Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa
File: 4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa (raw, json)
Hash identifier: ZZKShgaVzOQ4VsHmgDZ/Hu1Zavpoc71kgJsAL5S9oIY=
Subject key identifier: 3A:AB:52:DF:34:D0:2C:0A:37:13:B1:C9:B9:A7:BD:DA:BE:FA:C7:27
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581CAC6A48908DE8D9A0340
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.197.246.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:ca:c6:a4:89:08:de:8d:9a:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=8db54ca3-3302-457f-8475-62a5be580c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:7b:0a:90:e4:52:4d:4c:d1:a7:a7:d8:9a:
7e:09:a8:49:7c:c6:88:39:3e:ff:51:6c:d7:a5:58:
73:41:86:32:16:33:14:49:0e:9c:46:48:1f:b4:f7:
79:d9:d0:90:62:53:ce:de:44:53:8b:ac:20:d7:ef:
96:6c:d9:c9:66:63:ac:96:f8:c9:de:4e:7a:f7:e2:
99:51:2a:45:75:94:8e:d2:7a:5d:5c:c6:a7:1c:c7:
36:32:9a:ef:4f:2f:9f:7b:b8:f3:c4:24:4e:09:70:
4e:d0:8f:30:f4:4f:35:62:e9:bb:de:d1:e2:24:a1:
4c:a7:55:37:ba:01:cf:d7:b2:af:f3:be:60:f6:92:
00:a1:f2:ac:42:f9:b3:1e:d1:83:cd:2d:f3:48:a7:
0c:65:dd:29:b5:84:e3:e4:11:b7:1f:d5:ac:c4:ea:
fc:0a:77:2c:9f:31:dc:c1:96:4d:74:40:4d:47:5b:
c0:e2:43:17:49:d8:ce:7e:1e:f0:0b:44:e6:c0:b5:
a4:56:0b:9d:33:ef:29:56:cd:b8:d2:fa:8c:2e:ee:
84:b5:2f:82:61:77:77:70:ec:e5:97:ee:b5:7f:fb:
9b:d2:f1:96:e3:12:44:a2:17:87:83:52:4a:35:03:
87:f3:2c:63:98:d0:2a:23:56:f5:ea:3a:4a:ce:ed:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AB:52:DF:34:D0:2C:0A:37:13:B1:C9:B9:A7:BD:DA:BE:FA:C7:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4599d9d3-f0aa-3734-aff1-21a5f1fcbba2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:ed:6b:99:41:6f:ed:68:fa:5c:c4:7a:e5:17:ab:b4:e6:d5:
6c:91:85:3c:52:73:3e:1f:69:b5:6f:5c:3c:cd:96:67:09:35:
2a:23:b8:31:9c:cb:e6:97:04:1f:d9:c1:bf:40:93:a4:3d:5a:
db:5d:9f:03:af:b8:f3:cf:c8:15:43:4f:b9:11:74:76:12:ad:
d4:e0:25:ff:94:df:f8:85:c9:ef:8b:60:20:f2:07:91:b0:1c:
d5:e2:c4:d2:81:a4:a8:43:04:27:2b:77:96:35:56:04:49:f2:
f3:2a:37:03:ad:91:19:46:0f:b2:6f:37:43:0b:f7:94:46:ef:
db:d5:9e:62:89:11:0f:5d:bd:75:a4:1c:15:f5:8e:63:6c:2e:
95:f2:26:fd:f1:53:61:35:93:76:7a:31:5f:d5:9c:ff:75:64:
0d:2d:3d:4f:74:d4:36:88:28:27:b4:be:4a:4d:b7:9b:64:c6:
9b:a6:ae:21:de:63:aa:2b:0b:ba:49:dd:b5:99:d8:86:57:4f:
cf:d9:8f:5e:fb:59:57:df:69:ee:e6:15:fa:9d:2c:53:ef:07:
ef:fa:86:aa:fa:b3:00:db:a8:f6:56:62:06:e1:c8:f3:56:83:
a4:de:50:16:8e:3a:e4:6c:fd:83:db:1c:31:cb:ff:9c:c0:3b:
e3:a2:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:42 2025 by rpki-client on console.sobornost.net