Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa
File: 0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa (raw, json)
Hash identifier: iXeMDCr+QRN+wDe2f5YlF6sPHRDc9sxRc397CuGo1d4=
Subject key identifier: 96:1A:7A:D0:B6:39:B3:D0:0E:3D:F6:5B:A7:09:17:E2:D4:9C:C2:1A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285849780F1F955729525EEC247F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 7029
IP address blocks: 173.186.238.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:1f:95:57:29:52:5e:ec:24:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=9b1f5ab5-e5a2-45b9-99d7-affd117e6c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:99:55:ae:8c:cc:dc:d6:94:41:d7:d7:83:
d8:a8:42:ad:17:89:ef:f1:d7:41:a6:32:66:a0:9c:
a6:6c:ba:f8:61:e6:51:59:7c:35:c6:6d:7c:aa:e2:
71:35:63:65:27:58:fb:c8:a9:6d:22:e6:3b:7e:38:
77:8a:2f:e9:21:41:e1:6e:b4:7b:bc:a0:14:61:6c:
90:64:fd:e6:57:4a:61:71:20:be:ee:5b:7a:f9:92:
5b:30:ac:84:59:9d:03:2c:59:56:43:72:c1:e3:17:
f9:1d:43:a8:34:02:2f:37:9d:fb:67:e3:f7:27:88:
d3:62:91:5c:c1:7f:ee:71:7f:2c:d8:87:fb:07:b6:
5c:8c:5d:9c:ca:e1:76:a4:81:c6:03:25:93:bc:60:
bd:63:96:de:18:3c:b3:62:6f:7c:f0:ef:79:9c:6f:
40:d3:b1:e0:72:2a:64:cb:ba:96:0e:e6:59:b0:e4:
95:01:37:b1:09:8b:5a:96:71:c7:d0:5a:ed:d3:5b:
74:7a:3c:77:a4:d8:9d:a8:9b:cb:32:5c:35:10:15:
ac:86:ef:06:bb:ab:51:d0:86:4b:1d:2d:db:da:57:
18:f6:f0:0e:67:c0:d7:94:4f:1d:b9:61:11:1c:74:
8a:76:ae:47:4b:2e:3d:e6:26:81:79:8a:e5:4a:88:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:7A:D0:B6:39:B3:D0:0E:3D:F6:5B:A7:09:17:E2:D4:9C:C2:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:59:b8:5e:87:10:96:3f:d1:3b:89:a6:8e:79:cc:7e:b0:3e:
21:0e:df:1e:1f:87:db:b1:98:27:01:81:55:fc:5a:14:4b:15:
f4:ed:e1:b6:af:f4:69:37:75:4c:29:fa:86:c9:f4:d8:28:eb:
0d:ef:7a:b8:76:2a:01:5e:bf:5f:06:66:98:79:44:21:5f:e0:
35:2a:56:19:3a:2d:b9:9b:49:e3:bd:30:33:3e:5f:87:6e:e1:
67:72:39:63:91:58:c7:19:d5:be:07:81:bb:9e:c2:67:99:f2:
d9:1d:76:f1:7b:41:68:cd:92:62:a1:4e:11:70:94:e5:6d:7c:
ca:bd:02:55:37:31:50:fc:b1:9e:76:83:44:02:1f:8f:ab:3d:
5d:9d:ce:7b:78:d6:2d:d2:c3:fa:27:5a:25:aa:32:2f:85:ec:
36:4c:f4:ff:c7:f2:c1:11:18:64:93:d3:7b:80:0b:d2:5f:f3:
52:e3:22:78:a9:ff:c9:4b:cf:4a:97:70:11:03:7f:71:b0:f9:
f7:9c:d7:6c:03:f7:18:72:17:8c:92:f4:c1:4f:2e:9c:39:d3:
33:0b:5d:be:aa:f8:29:01:f8:d4:48:d1:97:c3:24:30:72:5f:
3a:78:aa:1d:5d:44:c8:82:0f:ed:82:d4:18:a4:9f:b6:44:20:
9b:75:4f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:56 2025 by rpki-client on console.sobornost.net