Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa
File: ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa (raw, json)
Hash identifier: pg8UgP4DVSrdhosTH3jF2rAG7KgA7PTYMYPDv/BG/3k=
Subject key identifier: E3:2F:5C:BE:E9:61:00:13:F4:DD:4D:D4:F1:16:F3:FE:0B:7B:0B:FF
Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial: 010D0C9F43285848DEA11DAA57FB373D40ED3800
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 14977
IP address blocks: 137.88.0.0/16 maxlen: 16
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:1d:aa:57:fb:37:3d:40:ed:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=6f68bfa6-a316-4052-9cc2-db25eced65fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:4a:87:be:ec:23:e6:aa:36:bb:80:a0:8a:
6a:c4:bd:69:ea:bf:bf:ab:81:a5:ac:a7:b9:95:14:
7c:f2:9a:7f:d6:38:dc:6e:de:ba:1b:f9:af:14:10:
a7:79:83:e7:01:ff:c0:bf:fb:d3:fc:db:f5:b5:d2:
9e:e9:83:84:39:55:48:b7:8e:e7:39:01:91:66:2b:
a5:c6:cd:56:b2:8d:24:74:eb:25:58:1c:d2:6e:7b:
ca:b0:0a:34:b2:7a:57:d9:2a:20:a8:9b:54:64:a9:
0a:80:49:91:80:06:a2:7a:41:f8:82:b1:6c:9b:ca:
44:65:08:3f:69:53:8d:28:a2:51:5e:91:80:72:b0:
e7:23:43:1a:05:35:40:45:96:2d:bf:b1:d5:74:08:
e8:69:04:53:4a:48:1e:2d:cf:74:b5:d4:93:6d:9e:
06:a8:bb:cf:fd:8f:a4:b5:74:26:42:e7:c9:45:35:
22:d5:67:76:4b:6f:62:5a:a2:6d:97:d7:6d:8b:b5:
c1:4f:09:b9:65:6a:89:c5:6d:81:8c:60:86:9a:ac:
65:d5:03:0a:fc:85:1e:2f:85:90:91:b0:b1:1d:0d:
b4:4e:ab:07:6e:bd:fa:3a:ed:e2:1c:95:38:83:d3:
87:5e:1e:71:33:95:e6:76:34:3a:ed:a2:61:c6:c6:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2F:5C:BE:E9:61:00:13:F4:DD:4D:D4:F1:16:F3:FE:0B:7B:0B:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
X509v3 Authority Key Identifier:
keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
sbgp-ipAddrBlock: critical
IPv4:
137.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:ac:85:d1:95:2d:7c:52:0c:1b:8a:20:24:7d:68:97:49:64:
3e:45:d8:02:14:bb:d9:22:f4:28:71:d7:73:bb:f7:f5:c1:3a:
26:cb:a3:f7:18:0c:df:4a:e8:d9:8c:26:56:92:b8:a6:d2:13:
2d:af:31:88:b3:56:bf:46:aa:bd:29:d2:f1:70:3e:75:a3:31:
5e:6f:c2:0e:35:eb:bc:c7:47:dc:13:f4:e5:bc:93:d8:3e:15:
08:b7:b6:74:1f:c1:4a:19:88:a1:2c:6a:21:c5:ed:d8:4a:31:
ff:97:73:90:cf:7b:7c:b1:46:fe:ca:c7:bd:90:5d:fc:8b:14:
b8:88:32:8e:f2:1a:2f:d6:3c:0c:a6:8d:e9:2b:44:51:10:26:
7d:fc:7a:33:45:9d:a0:ee:17:b8:e5:43:cb:5d:4d:16:6e:e0:
2c:e6:f2:b9:bc:8b:07:3c:a5:43:bb:d6:0a:7e:5e:32:60:fb:
35:99:07:83:14:fe:16:09:9c:ae:ce:7c:b7:8e:2a:6d:0f:fe:
34:40:bd:6e:48:74:46:0b:2d:cc:83:5e:96:f5:c3:9a:6a:71:
84:25:c9:c3:76:85:1d:55:20:2b:57:77:94:02:f2:99:85:d2:
fd:a6:65:0c:cb:df:c4:1c:fb:ee:59:73:7c:e7:ab:ce:52:4d:
28:04:06:e0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjeoR2qV/s3PUDtOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm
ZDhmMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
NmY2OGJmYTYtYTMxNi00MDUyLTljYzItZGIyNWVjZWQ2NWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcJKh77sI+aqNruAoIpqxL1p6r+/q4GlrKe5
lRR88pp/1jjcbt66G/mvFBCneYPnAf/Av/vT/Nv1tdKe6YOEOVVIt47nOQGRZiul
xs1Wso0kdOslWBzSbnvKsAo0snpX2SogqJtUZKkKgEmRgAaiekH4grFsm8pEZQg/
aVONKKJRXpGAcrDnI0MaBTVARZYtv7HVdAjoaQRTSkgeLc90tdSTbZ4GqLvP/Y+k
tXQmQufJRTUi1Wd2S29iWqJtl9dti7XBTwm5ZWqJxW2BjGCGmqxl1QMK/IUeL4WQ
kbCxHQ20TqsHbr36Ou3iHJU4g9OHXh5xM5XmdjQ67aJhxsaj0QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOMvXL7pYQAT9N1N1PEW8/4Lewv/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5
MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvY2U2OGE4OWItYTU0YS0z
NDZmLWE5YTItZDhkNmIyYzc5OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx
MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz
ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz
MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAa6yF0ZUtfFIMG4ogJH1ol0lkPkXYAhS72SL0KHHXc7v39cE6Jsuj9xgM
30ro2YwmVpK4ptITLa8xiLNWv0aqvSnS8XA+daMxXm/CDjXrvMdH3BP05byT2D4V
CLe2dB/BShmIoSxqIcXt2Eox/5dzkM97fLFG/srHvZBd/IsUuIgyjvIaL9Y8DKaN
6StEURAmffx6M0WdoO4XuOVDy11NFm7gLObyubyLBzylQ7vWCn5eMmD7NZkHgxT+
Fgmcrs58t44qbQ/+NEC9bkh0RgstzINelvXDmmpxhCXJw3aFHVUgK1d3lALymYXS
/aZlDMvfxBz77llzfOerzlJNKAQG4A==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:17 2025 by rpki-client on console.sobornost.net