Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4470f9b8-27e9-3686-af6f-7e610670a58c.roa
File: 4470f9b8-27e9-3686-af6f-7e610670a58c.roa (raw, json)
Hash identifier: HGJxa2VQF/iVawvHn7M+rPeSYz/StRPvDX8XziYlkqk=
Subject key identifier: A6:88:30:ED:1B:00:79:35:E4:19:0D:92:FB:17:E5:3B:C8:E1:BA:4A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584940397702D2032670A7B09300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4470f9b8-27e9-3686-af6f-7e610670a58c.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 397215
IP address blocks: 156.154.176.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:77:02:d2:03:26:70:a7:b0:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=5b5fb6de-84ce-430a-8cb5-d2c84417c4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:b7:12:79:21:e7:72:3f:cc:52:d3:0e:cc:
86:0d:0e:bc:a3:00:32:75:74:cf:72:14:84:e1:4d:
cf:a7:23:7a:be:4d:57:c2:05:b1:ef:1a:dd:b8:b4:
0b:d1:90:4b:78:bf:95:8c:7b:9b:ac:52:26:79:ad:
3e:23:f0:8f:08:aa:c8:81:86:d9:27:e3:cd:2e:d1:
b7:4f:ac:6a:06:81:f3:e1:72:87:ca:44:f0:dc:36:
c3:f1:8b:8f:51:d3:99:ce:54:4d:90:41:e3:ec:1f:
57:d7:40:13:80:a0:ae:84:91:ec:7e:c9:7c:21:3e:
af:f1:40:54:de:62:60:23:65:65:6c:a1:5e:d5:34:
5b:66:cc:fc:4e:5d:77:66:13:59:d0:ac:12:2b:b3:
dd:06:c9:c3:dc:7e:23:1c:c2:4b:24:45:a5:28:d1:
21:a5:03:7e:db:5a:a6:af:fb:ca:ba:ff:35:8f:37:
55:f8:33:36:51:cd:d6:08:66:a2:93:ae:4e:29:9a:
71:94:20:dc:8a:30:57:9e:1d:6e:30:e9:9b:8e:53:
ae:b6:74:90:2d:af:55:e7:59:66:8e:a9:a6:e4:4c:
6c:67:a3:8a:e5:db:73:df:ac:6d:46:1b:67:30:e9:
53:18:92:a9:10:ba:d5:91:64:fc:0c:0f:0b:bc:e7:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:88:30:ED:1B:00:79:35:E4:19:0D:92:FB:17:E5:3B:C8:E1:BA:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4470f9b8-27e9-3686-af6f-7e610670a58c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:52:a7:ef:03:d6:72:46:00:db:e9:7b:b1:c7:a1:83:28:e2:
af:53:66:68:d0:b1:c4:ef:a9:16:2a:0d:ba:4e:29:27:6c:67:
d4:89:b9:1b:6b:d3:ee:9a:4f:1e:07:c8:99:4d:b6:ad:0c:52:
20:7f:b9:6c:4a:dd:b1:79:fb:63:6c:87:61:da:02:7b:9b:9c:
bf:db:b7:93:6b:2c:b6:ba:aa:ca:58:dc:8e:eb:e7:6c:91:eb:
50:a1:21:0d:0e:1e:c7:2e:6f:dd:57:c8:e8:30:ec:c4:f6:af:
ca:7e:43:f0:28:e4:a7:ca:05:35:2e:e5:1c:86:31:68:eb:28:
87:6c:70:ea:e6:76:6f:91:cf:e7:07:1e:68:53:37:8a:39:3a:
d2:0f:b0:04:04:c2:33:ce:57:95:ba:5a:a9:d3:b4:20:9c:d2:
34:69:7b:8a:9d:d1:1b:89:45:35:d9:7f:07:9a:65:78:ac:87:
78:7c:30:13:f4:0e:6a:ef:59:28:96:c3:d1:f2:e9:d5:06:1e:
a8:9b:ee:62:5e:1d:96:86:f4:a8:f3:aa:16:95:74:36:b8:5d:
ed:f8:f7:4c:9b:c7:46:c1:c0:43:ad:df:cf:7d:fa:b1:a5:2d:
37:f1:cf:e5:cb:06:8c:16:8b:15:15:54:75:f6:fb:b2:69:19:
cc:ee:66:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXcC0gMmcKewkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
NWI1ZmI2ZGUtODRjZS00MzBhLThjYjUtZDJjODQ0MTdjNGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7u3Enkh53I/zFLTDsyGDQ68owAydXTPchSE
4U3PpyN6vk1XwgWx7xrduLQL0ZBLeL+VjHubrFImea0+I/CPCKrIgYbZJ+PNLtG3
T6xqBoHz4XKHykTw3DbD8YuPUdOZzlRNkEHj7B9X10ATgKCuhJHsfsl8IT6v8UBU
3mJgI2VlbKFe1TRbZsz8Tl13ZhNZ0KwSK7PdBsnD3H4jHMJLJEWlKNEhpQN+21qm
r/vKuv81jzdV+DM2Uc3WCGaik65OKZpxlCDcijBXnh1uMOmbjlOutnSQLa9V51lm
jqmm5ExsZ6OK5dtz36xtRhtnMOlTGJKpELrVkWT8DA8LvOdYzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaIMO0bAHk15BkNkvsX5TvI4bpKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDQ3MGY5YjgtMjdlOS0z
Njg2LWFmNmYtN2U2MTA2NzBhNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtSp+8D1nJGANvpe7HHoYMo4q9TZmjQscTvqRYqDbpOKSdsZ9SJuRtr
0+6aTx4HyJlNtq0MUiB/uWxK3bF5+2Nsh2HaAnubnL/bt5NrLLa6qspY3I7r52yR
61ChIQ0OHscub91XyOgw7MT2r8p+Q/Ao5KfKBTUu5RyGMWjrKIdscOrmdm+Rz+cH
HmhTN4o5OtIPsAQEwjPOV5W6WqnTtCCc0jRpe4qd0RuJRTXZfweaZXish3h8MBP0
DmrvWSiWw9Hy6dUGHqib7mJeHZaG9KjzqhaVdDa4Xe3490ybx0bBwEOt3899+rGl
LTfxz+XLBowWixUVVHX2+7JpGczuZjs=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:35 2025 by rpki-client on console.sobornost.net