Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa
File: 4387142e-4988-3933-b813-eafd0736b9a3.roa (raw, json)
Hash identifier: p7/l5uxrx4kRlzwi8Sqw+Qbafnr7rdfRSeSgM9lyQiI=
Subject key identifier: 85:B1:98:18:AD:9D:3E:1E:6E:6E:D4:19:59:83:34:BB:7C:A4:7C:9D
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858495D8966D867D0E3B0C37D1C00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 22652
IP address blocks: 104.156.78.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:66:d8:67:d0:e3:b0:c3:7d:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=f14a8a54-a3ee-4234-9076-fd38533535ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:08:50:6d:83:a1:40:19:c5:ae:08:88:09:
5d:47:23:ab:bf:fa:ca:b7:f0:4e:97:ca:e7:95:f7:
16:46:ac:28:48:d7:86:e5:36:ce:ee:b8:33:49:eb:
9f:8a:dd:db:ed:ab:12:ee:68:77:f5:34:1e:35:29:
85:be:8f:e8:6f:4c:39:af:4b:0f:e7:f0:1d:39:58:
58:43:e6:20:2d:c4:ff:2a:88:cb:89:69:dd:cd:84:
42:60:20:37:b8:b0:b4:66:1d:60:75:52:0f:53:fa:
d8:bb:3c:2f:22:d6:22:d4:2c:10:78:0b:94:48:d9:
cd:2e:d1:a9:f0:d6:0e:71:7d:79:84:8a:10:54:23:
64:36:18:f4:d7:d3:55:d8:11:0e:c4:23:cd:c9:2b:
d6:c6:67:be:a6:b9:94:d4:71:1a:68:89:a5:fb:6c:
bd:2a:4c:4d:83:82:47:7f:02:0d:8e:94:04:bb:ff:
52:88:41:5b:47:c6:2d:f0:ae:cf:6e:24:94:e0:e5:
f8:e9:b4:4b:c9:49:d8:e6:d3:00:4c:4a:a8:d2:af:
7d:b2:4d:28:33:c6:58:c8:de:04:7f:30:da:78:4d:
4e:64:2a:87:4e:65:da:06:22:0f:f6:58:3d:85:0b:
87:dd:86:a2:3b:29:8d:56:cc:93:83:1d:52:cc:38:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B1:98:18:AD:9D:3E:1E:6E:6E:D4:19:59:83:34:BB:7C:A4:7C:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:8d:a4:f2:33:9c:07:c2:60:9c:59:ca:da:29:3f:3e:e0:89:
77:c2:41:d8:c4:92:48:30:b1:79:6d:61:b4:84:06:a3:23:db:
13:12:24:24:32:61:55:1f:fe:da:01:32:da:d0:b2:7f:0b:f5:
da:91:85:80:e9:6f:d1:3b:9a:29:1c:39:bd:0f:6b:b9:fb:97:
78:0d:3e:7c:24:ba:e8:76:05:f3:7f:9d:b1:8d:01:d6:07:3d:
7a:cd:0e:64:35:d5:6b:b2:ad:04:1a:b8:9a:ac:03:1b:48:42:
1b:03:33:ca:c2:fc:32:41:39:e0:6f:a2:2a:07:d8:af:1f:0a:
53:31:e9:86:3c:51:b3:e7:70:f3:e3:9b:a6:42:24:3b:a7:e7:
81:c2:d7:94:35:86:18:98:13:23:fd:87:13:9c:b2:73:8c:6b:
64:cf:91:b2:7b:0b:70:b9:50:57:6d:7d:c1:5b:65:ed:e8:87:
c6:02:76:03:a3:c5:93:50:cd:7b:eb:19:3c:a1:14:60:37:94:
2f:34:33:84:a8:53:48:81:60:6f:64:5a:50:58:db:e9:20:01:
67:34:0e:eb:40:3b:49:2e:ae:95:1b:b5:d9:5c:8a:ca:c6:36:
df:d2:37:d1:e4:7f:68:2a:d9:6b:00:56:96:8d:d9:ac:3c:ef:
b9:b3:46:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net