Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b962e112-6342-31ad-aa41-e9b4c605e6c3.roa
File: b962e112-6342-31ad-aa41-e9b4c605e6c3.roa (raw, json)
Hash identifier: bnQiNRbD4M1KzF30/MwudKJvDo8vLUteG+nZAlBVGVk=
Subject key identifier: 7D:1B:0E:99:0E:50:46:A4:1F:B3:80:00:CF:A9:18:A4:AD:C2:00:A2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810FFD013F418BFEEF2840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b962e112-6342-31ad-aa41-e9b4c605e6c3.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.129.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:0f:fd:01:3f:41:8b:fe:ef:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e40fcab3-a64e-4bae-968c-dbe3b5ac5912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:8f:07:be:c3:b5:cd:7d:fd:06:88:9a:f9:
d9:f6:6d:cf:ce:27:1e:5d:02:5b:ff:df:1b:d0:d8:
44:c2:54:aa:ac:2d:d0:b6:63:cb:f1:75:05:47:ab:
2c:40:02:d4:7c:bc:fd:27:ea:3c:13:40:e4:d2:21:
ba:f0:5d:1d:e1:c9:e1:69:0f:d7:9f:a9:7d:60:29:
83:48:29:7e:bf:f6:7c:1e:0a:22:25:be:ab:f8:cd:
42:19:7a:2f:fa:51:be:c9:09:be:21:e1:bb:da:25:
3c:4e:52:46:f0:9a:21:f4:06:19:d1:75:77:04:bb:
15:f1:c8:e3:68:41:54:ba:9e:d8:f5:57:23:09:2d:
de:a0:32:18:7c:b2:23:23:eb:74:cc:b0:22:97:a7:
df:68:8b:00:e7:d5:ef:1d:fc:3a:d1:da:20:1e:3f:
3c:f8:52:f7:d2:c9:db:a2:ff:34:7d:d5:e5:59:3f:
8d:a3:6b:a6:07:6b:d4:10:24:26:61:43:1e:a4:cf:
93:4e:ba:84:b7:3a:8a:3c:50:a3:4f:1c:96:28:8c:
bb:58:e6:83:4d:41:02:de:b5:e1:fb:1d:c7:ea:78:
5f:8a:1e:e2:d5:a5:36:d4:d9:bf:a1:c6:ee:74:62:
1d:99:c2:ed:d9:d6:6a:11:61:ad:b0:61:fd:73:c2:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:0E:99:0E:50:46:A4:1F:B3:80:00:CF:A9:18:A4:AD:C2:00:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b962e112-6342-31ad-aa41-e9b4c605e6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:4f:a9:18:94:79:b6:47:f6:9b:a5:f7:6f:2c:d2:28:ad:17:
bd:cd:00:7e:3d:f7:1f:d0:33:04:53:25:38:eb:c0:37:75:e2:
66:98:c9:1f:f8:63:46:05:ca:b9:d3:97:fa:85:39:08:75:14:
5e:dc:fb:b0:17:39:9a:d8:c8:15:c0:8e:bc:fe:7e:10:92:c4:
83:15:cf:c9:d7:9b:95:d3:ec:1c:d3:84:1e:f1:6b:55:28:0e:
04:36:f5:ff:3c:16:b1:c3:c9:84:2b:2b:9b:07:ce:7c:7a:10:
53:6f:b0:44:dc:62:d2:75:7f:82:78:dd:74:3a:0f:00:c7:a1:
3a:79:f3:8e:e1:0c:b3:22:63:84:43:5b:79:7d:45:9d:36:61:
2b:6a:83:16:c8:f0:21:6a:05:f2:22:3c:75:6b:d7:88:be:e1:
bc:2b:fa:f0:20:69:6f:37:d2:87:f3:ef:67:73:c5:59:dc:48:
66:ac:5d:7e:37:8e:38:64:25:7f:14:96:a6:71:fe:7e:78:9d:
cf:df:d7:4c:48:58:47:6e:0d:52:2d:3c:40:19:23:05:80:f1:
0e:f8:d0:6a:73:9f:10:f0:d4:0c:21:f6:e2:69:8c:8c:cd:e4:
3a:76:6d:1c:b8:a8:57:e4:c4:7b:75:e7:e3:e1:64:27:b2:25:
bf:2b:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:56 2025 by rpki-client on console.sobornost.net