Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa
File: 1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa (raw, json)
Hash identifier: dRwq75WQ6YwrfnTLTSO806tILXSOzvGCS9RRLfe8Mdk=
Subject key identifier: 25:E4:B0:06:AA:30:72:0E:EB:58:7A:66:39:04:5C:30:AD:72:2B:FB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD2104F73B3D0385D7D9A400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397236
IP address blocks: 156.154.131.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:21:04:f7:3b:3d:03:85:d7:d9:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=f9bb4eba-cf41-4b1f-bc37-74f946ea7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:5b:7f:b5:15:90:d4:cf:d0:46:57:a6:fe:
37:b2:19:12:49:92:f6:c5:40:59:3f:2f:15:f1:82:
5e:8d:8f:a3:22:b5:fb:39:98:3c:04:02:a7:98:5b:
51:dd:0f:f6:f8:7a:de:65:0a:00:9e:33:6a:8f:ea:
fc:80:ca:c6:f2:19:e6:ec:63:b1:72:cc:72:92:87:
b6:96:6e:70:aa:ff:6f:38:b5:14:26:97:4b:b4:7a:
83:93:d5:60:72:0a:4d:32:e2:6f:97:b1:73:32:6d:
d0:e5:8e:ab:a2:91:48:b9:17:38:53:b6:a4:0f:2c:
e4:18:f4:dc:57:26:13:be:ce:e9:b3:5e:d6:13:df:
ec:49:5b:7c:0e:5a:47:0d:58:a3:7d:c3:a6:84:ac:
c8:2d:53:51:ee:ba:52:dd:d5:7b:ec:87:9c:22:8d:
1f:e8:20:cb:1c:d2:43:81:58:bf:20:27:0c:7f:5d:
c7:49:d8:3b:1a:2b:65:ef:4f:a7:18:64:eb:b3:87:
97:d0:90:d5:4a:64:f4:93:72:6f:36:a1:30:75:73:
cf:6a:61:31:b8:87:62:0a:0a:4b:80:92:98:ff:9c:
28:1b:94:4b:7e:5f:2b:4f:6b:40:f8:49:58:3e:a2:
10:d5:3d:22:f4:d3:60:49:7e:ec:b1:16:a1:72:e3:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:B0:06:AA:30:72:0E:EB:58:7A:66:39:04:5C:30:AD:72:2B:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:b2:c9:8b:1f:ca:00:a7:ae:6a:e9:58:05:d7:20:82:fd:e3:
6d:c0:2a:23:cf:27:77:47:e0:89:45:2c:2b:f3:21:6f:c9:8f:
66:10:8c:4e:54:fc:66:e4:7f:78:85:08:f3:cb:e9:a6:8c:fd:
4c:75:23:fe:34:f8:dc:62:10:79:e4:e6:3e:9e:d4:ce:53:e9:
85:85:18:36:81:fa:b2:3b:37:cd:a6:df:69:91:59:c0:23:5b:
bc:a1:93:3d:0e:b3:b3:cf:3c:e5:a4:db:75:8d:96:9c:06:33:
bb:36:e3:6a:74:ca:6f:be:11:0a:65:01:45:6c:45:33:f3:61:
36:75:e2:58:da:ad:a0:b0:2e:0d:97:b1:ee:a1:cd:79:2d:90:
55:4e:b0:12:4b:36:1e:60:d8:3d:9c:8d:70:3c:83:3c:77:ad:
35:bd:a2:c9:fe:7a:84:d5:c3:9f:c6:86:ee:5e:d4:25:04:7a:
1d:fe:ac:ee:fa:9e:89:9a:ed:fb:c0:50:3a:36:1f:55:ef:aa:
fa:5f:30:0d:87:05:ac:f6:a2:1b:15:de:4c:d0:0a:a7:9f:ac:
c3:b9:b2:bf:61:54:af:1b:f6:a7:8a:85:86:da:df:94:94:8b:
6f:2b:0a:85:22:48:84:1d:9e:62:46:bd:2f:5f:47:fb:6d:60:
6f:fd:62:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQT3Oz0DhdfZpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
ZjliYjRlYmEtY2Y0MS00YjFmLWJjMzctNzRmOTQ2ZWE3Nzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBdbf7UVkNTP0EZXpv43shkSSZL2xUBZPy8V
8YJejY+jIrX7OZg8BAKnmFtR3Q/2+HreZQoAnjNqj+r8gMrG8hnm7GOxcsxykoe2
lm5wqv9vOLUUJpdLtHqDk9VgcgpNMuJvl7FzMm3Q5Y6ropFIuRc4U7akDyzkGPTc
VyYTvs7ps17WE9/sSVt8DlpHDVijfcOmhKzILVNR7rpS3dV77IecIo0f6CDLHNJD
gVi/ICcMf13HSdg7Gitl70+nGGTrs4eX0JDVSmT0k3JvNqEwdXPPamExuIdiCgpL
gJKY/5woG5RLfl8rT2tA+ElYPqIQ1T0i9NNgSX7ssRahcuPK/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXksAaqMHIO61h6ZjkEXDCtciv7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWRkYzAxMWYtMjVhNS0z
NWJlLWJhZTYtNjFhM2FhNGE5MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqyyYsfygCnrmrpWAXXIIL9423AKiPPJ3dH4IlFLCvzIW/Jj2YQjE5U
/Gbkf3iFCPPL6aaM/Ux1I/40+NxiEHnk5j6e1M5T6YWFGDaB+rI7N82m32mRWcAj
W7yhkz0Os7PPPOWk23WNlpwGM7s242p0ym++EQplAUVsRTPzYTZ14ljaraCwLg2X
se6hzXktkFVOsBJLNh5g2D2cjXA8gzx3rTW9osn+eoTVw5/Ghu5e1CUEeh3+rO76
noma7fvAUDo2H1XvqvpfMA2HBaz2ohsV3kzQCqefrMO5sr9hVK8b9qeKhYba35SU
i28rCoUiSIQdnmJGvS9fR/ttYG/9Ytc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:33 2025 by rpki-client on console.sobornost.net