Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa
File: 4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa (raw, json)
Hash identifier: T7HGfFb7m+XI/aSSQ1DkRy8Jp3iVSjiiF4oHRe1t5Pw=
Subject key identifier: D4:92:04:52:62:87:F9:79:58:F0:89:C6:A4:CC:48:A4:B7:DB:B7:F0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848D376579CDBD849C51CD11D00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 53356
IP address blocks: 172.94.8.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:57:9c:db:d8:49:c5:1c:d1:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=d2aa605a-486a-4b83-aef1-be2ae592f12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:db:57:de:9c:db:f2:de:bf:49:75:4c:5c:
43:ba:0c:64:4d:d2:10:41:81:59:c7:42:41:5b:0e:
66:01:5c:23:cd:5b:cd:3a:b1:5f:fe:bd:61:c0:55:
2b:ee:97:16:96:18:65:53:ef:d3:f5:36:36:4d:89:
5d:f1:26:16:09:86:16:2a:62:ae:ad:9f:fc:97:e2:
71:33:c0:79:f4:c2:d1:38:27:8c:5b:8d:4f:96:5c:
93:40:de:28:3f:7d:a6:50:41:db:60:9a:a9:ef:8a:
3e:44:05:ad:a5:e0:98:e9:c7:ac:38:da:4f:f6:a2:
a8:40:e2:58:5e:e9:5c:84:1e:7f:75:a5:86:47:e6:
d8:20:a9:28:e7:2f:46:2c:eb:a6:93:44:b4:77:3f:
45:52:6d:74:e2:6e:8a:af:d7:48:74:0c:bf:6f:3a:
ac:5a:d9:7f:58:25:db:b9:a7:7a:6c:b8:e4:e5:c4:
47:4e:e9:86:33:d5:1b:96:14:60:82:31:d6:9d:4b:
49:21:a0:4d:78:46:c5:31:f5:84:c5:41:37:e4:30:
c0:b2:c8:a0:c4:22:68:d9:44:25:6c:1d:84:1d:bd:
45:f1:57:73:6f:3f:f3:d2:b2:a6:60:44:88:62:a6:
a9:5f:c3:a1:67:58:21:5d:de:40:75:f0:3d:da:25:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:04:52:62:87:F9:79:58:F0:89:C6:A4:CC:48:A4:B7:DB:B7:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:37:9d:2c:ce:a0:47:53:ea:4d:82:d9:43:4e:aa:a6:41:b1:
cf:70:47:94:46:4b:67:6d:0e:ec:57:98:f7:a2:d6:ba:e8:49:
13:9d:9d:86:a2:77:0d:e6:4d:25:e9:b7:ec:7e:05:6b:c2:df:
ab:c8:31:62:3b:ed:18:6f:9c:98:b0:35:55:bb:4f:98:c6:11:
ed:55:06:b2:f4:0a:c9:9a:1d:02:ed:79:e9:65:f7:b1:f0:74:
f5:08:a3:97:57:f0:e0:44:8a:82:6b:03:51:ef:a4:e1:1f:6e:
04:23:a1:5e:09:b4:87:a9:19:d6:1c:d4:34:d2:e4:87:10:f1:
d7:28:8c:55:33:c0:df:2e:9a:5c:c0:d4:83:29:86:35:43:38:
33:8d:c3:40:c9:68:b1:5e:92:e8:cd:48:58:a1:65:da:b8:6b:
de:12:d8:9a:e0:39:33:c7:5d:ad:89:9c:44:fa:5f:eb:ed:70:
09:d2:65:a6:b0:f3:ef:45:1a:8f:41:44:ac:c7:9c:e0:24:28:
e3:61:b7:fb:77:8c:49:98:bc:82:12:7a:19:6e:df:5f:ab:82:
1e:e9:25:01:b3:12:df:11:c7:96:0d:40:5b:39:b1:24:fe:73:
1a:20:d2:82:37:5b:c8:c7:20:06:33:28:96:d3:13:74:b6:e3:
c2:85:30:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlec29hJxRzRHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZDJhYTYwNWEtNDg2YS00YjgzLWFlZjEtYmUyYWU1OTJmMTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAXbV96c2/Lev0l1TFxDugxkTdIQQYFZx0JB
Ww5mAVwjzVvNOrFf/r1hwFUr7pcWlhhlU+/T9TY2TYld8SYWCYYWKmKurZ/8l+Jx
M8B59MLROCeMW41PllyTQN4oP32mUEHbYJqp74o+RAWtpeCY6cesONpP9qKoQOJY
XulchB5/daWGR+bYIKko5y9GLOumk0S0dz9FUm104m6Kr9dIdAy/bzqsWtl/WCXb
uad6bLjk5cRHTumGM9UblhRggjHWnUtJIaBNeEbFMfWExUE35DDAssigxCJo2UQl
bB2EHb1F8Vdzbz/z0rKmYESIYqapX8OhZ1ghXd5AdfA92iWyqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSSBFJih/l5WPCJxqTMSKS327fwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGZlMGUxYjQtZWViZi0z
ZjQ2LTg0MWItNzI5MWJhZDFkNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACo3nSzOoEdT6k2C2UNOqqZBsc9wR5RGS2dtDuxXmPei1rroSROdnYai
dw3mTSXpt+x+BWvC36vIMWI77RhvnJiwNVW7T5jGEe1VBrL0CsmaHQLteell97Hw
dPUIo5dX8OBEioJrA1HvpOEfbgQjoV4JtIepGdYc1DTS5IcQ8dcojFUzwN8umlzA
1IMphjVDODONw0DJaLFekujNSFihZdq4a94S2JrgOTPHXa2JnET6X+vtcAnSZaaw
8+9FGo9BRKzHnOAkKONht/t3jEmYvIISehlu31+rgh7pJQGzEt8Rx5YNQFs5sST+
cxog0oI3W8jHIAYzKJbTE3S248KFMPk=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:23 2025 by rpki-client on console.sobornost.net