Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6dd23fe-cefe-3ce8-8929-e330261fab09.roa
File: a6dd23fe-cefe-3ce8-8929-e330261fab09.roa (raw, json)
Hash identifier: N+DQRGfkb/dxP7uQldm2ch00lqht1/Vi/qCJfzl68XE=
Subject key identifier: 94:B3:EB:96:44:4E:EB:75:9A:D6:8C:BB:58:4C:E6:04:09:3D:15:D3
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848BFEBC5C8820D93EFDC014300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6dd23fe-cefe-3ce8-8929-e330261fab09.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 54113
IP address blocks: 157.5.112.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c5:c8:82:0d:93:ef:dc:01:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=41d0c2a8-1f34-40a3-a392-76f0701d3fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:5c:2c:83:10:f2:10:2b:52:18:78:3e:d2:
64:79:e0:bc:e9:1d:24:d1:eb:50:0e:ce:53:e2:d6:
d2:d1:e7:93:3d:14:57:b2:35:60:9e:14:82:8f:08:
ca:95:03:93:cb:47:0b:57:46:da:76:ee:e4:65:ed:
6f:f2:a0:0b:23:ed:ad:53:71:b3:25:c8:52:d9:da:
a5:e2:c8:7d:0e:66:f5:7b:63:6f:9c:17:a2:4a:12:
b5:03:ca:35:d0:62:fb:c4:81:86:2f:68:ed:62:81:
b6:ff:c6:dd:5d:c0:a3:a6:24:12:dc:4b:22:b1:33:
fc:06:78:9c:fe:25:8a:a2:9d:c7:0d:39:0e:f7:ba:
4b:be:32:e0:c1:f7:50:07:05:42:70:1b:c7:0f:cd:
2f:26:f3:34:21:29:40:a3:da:a2:d6:7d:62:30:7c:
50:45:fc:6a:af:2d:b1:30:48:fc:6b:f8:05:d3:a2:
11:64:6e:9f:30:32:5a:96:3d:65:63:33:5f:e1:87:
81:8f:58:f5:c5:23:6f:68:a7:f4:3c:56:c9:4a:10:
85:4e:57:c5:a5:70:fb:ca:f0:3b:59:de:47:85:3b:
7f:0a:71:6b:a0:11:d3:bd:30:3d:15:06:4f:ed:2b:
ff:86:4f:be:d6:80:14:b8:ff:21:b2:f9:3d:b6:9e:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:EB:96:44:4E:EB:75:9A:D6:8C:BB:58:4C:E6:04:09:3D:15:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6dd23fe-cefe-3ce8-8929-e330261fab09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:e7:ef:fd:69:be:4c:26:e4:ae:14:16:81:bb:0b:e7:aa:44:
32:6c:af:16:a3:ca:c1:26:0a:1f:35:bb:62:bc:03:40:76:43:
da:98:7c:8d:cd:cf:2c:f9:1e:5d:4a:e2:f9:d9:c7:73:24:0b:
70:e0:80:31:96:04:c1:6e:d3:f7:eb:38:61:af:76:a3:f0:99:
3f:2d:75:56:8a:27:62:02:b7:e1:2d:72:99:29:37:a8:06:24:
b2:4c:a8:c4:64:ba:72:9c:f4:b8:6c:40:6f:6d:1e:b0:68:19:
eb:26:a5:ef:1b:4b:fa:5a:73:62:7a:6e:48:19:ee:3d:3b:eb:
b5:ca:a7:5d:90:04:85:ea:55:e7:5c:50:7b:65:bd:ec:4d:0d:
43:a1:14:b8:b7:14:a3:8d:54:f4:00:b1:59:5e:f2:bc:02:a7:
67:d2:35:2e:c8:f0:14:37:fd:ac:94:3b:a1:b4:f3:70:25:3d:
56:6a:f5:56:bf:23:84:dc:60:4a:f1:6b:c2:07:b0:ff:59:db:
15:c4:96:8b:a0:e0:cd:49:7c:87:1f:28:1a:a7:cd:f2:43:f9:
f1:7f:bb:57:d3:14:4a:a3:be:ee:91:ec:c5:24:b2:a8:5d:74:
60:41:7f:5c:27:a6:44:54:a0:0d:a9:5c:31:b7:78:68:57:71:
92:77:1d:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68XIgg2T79wBQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NDFkMGMyYTgtMWYzNC00MGEzLWEzOTItNzZmMDcwMWQzZmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9FcLIMQ8hArUhh4PtJkeeC86R0k0etQDs5T
4tbS0eeTPRRXsjVgnhSCjwjKlQOTy0cLV0badu7kZe1v8qALI+2tU3GzJchS2dql
4sh9Dmb1e2NvnBeiShK1A8o10GL7xIGGL2jtYoG2/8bdXcCjpiQS3EsisTP8Bnic
/iWKop3HDTkO97pLvjLgwfdQBwVCcBvHD80vJvM0ISlAo9qi1n1iMHxQRfxqry2x
MEj8a/gF06IRZG6fMDJalj1lYzNf4YeBj1j1xSNvaKf0PFbJShCFTlfFpXD7yvA7
Wd5HhTt/CnFroBHTvTA9FQZP7Sv/hk++1oAUuP8hsvk9tp7gvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJSz65ZETut1mtaMu1hM5gQJPRXTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTZkZDIzZmUtY2VmZS0z
Y2U4LTg5MjktZTMzMDI2MWZhYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnn7/1pvkwm5K4UFoG7C+eqRDJsrxajysEmCh81u2K8A0B2Q9qYfI3N
zyz5Hl1K4vnZx3MkC3DggDGWBMFu0/frOGGvdqPwmT8tdVaKJ2ICt+EtcpkpN6gG
JLJMqMRkunKc9LhsQG9tHrBoGesmpe8bS/pac2J6bkgZ7j0767XKp12QBIXqVedc
UHtlvexNDUOhFLi3FKONVPQAsVle8rwCp2fSNS7I8BQ3/ayUO6G083AlPVZq9Va/
I4TcYErxa8IHsP9Z2xXEloug4M1JfIcfKBqnzfJD+fF/u1fTFEqjvu6R7MUksqhd
dGBBf1wnpkRUoA2pXDG3eGhXcZJ3HcA=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:58 2025 by rpki-client on console.sobornost.net