Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa
File: 8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa (raw, json)
Hash identifier: IwiXqHVdRanS7jLNaWeMQJ4MG0P7Q/0bk7vJAkiG3oc=
Subject key identifier: 27:33:83:B3:60:35:65:EF:85:D7:D7:4B:57:BE:8E:47:B9:E4:01:FD
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490CB16C3A93A6F96E251B9780
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 213246
IP address blocks: 131.153.140.0/24 maxlen: 32
131.153.141.0/24 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6c:3a:93:a6:f9:6e:25:1b:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=5f50fdc8-b6a4-401e-92eb-b206f5bc3fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:48:13:02:5f:18:37:0d:d8:e2:f9:7c:6d:
b6:d3:6a:fc:21:5f:dc:d2:b5:98:02:e0:44:bd:dd:
e4:a3:85:ad:36:9a:a7:54:a9:7e:f1:39:74:ef:9a:
ab:bd:f0:3b:3f:57:db:75:8e:59:20:46:10:d4:f7:
af:04:73:1b:e1:31:6e:3a:32:ca:ac:c7:f9:21:81:
34:50:8f:02:ed:85:3b:31:5a:92:49:76:ed:ae:ed:
07:27:7f:55:f0:0a:0a:7c:5e:67:20:4d:d7:5b:43:
9a:38:1f:89:1a:3a:3d:9e:e2:e0:f6:54:24:2e:b0:
dd:58:15:ec:81:56:90:e2:9a:ed:f0:51:6f:ee:a2:
f3:df:1d:2f:9a:7a:3b:e1:79:94:31:23:9d:41:ea:
86:fa:cc:0c:1a:72:3f:b1:de:d4:11:9c:10:47:4e:
b4:bb:d5:64:78:2a:9f:c6:a6:90:78:e9:db:e6:2b:
1a:b6:a9:5d:9f:c1:51:41:64:c2:d0:fe:9a:06:58:
85:27:51:a7:bd:5f:4e:97:9b:47:27:ba:a1:a0:b1:
e1:b0:6e:ed:55:e7:86:04:03:f5:a3:da:a5:e4:12:
c6:56:48:05:d5:6b:44:df:8b:60:9f:65:80:98:a2:
ba:87:40:21:23:37:8c:e8:4d:d9:11:2f:70:68:9d:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:33:83:B3:60:35:65:EF:85:D7:D7:4B:57:BE:8E:47:B9:E4:01:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:84:4b:6e:6f:ac:5f:f1:a4:8a:28:57:2a:2f:be:b7:d6:c0:
66:8f:b3:c9:bb:28:71:3e:d4:6e:c9:3b:5c:db:7e:24:e7:81:
02:c4:cf:43:f8:43:d9:94:5c:c4:0c:bb:e5:48:30:f1:b2:a3:
b3:c1:e2:1d:6e:2b:03:10:8d:62:d1:5c:0d:c7:1f:9e:1e:c8:
40:c5:eb:ca:86:da:b7:10:ac:52:2c:79:66:47:51:f8:5b:ec:
e3:16:70:eb:16:60:00:c3:27:d0:a1:20:97:82:1e:00:6f:15:
f1:ce:b4:a7:7c:d8:f6:f5:90:bd:0e:de:03:c0:a4:cb:73:0c:
b5:00:36:10:f7:0a:75:96:5b:22:7f:b9:c8:52:16:8f:e1:a1:
77:6b:30:b5:ec:46:b9:4a:99:e8:98:1c:4a:f4:b2:cb:5f:a0:
01:ce:af:cf:af:9f:f2:cc:97:7a:a6:dc:9b:a5:4b:7b:83:27:
f4:12:51:77:4a:e4:59:f3:e0:fb:a2:b9:f6:22:43:c3:0f:ad:
75:23:fb:95:0d:83:5e:c5:31:46:15:6f:65:86:b9:a7:a3:72:
cc:9b:54:7d:a1:59:83:7e:da:34:b2:26:27:8d:89:bf:6d:97:
8b:bc:62:6f:3b:01:11:b4:20:7b:66:a3:6c:f0:c5:4f:3b:11:
88:7b:14:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWw6k6b5biUbl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
NWY1MGZkYzgtYjZhNC00MDFlLTkyZWItYjIwNmY1YmMzZmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cVIEwJfGDcN2OL5fG2202r8IV/c0rWYAuBE
vd3ko4WtNpqnVKl+8Tl075qrvfA7P1fbdY5ZIEYQ1PevBHMb4TFuOjLKrMf5IYE0
UI8C7YU7MVqSSXbtru0HJ39V8AoKfF5nIE3XW0OaOB+JGjo9nuLg9lQkLrDdWBXs
gVaQ4prt8FFv7qLz3x0vmno74XmUMSOdQeqG+swMGnI/sd7UEZwQR060u9VkeCqf
xqaQeOnb5isatqldn8FRQWTC0P6aBliFJ1GnvV9Ol5tHJ7qhoLHhsG7tVeeGBAP1
o9ql5BLGVkgF1WtE34tgn2WAmKK6h0AhIzeM6E3ZES9waJ2A/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCczg7NgNWXvhdfXS1e+jke55AH9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOGEwMjY5OGYtZTY2Zi0z
ZmQ1LWE5ZDAtOGYyODNiMTNiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5mMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCES25vrF/xpIooVyovvrfWwGaPs8m7KHE+1G7JO1zbfiTngQLEz0P4
Q9mUXMQMu+VIMPGyo7PB4h1uKwMQjWLRXA3HH54eyEDF68qG2rcQrFIseWZHUfhb
7OMWcOsWYADDJ9ChIJeCHgBvFfHOtKd82Pb1kL0O3gPApMtzDLUANhD3CnWWWyJ/
uchSFo/hoXdrMLXsRrlKmeiYHEr0sstfoAHOr8+vn/LMl3qm3JulS3uDJ/QSUXdK
5Fnz4PuiufYiQ8MPrXUj+5UNg17FMUYVb2WGuaejcsybVH2hWYN+2jSyJieNib9t
l4u8Ym87ARG0IHtmo2zwxU87EYh7FIY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:26 2025 by rpki-client on console.sobornost.net