Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/20dd2557-9e73-38c0-8e96-577d764bbbdf.roa
File: 20dd2557-9e73-38c0-8e96-577d764bbbdf.roa (raw, json)
Hash identifier: PZREaxpBpFTU967mTmgwWw0b5amVNK6UlAaFfw2/RZE=
Subject key identifier: BE:DB:A9:46:5B:46:57:54:F1:00:98:E0:1E:EE:03:F4:56:CA:02:EC
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584969C114C4E5D7B1E2BB5BED40
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/20dd2557-9e73-38c0-8e96-577d764bbbdf.roa
Signing time: Fri 04 Apr 2025 10:02:44 +0000
ROA not before: Fri 04 Apr 2025 10:02:44 +0000
ROA not after: Thu 03 Jul 2025 10:02:44 +0000
asID: 14114
IP address blocks: 157.133.160.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:69:c1:14:c4:e5:d7:b1:e2:bb:5b:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Apr 4 10:02:44 2025 GMT
Not After : Jul 3 10:02:44 2025 GMT
Subject: CN=77c65283-a4ff-4fd9-bf9b-68acfbb02321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:9f:63:20:79:1d:93:98:1d:60:2b:cc:5c:
91:1e:60:db:c0:3b:d5:bc:18:ca:ec:28:a0:e6:85:
3c:72:42:14:58:d0:3b:60:cc:3a:1d:c7:dd:37:62:
14:d3:65:98:3e:8d:be:3e:6a:93:c7:b5:86:99:b9:
6f:4e:6d:c3:d4:02:7d:93:a6:03:65:47:27:0f:24:
7d:31:51:3c:f3:75:ec:96:95:00:22:ed:ef:fb:46:
c6:e2:ea:88:4f:05:5b:cf:9e:6b:01:31:68:5b:dc:
ea:35:25:19:ef:35:1b:ec:58:5d:b8:78:94:e8:cc:
38:c2:73:ae:14:e6:98:38:45:b3:cc:00:fc:27:cc:
ac:93:e8:70:f7:31:58:9c:7a:a3:36:fe:78:49:8d:
86:5c:10:5b:b1:eb:27:dc:eb:12:df:e0:46:1e:d0:
cb:6f:83:f1:95:4f:d9:4f:7e:47:d6:00:51:26:af:
84:1e:2c:d6:e4:e5:82:b6:3c:2d:1f:d6:83:c9:e9:
82:d8:98:fe:91:15:0a:10:a3:fc:1f:e6:7b:b8:a1:
51:18:07:99:ff:7e:21:44:a4:f3:0c:8d:88:61:21:
e0:5d:57:8d:3b:ce:4e:e8:4d:17:e7:7d:a9:3f:92:
31:f5:fc:1d:df:9f:46:e3:65:6d:bf:e9:51:a1:45:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:A9:46:5B:46:57:54:F1:00:98:E0:1E:EE:03:F4:56:CA:02:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/20dd2557-9e73-38c0-8e96-577d764bbbdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:9e:19:e0:66:a9:3c:2a:eb:6a:3c:b7:2e:f3:e2:73:34:13:
58:06:ce:a9:fb:3b:2f:8c:0c:75:ce:66:1e:c2:0c:10:7c:37:
14:4f:6d:ed:9b:41:70:28:af:de:c8:9c:1c:a2:2e:9b:f3:d9:
72:4b:50:55:0a:91:ec:7c:56:07:83:1f:79:a2:92:25:a7:8e:
41:61:3b:ca:1d:30:f5:8f:b2:5e:e3:c0:44:fe:ea:54:26:ce:
1a:5b:e3:0a:72:c4:e9:cc:89:10:dd:8c:5d:b2:dd:ff:e7:90:
d4:ed:6d:71:a2:6b:08:eb:4f:de:23:d0:c9:61:02:b7:6e:9d:
0e:3f:18:f3:03:26:f5:3b:13:87:b2:2e:78:26:ec:28:48:27:
cc:ab:b9:d2:67:5f:23:1b:76:63:64:0d:93:27:88:4b:c3:02:
f1:c9:ab:75:5e:3f:f9:02:be:32:b7:fe:82:9b:aa:ae:f6:c3:
b7:d5:d5:d0:30:b6:54:4a:48:d4:8a:32:fd:e1:d1:cb:f0:c5:
7d:97:84:69:e8:b9:7e:09:d3:3e:8d:34:a2:a4:14:91:c8:78:
eb:2b:10:bc:5e:2f:86:68:e8:9d:f3:81:c2:66:99:90:cf:ad:
15:29:2e:97:c0:50:1c:5f:0f:43:eb:df:27:1e:96:44:fc:e4:
f7:bd:43:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElpwRTE5dex4rtb7UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI1MDQwNDEwMDI0NFoXDTI1MDcwMzEwMDI0NFowLzEtMCsGA1UEAxMk
NzdjNjUyODMtYTRmZi00ZmQ5LWJmOWItNjhhY2ZiYjAyMzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGmfYyB5HZOYHWArzFyRHmDbwDvVvBjK7Cig
5oU8ckIUWNA7YMw6HcfdN2IU02WYPo2+PmqTx7WGmblvTm3D1AJ9k6YDZUcnDyR9
MVE883XslpUAIu3v+0bG4uqITwVbz55rATFoW9zqNSUZ7zUb7FhduHiU6Mw4wnOu
FOaYOEWzzAD8J8ysk+hw9zFYnHqjNv54SY2GXBBbsesn3OsS3+BGHtDLb4PxlU/Z
T35H1gBRJq+EHizW5OWCtjwtH9aDyemC2Jj+kRUKEKP8H+Z7uKFRGAeZ/34hRKTz
DI2IYSHgXVeNO85O6E0X532pP5Ix9fwd359G42Vtv+lRoUWvlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7bqUZbRldU8QCY4B7uA/RWygLsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMjBkZDI1NTctOWU3My0z
OGMwLThlOTYtNTc3ZDc2NGJiYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWeGeBmqTwq62o8ty7z4nM0E1gGzqn7Oy+MDHXOZh7CDBB8NxRPbe2b
QXAor97InByiLpvz2XJLUFUKkex8VgeDH3mikiWnjkFhO8odMPWPsl7jwET+6lQm
zhpb4wpyxOnMiRDdjF2y3f/nkNTtbXGiawjrT94j0MlhArdunQ4/GPMDJvU7E4ey
Lngm7ChIJ8yrudJnXyMbdmNkDZMniEvDAvHJq3VeP/kCvjK3/oKbqq72w7fV1dAw
tlRKSNSKMv3h0cvwxX2XhGnouX4J0z6NNKKkFJHIeOsrELxeL4Zo6J3zgcJmmZDP
rRUpLpfAUBxfD0Pr3ycelkT85Pe9Qxg=
-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net