Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa
File: 8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa (raw, json)
Hash identifier: gyqvWvlpH5C2uNIPaViAm6q2JltjiOJ9cPj/j+K7JZM=
Subject key identifier: D5:F5:29:DB:EF:E0:F3:24:D9:FB:8C:AD:8A:F8:3B:BD:B2:E2:38:2B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819466903563D4411316C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 67.54.169.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:94:66:90:35:63:d4:41:13:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=028f1f37-5465-4e52-bd82-d6416a0e9f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:ad:64:db:8f:c2:32:b2:d2:96:aa:68:9b:
26:f3:dc:d7:9b:38:79:5b:02:1a:a1:42:24:3e:41:
99:93:67:bd:d0:0e:17:f7:a0:d4:8f:f0:3c:0b:3f:
49:bd:9d:1d:de:a9:e3:2f:bd:e6:83:93:6c:a7:ca:
56:16:8e:9a:08:08:93:bf:df:e7:ef:f0:f1:87:eb:
29:f2:b3:9d:53:40:0f:02:f5:f8:c9:3a:d5:e7:d4:
15:8f:3c:2b:31:72:b0:11:48:1b:d0:5a:e0:bb:b1:
09:18:94:32:01:67:fd:8c:c9:34:07:5c:86:f8:5b:
16:8f:42:b7:da:b4:9e:0d:a8:9a:a3:6b:15:dc:4d:
58:ff:bd:25:77:7e:1b:6d:69:2c:5c:fc:65:b3:32:
53:87:c0:ff:1c:c8:a3:ca:12:e5:62:c9:cb:b9:06:
a0:ba:e7:df:03:eb:3e:95:fc:55:45:db:16:30:b1:
73:2b:f9:e3:9f:bc:52:92:45:4b:f1:9c:be:4d:4f:
77:83:77:ca:9a:da:25:90:23:90:c6:db:61:60:5a:
cd:84:25:7a:b1:dd:11:e5:8c:95:a2:ee:0d:e2:ea:
87:e3:6a:2b:a7:00:79:7a:10:5d:ad:e5:e4:47:f4:
0b:40:17:b9:94:8e:54:36:91:75:8a:a8:eb:9f:de:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:29:DB:EF:E0:F3:24:D9:FB:8C:AD:8A:F8:3B:BD:B2:E2:38:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d9:80:bf:e9:6c:e8:bf:57:d3:37:f6:06:09:8c:ce:55:cb:
b6:5b:13:2d:df:18:c9:ba:45:68:b7:68:48:63:01:19:b7:b3:
5f:98:fd:50:34:c3:ce:cf:ac:a1:e4:a8:a8:4f:a6:1a:51:43:
91:53:a9:72:98:66:3f:6a:5c:fb:00:ba:fd:5a:17:d5:de:53:
d5:c1:c6:02:27:a9:f6:7a:cc:6c:0a:b3:67:fc:71:7d:f0:69:
27:b5:a7:6f:2b:32:70:d2:1b:cf:1a:e8:1c:e8:8e:b9:10:a4:
1b:56:11:c2:83:7c:5a:4e:4c:4e:3f:63:fe:ad:56:1e:fd:34:
5f:a1:85:ff:5e:9a:73:63:e8:68:72:ea:87:e6:12:99:54:f3:
0e:fb:d8:e7:ba:45:d9:e7:2f:7f:ee:59:fe:6b:dc:1c:60:0b:
ec:5b:fa:1e:74:9f:f0:d0:f5:c2:11:66:50:17:db:c6:9f:8d:
1c:4a:9e:72:bc:f3:a8:89:33:a7:06:1a:88:2e:06:72:78:bc:
95:97:a4:d5:bd:be:73:1f:d5:fc:0f:b3:f2:44:82:99:79:86:
e2:cc:f1:e5:5f:71:5c:dd:30:20:db:55:ab:3d:99:cd:c4:c8:
ab:fd:14:53:dd:fc:ed:ec:e1:8a:44:55:43:a9:ca:1f:b5:cd:
e1:0c:f4:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZRmkDVj1EETFsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDI4ZjFmMzctNTQ2NS00ZTUyLWJkODItZDY0MTZhMGU5ZjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/ytZNuPwjKy0paqaJsm89zXmzh5WwIaoUIk
PkGZk2e90A4X96DUj/A8Cz9JvZ0d3qnjL73mg5Nsp8pWFo6aCAiTv9/n7/Dxh+sp
8rOdU0APAvX4yTrV59QVjzwrMXKwEUgb0Frgu7EJGJQyAWf9jMk0B1yG+FsWj0K3
2rSeDaiao2sV3E1Y/70ld34bbWksXPxlszJTh8D/HMijyhLlYsnLuQaguuffA+s+
lfxVRdsWMLFzK/njn7xSkkVL8Zy+TU93g3fKmtolkCOQxtthYFrNhCV6sd0R5YyV
ou4N4uqH42orpwB5ehBdreXkR/QLQBe5lI5UNpF1iqjrn94pUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNX1Kdvv4PMk2fuMrYr4O72y4jgrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGYxN2Q4NjMtMmNlOC0z
MWY1LWJhZTEtZTlmYTdkOGIzYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzapMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7ZgL/pbOi/V9M39gYJjM5Vy7ZbEy3fGMm6RWi3aEhjARm3s1+Y/VA0
w87PrKHkqKhPphpRQ5FTqXKYZj9qXPsAuv1aF9XeU9XBxgInqfZ6zGwKs2f8cX3w
aSe1p28rMnDSG88a6BzojrkQpBtWEcKDfFpOTE4/Y/6tVh79NF+hhf9emnNj6Ghy
6ofmEplU8w772Oe6RdnnL3/uWf5r3BxgC+xb+h50n/DQ9cIRZlAX28afjRxKnnK8
86iJM6cGGoguBnJ4vJWXpNW9vnMf1fwPs/JEgpl5huLM8eVfcVzdMCDbVas9mc3E
yKv9FFPd/O3s4YpEVUOpyh+1zeEM9PA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:53 2025 by rpki-client on console.sobornost.net