Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa
File: 81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa (raw, json)
Hash identifier: Uqj5lPFqLrIC9hdlxPCuJxbYjQ4yrv/rDM07oRgh2Wc=
Subject key identifier: CE:75:7F:CD:F6:3D:63:04:3D:90:51:C7:1E:C4:24:AD:10:E7:70:B0
Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e
Certificate serial: 010D0C9F432858495ABEE469F0934B76189F1260
Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 8018
IP address blocks: 162.251.169.0/24 maxlen: 24
162.251.170.0/24 maxlen: 24
162.251.171.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:e4:69:f0:93:4b:76:18:9f:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=758f1880-740f-448c-9c6c-13072d47478a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:97:e7:5b:61:86:8c:6f:47:f1:2a:54:f9:
c3:1a:60:f9:48:9c:ec:55:87:ad:44:00:98:d3:c2:
c8:10:46:01:6f:d9:f9:dd:59:87:0f:d8:c3:4e:b6:
4e:2a:fe:cd:7a:08:ff:d7:0c:4d:10:e7:ed:b1:38:
27:71:d9:54:10:a7:11:16:f1:aa:bd:28:8d:cb:7c:
fa:31:fb:c8:84:f1:51:06:9e:43:1f:b6:4f:64:ab:
b1:2c:92:cf:1b:f2:26:fa:49:41:e4:9b:9a:78:66:
87:26:42:5a:e6:f5:b8:40:eb:05:4c:af:5f:b6:55:
ca:de:e1:7c:09:88:20:46:ab:33:af:5b:5a:b4:fe:
02:c6:56:65:a0:65:33:e7:18:03:be:6f:44:c5:a0:
49:a9:af:a5:c2:ba:1b:9b:a0:35:f1:2c:60:ff:54:
1e:bf:dd:be:4d:78:cc:42:08:b9:a5:e8:ec:7e:c2:
8f:8d:14:c7:a9:c9:03:91:28:ee:fe:be:4e:24:36:
9d:50:49:17:95:64:46:73:5d:f4:ec:a8:97:10:71:
57:7d:39:51:46:a8:66:2d:32:53:59:24:12:6d:cb:
1c:06:80:35:23:26:e8:2d:0c:6c:34:a8:e8:73:62:
5a:7c:9f:51:ad:1b:bf:be:19:14:4f:b2:58:1b:5c:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:7F:CD:F6:3D:63:04:3D:90:51:C7:1E:C4:24:AD:10:E7:70:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl
X509v3 Authority Key Identifier:
keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.169.0-162.251.171.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:08:f8:22:b4:f5:18:7d:90:86:c7:86:1c:33:b3:c7:99:1f:
1f:ce:c5:ed:54:be:5b:47:90:4c:f6:ba:49:52:96:d1:02:c2:
a4:da:4c:4e:cc:61:91:86:63:16:0e:2c:58:11:db:88:84:c1:
c1:85:dd:40:db:b3:fa:36:90:76:1f:d9:a1:94:37:d5:65:2c:
1b:8b:d7:03:ca:d9:37:c1:15:ea:52:6d:a9:ca:79:0c:76:49:
b6:6d:ee:74:43:66:97:6b:b9:77:0e:48:d8:6f:3f:80:0d:30:
ca:60:68:6a:b1:86:ef:23:44:dc:7a:b2:0e:83:2b:ea:02:80:
1d:42:e2:27:91:2e:22:b1:03:ea:75:a1:b0:73:b9:c9:05:c4:
b9:63:77:a7:db:93:cf:18:ed:f8:31:43:2f:cd:77:67:1c:29:
13:3f:a9:dc:b0:17:85:16:bd:b2:76:9e:9c:96:d8:53:9d:09:
20:dc:e1:9b:e1:c1:6d:8c:5d:24:51:fb:d8:85:fe:01:7a:a5:
4a:51:d6:2d:3e:03:08:fa:1c:c7:d3:29:58:c9:a2:73:9c:1e:
d6:1d:6f:55:cd:9f:3b:39:36:98:aa:09:e5:16:06:b1:9b:f8:
57:df:b0:35:1f:c1:e6:06:91:77:fc:e0:76:6e:8e:8c:93:ab:
72:e4:35:39
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElavuRp8JNLdhifEmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3
OTFlMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
NzU4ZjE4ODAtNzQwZi00NDhjLTljNmMtMTMwNzJkNDc0NzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRyX51thhoxvR/EqVPnDGmD5SJzsVYetRACY
08LIEEYBb9n53VmHD9jDTrZOKv7Negj/1wxNEOftsTgncdlUEKcRFvGqvSiNy3z6
MfvIhPFRBp5DH7ZPZKuxLJLPG/Im+klB5JuaeGaHJkJa5vW4QOsFTK9ftlXK3uF8
CYggRqszr1tatP4CxlZloGUz5xgDvm9ExaBJqa+lwrobm6A18Sxg/1Qev92+TXjM
Qgi5pejsfsKPjRTHqckDkSju/r5OJDadUEkXlWRGc1307KiXEHFXfTlRRqhmLTJT
WSQSbcscBoA1IyboLQxsNKjoc2JafJ9RrRu/vhkUT7JYG1z7ywIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFM51f832PWMEPZBRxx7EJK0Q53CwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm
MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvODFhYTAxMmYtMjhhOS0z
OTVkLThkYzgtOGZmOWEzMWRiOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5
M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1
NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1
MWM0NTc5MWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACi+6kD
BAKi+6gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAkAj4IrT1GH2QhseGHDOzx5kfH87F7VS+W0eQTPa6SVKW
0QLCpNpMTsxhkYZjFg4sWBHbiITBwYXdQNuz+jaQdh/ZoZQ31WUsG4vXA8rZN8EV
6lJtqcp5DHZJtm3udENml2u5dw5I2G8/gA0wymBoarGG7yNE3HqyDoMr6gKAHULi
J5EuIrED6nWhsHO5yQXEuWN3p9uTzxjt+DFDL813ZxwpEz+p3LAXhRa9snaenJbY
U50JINzhm+HBbYxdJFH72IX+AXqlSlHWLT4DCPocx9MpWMmic5we1h1vVc2fOzk2
mKoJ5RYGsZv4V9+wNR/B5gaRd/zgdm6OjJOrcuQ1OQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:56 2025 by rpki-client on console.sobornost.net