Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa
File: 22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa (raw, json)
Hash identifier: NbyPKyGgpi/6yADcQTzM86io9VUywRtU9pryqH8XT9w=
Subject key identifier: 9D:A0:D7:21:4D:63:42:7C:E8:02:12:7D:07:AE:D8:1D:C6:97:93:2A
Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial: 010D0C9F43285848CEBA18DC6562A137963086C0
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa
Signing time: Fri 07 Feb 2025 21:18:22 +0000
ROA not before: Fri 07 Feb 2025 21:18:22 +0000
ROA not after: Thu 08 May 2025 20:18:22 +0000
asID: 2615
IP address blocks: 147.1.28.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ce:ba:18:dc:65:62:a1:37:96:30:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Validity
Not Before: Feb 7 21:18:22 2025 GMT
Not After : May 8 20:18:22 2025 GMT
Subject: CN=39e67c08-e677-447f-a521-7d25b791baf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:4e:14:13:8d:cf:7c:23:4a:9f:37:86:db:
7a:fd:40:2b:7a:ce:58:65:4c:a7:02:4c:c5:d1:33:
a5:ce:6f:1d:80:b8:fe:56:6f:e6:17:07:08:e9:ad:
84:1b:32:92:7f:1f:b1:7d:28:fc:13:1b:06:d5:c4:
d8:72:2a:33:e3:bc:3c:ae:4d:b5:26:de:95:91:65:
0d:2a:26:84:6a:bd:89:a7:d6:7b:5f:3a:e8:f8:80:
29:8d:1c:59:45:b1:4e:c6:4a:cf:65:92:03:0e:b9:
23:eb:84:c9:a5:80:84:09:6c:8e:88:91:3a:ed:b7:
fc:22:6e:4b:10:55:37:25:c2:25:25:42:96:b6:48:
d3:3e:f0:84:d5:e1:f1:a5:c6:9d:c0:b4:49:69:7d:
6d:db:73:66:f6:e3:31:67:f8:99:39:4d:f2:06:e9:
f0:36:47:23:88:be:bb:47:ba:e3:09:56:68:d2:c0:
63:79:a6:68:22:fb:ae:01:d1:d5:1a:70:3f:27:b2:
79:6e:8b:c2:44:fa:48:23:44:34:7d:8f:4d:12:b3:
35:c9:0f:85:6f:7f:cf:05:df:c5:a3:0c:9c:e1:c6:
fc:71:81:61:fb:3f:3d:1b:4d:fa:69:3d:7b:08:b1:
a9:e7:a4:af:46:40:08:2c:01:fb:f8:0e:1d:9f:ac:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:D7:21:4D:63:42:7C:E8:02:12:7D:07:AE:D8:1D:C6:97:93:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
X509v3 Authority Key Identifier:
keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
sbgp-ipAddrBlock: critical
IPv4:
147.1.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:67:3f:44:c9:53:f2:15:bb:2b:90:a5:05:96:5f:fb:a3:10:
f2:1f:a6:53:51:0e:87:2e:af:30:bc:6b:04:25:17:5b:32:4c:
77:ab:b5:51:56:91:43:3a:8e:99:2d:b4:78:4f:ac:41:76:7a:
24:d6:28:71:63:b3:e0:e5:60:6c:9b:0b:4c:bd:3a:db:bb:02:
4c:ac:7f:ce:d7:af:3d:fa:75:0f:c9:22:e3:ea:2b:e7:ef:c1:
62:a5:09:1b:03:10:58:46:28:0c:ba:9a:1d:35:30:20:1a:3f:
89:28:23:a6:2d:c5:ee:5f:9e:69:0d:3a:4f:2d:c9:fa:31:ee:
f4:6e:54:c3:d8:49:33:78:0e:b4:9f:c5:c0:fc:c6:29:61:af:
bf:d2:3d:00:2e:8b:1f:e5:a0:d0:18:dd:e3:4d:b6:23:17:80:
5c:ae:10:10:dc:fb:22:5f:83:09:9b:46:6a:5b:45:bd:24:52:
da:9a:1b:5d:c0:3e:b9:0c:71:1e:a0:4d:92:c9:61:84:eb:84:
ea:2c:ba:19:9a:18:37:ff:de:9e:af:4a:91:aa:45:8c:66:b8:
84:c0:7d:b2:60:13:e4:a1:97:3e:cb:c1:c3:8f:61:0d:48:13:
95:16:a9:21:3e:c0:14:94:ed:38:d3:6d:b8:59:85:3d:7d:3a:
9b:39:c9:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjOuhjcZWKhN5YwhsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI1MDIwNzIxMTgyMloXDTI1MDUwODIwMTgyMlowLzEtMCsGA1UEAxMk
MzllNjdjMDgtZTY3Ny00NDdmLWE1MjEtN2QyNWI3OTFiYWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVROFBONz3wjSp83htt6/UAres5YZUynAkzF
0TOlzm8dgLj+Vm/mFwcI6a2EGzKSfx+xfSj8ExsG1cTYcioz47w8rk21Jt6VkWUN
KiaEar2Jp9Z7Xzro+IApjRxZRbFOxkrPZZIDDrkj64TJpYCECWyOiJE67bf8Im5L
EFU3JcIlJUKWtkjTPvCE1eHxpcadwLRJaX1t23Nm9uMxZ/iZOU3yBunwNkcjiL67
R7rjCVZo0sBjeaZoIvuuAdHVGnA/J7J5bovCRPpII0Q0fY9NErM1yQ+Fb3/PBd/F
owyc4cb8cYFh+z89G036aT17CLGp56SvRkAILAH7+A4dn6xTOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2g1yFNY0J86AISfQeu2B3Gl5MqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMjJkMWNiMDctZGIyZC0z
YzdkLTgyMDItZTYzZmY3YThmMGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJnP0TJU/IVuyuQpQWWX/ujEPIfplNRDocurzC8awQlF1syTHertVFW
kUM6jpkttHhPrEF2eiTWKHFjs+DlYGybC0y9Otu7Akysf87Xrz36dQ/JIuPqK+fv
wWKlCRsDEFhGKAy6mh01MCAaP4koI6Ytxe5fnmkNOk8tyfox7vRuVMPYSTN4DrSf
xcD8xilhr7/SPQAuix/loNAY3eNNtiMXgFyuEBDc+yJfgwmbRmpbRb0kUtqaG13A
PrkMcR6gTZLJYYTrhOosuhmaGDf/3p6vSpGqRYxmuITAfbJgE+Shlz7LwcOPYQ1I
E5UWqSE+wBSU7TjTbbhZhT19Ops5yQs=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:06 2025 by rpki-client on console.sobornost.net