Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa
File: 7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa (raw, json)
Hash identifier: qthL2oQjq35K63vsH7ZecVnfbap1A7Ed6oWB1h2Ii44=
Subject key identifier: 73:12:CF:6F:8E:34:39:9F:78:A4:50:B8:72:DA:E0:59:7A:D2:1E:54
Certificate issuer: /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial: 010D0C9F4328584976A98F964FE5B88FACD53280
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 63150
IP address blocks: 23.172.40.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:8f:96:4f:e5:b8:8f:ac:d5:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=2af1c218-95a0-4664-984f-f89dc431ead1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:47:9a:d2:85:94:83:68:b1:56:60:fd:46:
47:41:c0:52:d8:80:c5:00:d7:32:40:c6:99:cc:bd:
02:4b:9f:95:55:2d:c1:f8:4b:cd:3b:89:60:e2:8b:
09:ac:7e:f5:e4:38:27:e8:3f:fc:4c:69:e0:b1:1d:
26:02:2f:6c:9a:1f:5a:53:de:80:bf:a6:80:29:5a:
ef:6c:ed:9b:fe:66:5c:0d:2c:5c:1a:2c:d4:a3:6f:
b0:7a:e9:e6:38:60:6d:82:32:c2:93:cf:14:62:14:
f5:06:d6:66:96:17:c0:85:7c:6e:c1:5b:98:39:2e:
38:b7:9a:88:46:82:26:ff:e4:69:77:91:67:22:52:
20:07:a0:60:00:96:c8:bf:a9:8e:e0:ac:a3:0d:95:
2c:27:b9:8d:b9:7a:4b:85:f1:39:7d:c6:4a:31:84:
10:16:52:d1:b5:29:d5:27:f5:4a:51:27:a1:e7:6b:
65:e3:a1:62:a0:e4:5b:ef:e7:ed:47:29:92:3b:8c:
aa:05:18:89:a4:e5:6a:34:0f:65:fa:06:4d:bb:9f:
aa:e2:ab:13:d7:98:12:cf:c3:61:a6:45:ca:bf:2b:
c7:98:99:ba:ce:97:64:70:0b:f1:9f:bf:79:bc:65:
d7:69:10:db:7c:8d:f9:eb:a1:96:bc:20:2f:ca:ff:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:12:CF:6F:8E:34:39:9F:78:A4:50:B8:72:DA:E0:59:7A:D2:1E:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
X509v3 Authority Key Identifier:
keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:26:a9:84:d2:16:ac:9e:3b:9b:0a:a1:7d:37:1a:25:e3:82:
6a:83:d5:ab:0a:9a:a9:d1:cf:19:30:ed:6a:82:33:6d:77:21:
2f:bf:65:c2:a9:63:88:05:e4:54:4c:a6:45:6e:c6:cd:3a:e9:
1c:01:1b:36:04:14:5e:36:d3:5f:de:10:db:56:01:bc:a4:01:
f9:d9:a6:09:0a:79:4a:06:9f:84:91:fd:b4:5e:34:a8:51:ae:
8f:e4:63:c9:39:2f:c5:ad:1a:49:c6:0c:c4:64:fd:b7:a9:26:
c6:ff:4b:90:d8:e2:a0:cc:40:49:29:06:bf:52:66:10:b4:3d:
36:2a:dd:3f:7e:99:82:a3:a2:be:41:cd:00:e7:93:f4:4c:4b:
e2:d3:e5:cb:46:39:d9:85:9e:8a:bb:fd:03:55:bc:2a:e3:7e:
c2:df:89:6e:e0:86:ec:9a:a2:5e:69:46:0a:72:7d:fe:57:27:
82:a5:de:71:c2:a1:38:c5:56:f9:68:b1:b5:65:45:06:11:00:
79:1a:f4:96:fe:e6:3c:c6:a6:54:e0:ee:54:bd:e1:1f:69:9f:
15:6c:c8:d5:ea:7d:1d:3d:0b:ef:f0:f9:b3:1e:de:9e:51:d9:
80:82:fd:f8:87:38:18:21:de:99:e6:2c:6d:0c:9f:a1:cc:c9:
05:63:f0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net