Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa
File: b9e29835-8977-3975-ae14-1a75a5763318.roa (raw, json)
Hash identifier: iIxxmfbOaLjphSQK3dT6N7GskwXDR3SHFH/si6SnWrQ=
Subject key identifier: DF:4C:E0:9D:C0:C7:44:57:35:9D:B1:7D:B5:F4:3F:07:B4:BB:B9:23
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581FCCC3073D424FABE6980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.226.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:fc:cc:30:73:d4:24:fa:be:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=86b666f1-e0ca-4538-b111-d95259c9986e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:30:81:52:d0:a8:28:46:44:63:44:a8:6b:
1e:89:45:ee:d9:06:5b:25:d6:31:94:45:f8:f0:96:
83:15:de:71:44:13:17:54:71:ae:96:e6:85:32:52:
31:a2:68:36:90:1d:4d:66:1f:54:7f:41:63:86:ee:
c7:d1:0c:62:d1:06:3f:aa:00:9c:ca:4a:d7:22:1b:
aa:cc:86:29:3b:da:96:cb:96:ae:36:77:db:5a:63:
87:d0:1b:bc:1b:b5:8c:39:29:5a:2d:2c:ed:ac:7c:
c7:d2:ec:04:2c:81:d4:34:dc:3e:aa:0b:59:04:bc:
fe:ec:37:84:4a:2d:7d:aa:09:27:63:07:6b:96:3f:
10:98:88:f3:6b:93:92:8d:42:f8:d9:6f:2c:71:c9:
97:f3:3e:14:7b:cf:aa:dd:b9:8b:93:76:0d:6a:a6:
5c:bc:8b:ab:be:39:31:5f:a8:1e:01:59:0e:3b:68:
48:c7:f4:e6:80:e6:96:19:f0:97:ae:e4:b0:9d:09:
93:7d:44:4a:b2:10:65:85:39:e9:a1:c7:e2:33:5b:
d0:fb:b7:18:a7:a4:d5:69:37:55:bd:52:75:ea:3c:
23:a3:2d:15:1b:13:56:1d:27:8e:5b:bb:dc:25:cd:
2f:03:9f:4b:d1:9f:14:c4:f6:4e:65:1e:bd:ab:74:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4C:E0:9D:C0:C7:44:57:35:9D:B1:7D:B5:F4:3F:07:B4:BB:B9:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9e29835-8977-3975-ae14-1a75a5763318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:17:ed:78:a8:cc:1f:aa:04:2a:6b:0c:5e:cb:35:ba:ce:6f:
a9:25:da:3f:63:02:0f:2c:2e:41:84:85:6c:97:5e:0b:cf:7d:
4b:12:50:d7:9b:2a:af:e2:0c:57:b4:11:cc:3f:e4:d8:43:fb:
5c:04:68:02:77:31:23:87:97:36:6e:52:49:2b:0e:1e:32:72:
0d:a7:e2:bd:6a:6f:3d:df:33:03:7e:98:48:dc:49:e2:5e:1d:
b9:30:1a:01:96:a5:6f:c5:6d:42:df:39:8c:ca:5c:38:b3:ee:
32:7b:22:fe:8a:92:bb:f6:5a:11:10:99:6c:37:ba:8f:be:50:
7b:cf:63:93:e6:d6:4c:0a:ea:35:23:66:58:f3:3c:b0:f6:c6:
ec:c3:d6:1c:d0:e7:48:5d:fa:c7:24:28:d3:fc:3e:a7:fb:ba:
52:af:37:aa:d1:22:c1:2d:99:58:3a:a7:fc:a1:a2:c5:d0:76:
a8:21:41:26:36:80:19:a7:a8:8a:66:e2:42:d3:8e:c3:49:ff:
0d:35:5f:c3:a7:56:1a:78:f2:85:9a:e7:9d:dd:e7:ac:3d:49:
a6:21:22:5a:4e:a5:4c:53:2b:18:5e:de:cc:e2:e6:a0:86:71:
5c:32:72:98:20:f3:f1:44:f1:cb:2e:cc:f4:6e:5c:30:38:41:
16:b2:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:56 2025 by rpki-client on console.sobornost.net