Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa
File: ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa (raw, json)
Hash identifier: p3EDCpg7DOsHenpw3Xq35hLKsToL2kf1Mwxx6PgSuOY=
Subject key identifier: CC:59:D8:87:B3:9F:05:66:43:4D:41:0E:44:4D:0F:6B:85:88:46:5B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF1EB99AF7772AD3C9CFA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397238
IP address blocks: 156.154.100.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:1e:b9:9a:f7:77:2a:d3:c9:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=fada279b-2035-4aa2-bb1f-5ae6d715de2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:66:1b:97:f5:25:c8:e2:8b:6f:89:d7:4b:
65:54:86:e8:cc:40:a5:fb:fe:ff:77:ba:57:f2:25:
27:62:84:c2:da:68:9c:ab:a7:51:db:c6:22:ca:75:
6a:f3:31:90:2c:b7:40:39:20:02:a2:27:2a:f4:49:
96:86:98:19:93:9c:00:59:28:0d:b4:41:3e:cd:66:
99:b9:0f:b2:db:f3:7a:d0:2d:a7:cb:79:bb:93:f5:
a5:e7:b4:26:a4:bd:99:29:b7:28:a1:f2:61:2a:87:
01:d4:00:76:47:ec:e9:42:84:9b:85:87:13:b9:a2:
de:5d:29:fb:b3:20:28:30:b3:f0:9d:b0:28:95:6b:
9c:78:6d:89:a8:f5:03:d9:23:de:9d:95:12:cf:29:
06:3b:6f:34:43:c8:52:c9:7d:63:cf:d9:95:41:a3:
57:62:99:2a:5c:da:32:57:55:d9:2b:ed:c8:3e:af:
c4:d0:e3:ef:14:7a:90:8f:94:31:2c:57:a6:14:14:
bf:27:fa:88:bb:24:48:b8:df:54:ff:9f:1d:19:c2:
46:f1:0b:3f:ff:02:96:8c:23:69:b4:fa:13:37:6e:
43:05:97:15:1e:9c:86:9e:b0:33:07:24:5c:8b:48:
c5:a2:ec:4e:9c:1e:7a:8b:f2:e8:d8:f8:63:2b:46:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:D8:87:B3:9F:05:66:43:4D:41:0E:44:4D:0F:6B:85:88:46:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecfd10cd-b063-3102-a8f4-9456d8f10d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:8f:0a:8b:4b:ed:f7:94:dd:b5:eb:f9:1d:64:d0:ab:7d:fd:
e7:8c:00:af:41:ab:eb:a4:7d:0b:d4:62:bb:55:6f:71:c9:22:
d2:f3:d5:5e:53:f1:2e:07:30:15:7c:9b:69:ff:dc:44:4a:6a:
ff:d8:aa:65:e6:ae:72:ae:08:01:50:81:8c:bc:df:61:08:f2:
38:d8:9e:0d:b7:30:09:16:e5:63:2d:4a:ec:f7:cd:58:41:8a:
49:c0:73:74:1a:87:3e:65:67:83:06:d3:63:a5:dc:b5:05:52:
4e:e3:7c:51:66:05:0f:d6:97:ab:dd:7a:aa:e2:9e:c5:6f:46:
ab:13:54:55:df:b4:c0:60:48:29:01:de:a4:38:26:fa:c8:b9:
ca:9b:c6:4b:e7:9a:38:8e:ca:18:c1:59:aa:83:d9:9a:59:a4:
c2:fb:5b:78:76:df:d2:54:71:b3:23:1a:56:b5:3e:7c:78:a3:
7b:c0:75:b5:72:cf:e4:7d:c1:a0:2b:8c:5f:1b:3e:d4:2b:98:
21:94:3a:94:97:1a:58:67:36:8e:f2:0b:91:e7:89:04:d3:8c:
8d:ca:0f:fc:74:b1:de:c1:53:04:c7:c1:30:87:c5:d4:eb:1b:
69:6f:64:69:73:ee:01:ad:a9:74:18:89:31:44:61:d8:b2:43:
ef:d2:dd:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrx65mvd3KtPJz6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
ZmFkYTI3OWItMjAzNS00YWEyLWJiMWYtNWFlNmQ3MTVkZTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLZmG5f1Jcjii2+J10tlVIbozECl+/7/d7pX
8iUnYoTC2micq6dR28YiynVq8zGQLLdAOSACoicq9EmWhpgZk5wAWSgNtEE+zWaZ
uQ+y2/N60C2ny3m7k/Wl57QmpL2ZKbcoofJhKocB1AB2R+zpQoSbhYcTuaLeXSn7
syAoMLPwnbAolWuceG2JqPUD2SPenZUSzykGO280Q8hSyX1jz9mVQaNXYpkqXNoy
V1XZK+3IPq/E0OPvFHqQj5QxLFemFBS/J/qIuyRIuN9U/58dGcJG8Qs//wKWjCNp
tPoTN25DBZcVHpyGnrAzByRci0jFouxOnB56i/Lo2PhjK0Y12QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxZ2IeznwVmQ01BDkRND2uFiEZbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWNmZDEwY2QtYjA2My0z
MTAyLWE4ZjQtOTQ1NmQ4ZjEwZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCPCotL7feU3bXr+R1k0Kt9/eeMAK9Bq+ukfQvUYrtVb3HJItLz1V5T
8S4HMBV8m2n/3ERKav/YqmXmrnKuCAFQgYy832EI8jjYng23MAkW5WMtSuz3zVhB
iknAc3Qahz5lZ4MG02Ol3LUFUk7jfFFmBQ/Wl6vdeqrinsVvRqsTVFXftMBgSCkB
3qQ4JvrIucqbxkvnmjiOyhjBWaqD2ZpZpML7W3h239JUcbMjGla1Pnx4o3vAdbVy
z+R9waArjF8bPtQrmCGUOpSXGlhnNo7yC5HniQTTjI3KD/x0sd7BUwTHwTCHxdTr
G2lvZGlz7gGtqXQYiTFEYdiyQ+/S3cE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:42 2025 by rpki-client on console.sobornost.net