:99:4a:99:
cc:c8:9c:b2:c6:31:7f:a3:ab:ab:3d:f0:ff:48:1e:
84:88:be:53:ac:50:77:30:7a:e0:d8:ac:6c:b6:7e:
e9:09:26:45:7c:79:d1:17:15:be:8a:87:a1:81:46:
b7:1b:f6:e2:75:c2:9e:d4:86:a6:23:38:b6:09:cf:
89:73:56:68:52:cc:9a:f6:26:aa:89:6e:7f:34:99:
09:dd:54:25:bb:a4:ce:01:f2:a1:07:7b:35:d8:7a:
a5:42:c3:78:7c:c2:b0:12:25:54:56:5f:b3:62:3a:
a9:ce:27:5f:67:e0:67:8b:1a:8c:40:c1:fc:9f:3f:
37:8e:21:8e:62:38:b3:46:a8:dd:22:d7:64:4f:9a:
67:27:8a:c0:c7:a9:ec:99:a6:e6:34:af:8c:53:f3:
80:77:ab:48:b3:0f:70:d9:30:a5:6c:89:93:2a:ab:
f6:0e:d3:b5:57:e4:6b:ab:5a:ac:9b:70:db:03:72:
3d:fe:7c:55:ec:f5:4b:5c:e0:79:3a:dd:ef:42:4e:
8a:c2:29:bd:b4:61:fa:22:85:aa:9d:83:af:00:85:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:09:B9:E3:27:BE:E3:16:59:97:D0:19:0A:CD:33:DB:1D:03:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:37:68:16:43:a4:48:b3:fa:4a:3d:cd:00:0c:ab:c8:01:26:
c9:32:98:db:50:64:ff:e1:85:aa:04:78:b7:ab:22:2b:a4:44:
b2:0d:54:69:0a:55:81:df:65:51:0b:bb:f7:f9:f4:2d:53:74:
fb:5a:41:e3:d1:cd:a0:0d:be:b4:cb:36:25:d1:e9:b5:50:6f:
9d:f0:b7:ed:95:1d:8c:41:69:56:e2:20:53:44:6b:4c:93:54:
00:5c:9d:f2:aa:b7:d3:a6:6a:ff:52:2e:5a:17:1b:78:22:1b:
fe:d5:a4:c7:5c:6e:50:8a:0a:8c:7a:89:b8:d2:08:9c:40:e5:
4c:89:9f:b4:af:1a:e0:4d:31:ee:d8:7d:35:36:c8:02:59:9a:
8d:0c:db:d5:3a:a8:02:d1:d2:b0:86:69:e3:1a:71:6b:93:72:
6f:b0:db:c6:16:bb:a2:08:d3:ef:e3:19:5f:3e:60:09:b0:ae:
8f:86:29:52:58:5f:18:96:fa:08:0c:69:f3:66:d4:fc:0c:7a:
20:13:e9:97:1c:6d:de:dd:de:80:21:4d:00:55:53:f2:68:8e:
47:76:ed:d2:40:7d:99:9b:a6:46:65:0d:44:94:1c:1e:51:3d:
92:8a:cd:3b:33:47:3e:2b:35:e3:08:af:97:db:57:27:42:c9:
25:3f:77:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQyD7k/dNTggRLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTc3ZGZlN2QtOGZmYi00N2FhLTlkNWYtNzdhYzAwZjUxOGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6YLLtJ6puI9osQ4RF7rY488wesHo+djLHO/
EXJgxmmpxzuLqR1dS6GZSpnMyJyyxjF/o6urPfD/SB6EiL5TrFB3MHrg2Kxstn7p
CSZFfHnRFxW+ioehgUa3G/bidcKe1IamIzi2Cc+Jc1ZoUsya9iaqiW5/NJkJ3VQl
u6TOAfKhB3s12HqlQsN4fMKwEiVUVl+zYjqpzidfZ+BnixqMQMH8nz83jiGOYjiz
RqjdItdkT5pnJ4rAx6nsmabmNK+MU/OAd6tIsw9w2TClbImTKqv2DtO1V+Rrq1qs
m3DbA3I9/nxV7PVLXOB5Ot3vQk6Kwim9tGH6IoWqnYOvAIVhBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMj/CbnjJ77jFlmX0BkKzTPbHQMBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmYzYWQ1OWMtZWFkYS0z
YmUwLTk1MmYtNDI4ZWJlZTFiODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAw3aBZDpEiz+ko9zQAMq8gBJskymNtQZP/hhaoEeLerIiukRLINVGkK
VYHfZVELu/f59C1TdPtaQePRzaANvrTLNiXR6bVQb53wt+2VHYxBaVbiIFNEa0yT
VABcnfKqt9Omav9SLloXG3giG/7VpMdcblCKCox6ibjSCJxA5UyJn7SvGuBNMe7Y
fTU2yAJZmo0M29U6qALR0rCGaeMacWuTcm+w28YWu6II0+/jGV8+YAmwro+GKVJY
XxiW+ggMafNm1PwMeiAT6Zccbd7d3oAhTQBVU/Jojkd27dJAfZmbpkZlDUSUHB5R
PZKKzTszRz4rNeMIr5fbVydCySU/d88=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:41 2025 by rpki-client on console.sobornost.net