Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa2f24d7-43cf-3c31-9b46-39cb3951cc39.roa
File: fa2f24d7-43cf-3c31-9b46-39cb3951cc39.roa (raw, json)
Hash identifier: SKSO0jSsnAXHHbfjBs8+o/Tt1z09QB7IlvwD7/GxtgY=
Subject key identifier: D9:61:8F:B8:05:37:E7:97:BA:BB:3D:66:A2:73:9B:B7:7E:C1:E6:96
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584972783F6D567F7D533AA9E780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa2f24d7-43cf-3c31-9b46-39cb3951cc39.roa
Signing time: Mon 07 Apr 2025 12:58:16 +0000
ROA not before: Mon 07 Apr 2025 12:58:16 +0000
ROA not after: Sun 06 Jul 2025 12:58:16 +0000
asID: 36352
IP address blocks: 172.111.215.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:78:3f:6d:56:7f:7d:53:3a:a9:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 7 12:58:16 2025 GMT
Not After : Jul 6 12:58:16 2025 GMT
Subject: CN=c9cd0302-48ff-4bcf-bda1-cd18a1c41929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:6a:6c:e9:86:67:b4:75:31:c4:c1:4e:73:
38:7b:eb:11:68:cc:cd:9d:41:14:dd:53:90:32:6b:
02:2e:39:9b:73:d1:a2:d6:91:fe:62:c3:30:93:c6:
66:c8:7d:0c:52:0a:f7:fd:6d:0c:a4:02:17:34:76:
44:1c:de:5f:c4:41:0a:c8:96:93:8d:b3:33:d2:b1:
94:cf:06:81:4b:60:02:11:75:8b:99:2d:86:dd:f5:
54:b0:e4:13:e6:6b:bf:99:b3:20:7b:7e:d0:eb:c3:
1d:0c:f7:97:4f:26:45:49:0b:2f:32:74:85:51:ae:
2e:77:7b:6d:8d:53:71:f6:7b:d2:a4:86:2a:b5:ba:
51:6e:ea:95:f4:15:b1:52:ea:6c:79:b6:1b:c6:89:
27:45:07:85:93:98:d8:30:04:1f:88:b6:bf:ec:ea:
c3:86:21:87:50:7b:7d:c4:54:82:15:d7:7e:84:a9:
6b:ed:74:f5:09:e5:5b:77:f7:26:a3:12:90:29:ef:
98:37:30:5c:d6:9b:de:96:eb:d4:03:3f:82:26:5a:
3a:c6:53:cf:fb:9f:c7:8c:58:7b:45:41:b7:e5:a1:
e0:24:20:55:e9:6f:ab:ab:47:43:08:0a:08:df:40:
10:28:f8:74:e4:73:83:31:54:e4:26:15:1e:bc:ac:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:8F:B8:05:37:E7:97:BA:BB:3D:66:A2:73:9B:B7:7E:C1:E6:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa2f24d7-43cf-3c31-9b46-39cb3951cc39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:2b:f6:1e:67:f6:97:0f:14:ea:24:cb:eb:d2:6c:9c:f8:38:
c0:a5:e5:3a:52:a0:96:4e:e4:2c:c7:10:26:77:03:69:04:47:
41:da:c2:83:35:e8:41:b3:33:47:bc:54:5e:dc:df:bd:f2:ea:
9e:ae:8d:d8:5a:58:6d:9a:4f:eb:fc:1f:df:ce:e9:6f:ae:04:
e2:6b:02:18:67:b8:81:e6:a0:35:d4:7c:76:d8:32:7f:88:d7:
ca:df:6b:eb:c0:62:20:fa:c1:12:29:cc:ef:10:79:d8:b4:2a:
2b:17:d5:fa:c7:9f:21:95:41:08:6b:59:c1:0f:7a:cf:6f:31:
34:0f:9b:b9:59:1e:3b:35:7e:50:65:2f:8f:23:8d:e8:03:f2:
36:72:64:8c:fe:a7:87:94:52:56:00:62:8a:2f:d6:38:34:3b:
d4:1a:36:88:e6:fd:c2:dd:d1:a6:a0:e2:0e:14:96:f3:8d:19:
e2:ab:a3:89:dd:07:af:6b:4d:40:af:8e:34:62:a1:25:c3:71:
5e:53:cb:6d:fe:53:4f:0b:73:3d:73:54:b2:27:98:80:8b:e2:
78:75:15:9c:4f:98:93:d0:25:de:36:0f:68:a7:cc:65:f7:28:
ed:3f:63:ec:75:5e:7a:a3:f8:a5:45:23:33:61:92:7c:12:a6:
21:2b:d2:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeD9tVn99Uzqp54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDQwNzEyNTgxNloXDTI1MDcwNjEyNTgxNlowLzEtMCsGA1UEAxMk
YzljZDAzMDItNDhmZi00YmNmLWJkYTEtY2QxOGExYzQxOTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoERqbOmGZ7R1McTBTnM4e+sRaMzNnUEU3VOQ
MmsCLjmbc9Gi1pH+YsMwk8ZmyH0MUgr3/W0MpAIXNHZEHN5fxEEKyJaTjbMz0rGU
zwaBS2ACEXWLmS2G3fVUsOQT5mu/mbMge37Q68MdDPeXTyZFSQsvMnSFUa4ud3tt
jVNx9nvSpIYqtbpRbuqV9BWxUupsebYbxoknRQeFk5jYMAQfiLa/7OrDhiGHUHt9
xFSCFdd+hKlr7XT1CeVbd/cmoxKQKe+YNzBc1pveluvUAz+CJlo6xlPP+5/HjFh7
RUG35aHgJCBV6W+rq0dDCAoI30AQKPh05HODMVTkJhUevKx36wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNlhj7gFN+eXurs9ZqJzm7d+weaWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmEyZjI0ZDctNDNjZi0z
YzMxLTliNDYtMzljYjM5NTFjYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8r9h5n9pcPFOoky+vSbJz4OMCl5TpSoJZO5CzHECZ3A2kER0HawoM1
6EGzM0e8VF7c373y6p6ujdhaWG2aT+v8H9/O6W+uBOJrAhhnuIHmoDXUfHbYMn+I
18rfa+vAYiD6wRIpzO8Qedi0KisX1frHnyGVQQhrWcEPes9vMTQPm7lZHjs1flBl
L48jjegD8jZyZIz+p4eUUlYAYoov1jg0O9QaNojm/cLd0aag4g4UlvONGeKro4nd
B69rTUCvjjRioSXDcV5Ty23+U08Lcz1zVLInmICL4nh1FZxPmJPQJd42D2inzGX3
KO0/Y+x1Xnqj+KVFIzNhknwSpiEr0ic=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:24 2025 by rpki-client on console.sobornost.net