Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/273db7a5-9c03-359a-a2e5-4a4b553e8662.roa
File: 273db7a5-9c03-359a-a2e5-4a4b553e8662.roa (raw, json)
Hash identifier: SWdksvy2mpz6dIYey1onYWivEbHnNp2XdRlUdzZkFLg=
Subject key identifier: 49:20:D7:36:89:64:C9:EA:C2:A9:FB:CC:76:E1:AB:71:E3:66:64:A0
Certificate issuer: /CN=a1ebd94e-8686-4da0-85d9-3d3935cc3951
Certificate serial: 010D0C9F4328584961B9899C26A36AD4FA962880
Authority key identifier: A4:7E:E4:B9:97:20:3A:EC:F4:91:29:17:72:30:ED:E6:50:B9:AE:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/273db7a5-9c03-359a-a2e5-4a4b553e8662.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 19303
IP address blocks: 23.141.216.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:89:9c:26:a3:6a:d4:fa:96:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ebd94e-8686-4da0-85d9-3d3935cc3951
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=484b692f-c839-47d9-bfbc-056f8d550f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:c9:99:29:69:fb:03:80:a5:40:15:f5:9c:
83:05:58:4e:99:53:1b:9d:ed:40:3a:ad:f7:1f:8a:
2b:25:bb:be:b8:60:c0:87:fb:8a:7a:dd:a4:0e:53:
92:4d:84:77:5b:6a:bf:e7:bd:80:a1:e3:3d:9e:4b:
3d:40:cb:e0:90:c4:01:5a:c7:81:c1:39:a5:f7:13:
f8:b3:6a:76:ff:55:47:0f:eb:f0:4b:9b:bd:4d:91:
ba:e7:2a:1d:ec:5f:71:cc:98:2b:e7:ae:a6:b7:20:
5b:71:05:d7:c1:d0:c0:5b:f9:40:a7:9b:61:c9:83:
55:69:a6:ca:e9:53:39:36:fe:56:0e:74:65:d0:fa:
14:51:33:1d:27:4f:e7:ba:17:55:da:ff:3e:1d:d0:
16:99:e5:b7:2e:2b:03:5f:02:b7:4d:09:e5:e6:fc:
0b:4a:b0:93:b4:64:64:a5:f1:50:d4:e4:4c:9e:07:
c6:1b:39:ea:a0:65:14:8f:37:95:d0:36:44:de:73:
81:03:ab:85:ae:c0:84:56:c6:75:32:e2:16:32:d7:
1e:40:7f:5a:cf:5d:b1:d9:89:99:da:81:d1:8c:9d:
1a:72:b9:46:a5:85:f9:1a:f7:88:89:1a:8f:9d:22:
0c:63:a0:d8:f7:36:3d:00:7f:1a:0e:0f:bf:cf:d1:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:D7:36:89:64:C9:EA:C2:A9:FB:CC:76:E1:AB:71:E3:66:64:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/273db7a5-9c03-359a-a2e5-4a4b553e8662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.crl
X509v3 Authority Key Identifier:
keyid:A4:7E:E4:B9:97:20:3A:EC:F4:91:29:17:72:30:ED:E6:50:B9:AE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:2f:cb:ee:8e:f8:db:ed:8c:57:19:fe:df:0b:17:09:e5:f7:
f8:5d:11:a3:74:5a:ce:46:47:96:43:ad:48:e3:9a:c8:07:c2:
82:5e:ea:df:e4:3b:61:2d:de:2e:8a:1b:6d:6d:27:db:a9:c3:
c4:6b:95:f1:37:7a:48:15:1c:58:dc:24:70:6b:ea:9b:0d:fa:
88:b8:46:40:fd:02:ba:4b:62:86:72:63:db:2b:86:76:09:9b:
f8:73:1d:2d:b8:fd:73:19:f9:1a:bc:04:e5:c0:9b:0e:0b:47:
e3:06:0f:ea:e1:54:5b:c8:95:1d:ab:98:b4:ba:11:76:04:e9:
68:8a:fd:1f:12:88:6b:bb:65:99:09:52:0b:1d:11:3c:30:96:
bd:37:38:f5:ef:71:a7:2d:3f:ec:21:26:57:60:20:43:db:6d:
0f:bc:7d:d2:b6:d1:d7:69:e8:85:14:9f:af:4c:36:c5:65:ab:
50:07:65:9f:e7:b8:29:af:0d:7c:ac:24:d7:76:cf:9e:d0:c4:
d7:7a:29:32:3c:6e:55:e3:bb:a6:9d:fb:1e:9c:f0:31:53:3e:
33:ee:0f:a1:bf:be:fc:f4:5c:b0:ca:ec:2f:e4:01:30:8f:09:
fd:d6:6d:31:4b:36:65:45:47:01:ba:73:09:45:78:d9:34:34:
ac:99:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:37 2025 by rpki-client on console.sobornost.net