Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa
File: fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa (raw, json)
Hash identifier: /KFEh77e0wwRkUaeUnPeYPsAkjc/u1R3yY8eVdEG7HE=
Subject key identifier: D5:57:87:D1:17:E6:69:3C:E8:E3:20:EC:57:B3:94:E4:A9:95:C9:CE
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584960541181AAEB5BF4285BAC00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa
Signing time: Tue 01 Apr 2025 01:00:47 +0000
ROA not before: Tue 01 Apr 2025 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:00:47 +0000
asID: 22652
IP address blocks: 173.231.108.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:54:11:81:aa:eb:5b:f4:28:5b:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Apr 1 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=1d181de4-1141-4f55-9514-b6f84eb1e26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:24:82:ab:ba:05:0d:f8:94:75:74:fa:6f:
f3:01:ad:9f:4b:33:a7:74:fd:b3:04:91:b4:57:57:
dc:7b:13:17:6f:d9:53:1f:23:0d:e1:02:70:a1:14:
d8:ac:36:ff:4e:95:21:f4:c4:f8:da:8c:83:40:09:
b9:f5:c4:a2:8d:92:eb:58:12:57:96:43:a8:1a:f3:
e7:d5:f6:62:84:80:15:f6:09:39:88:de:24:d9:c2:
4e:46:a0:f3:b0:e2:28:a8:58:1c:39:71:2a:df:76:
6e:98:67:77:a9:9f:d1:a9:51:ed:dd:8a:fe:dc:11:
45:42:46:b3:b4:18:f8:46:c0:c1:78:c1:f3:e0:5c:
66:c9:8f:77:b8:b5:38:fb:5a:cc:43:1c:87:d1:dd:
e8:a1:e6:8c:53:04:2f:e0:a3:d5:2e:bc:f6:31:b8:
1a:19:8f:57:15:93:b3:ff:ab:6e:87:df:af:c2:25:
1e:e1:c9:ff:05:ad:47:2a:d7:d2:df:f0:8e:c6:82:
f1:71:a8:ea:e3:11:81:18:2d:04:ac:32:3b:47:56:
63:c8:69:15:ea:14:0a:76:3c:a2:9f:71:95:ca:8a:
a2:02:24:0f:3f:55:21:e5:df:62:d2:54:1b:3b:e0:
fc:75:c4:c2:b7:a7:1f:6d:60:b4:10:e6:7a:75:b4:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:57:87:D1:17:E6:69:3C:E8:E3:20:EC:57:B3:94:E4:A9:95:C9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
173.231.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:5b:8c:4a:5d:03:17:56:43:13:e1:77:a0:6f:f4:77:24:63:
90:ff:b9:29:a4:4d:3d:9c:0f:98:91:31:26:56:c3:92:69:12:
27:dc:62:ca:a4:95:06:ab:91:8a:5e:93:b2:d6:37:00:ee:71:
69:0c:51:4a:86:91:ae:08:3f:8c:de:0a:6b:b7:e7:0e:c9:e2:
65:a3:c0:e9:36:f3:2e:78:0f:8a:d3:58:a5:06:86:78:79:63:
71:d2:b4:d1:75:c4:7f:52:fe:fc:29:27:0d:7d:1b:43:e6:fe:
51:09:45:be:46:6a:85:8a:7d:eb:f5:e4:13:c2:a7:e2:22:70:
7a:db:db:a0:e9:7d:5d:b0:84:b2:96:b0:3a:ed:ab:71:82:4a:
30:ff:6a:f8:e0:08:a1:bf:0d:bb:97:70:3d:51:73:64:61:72:
42:f6:d7:56:1a:ea:d3:f4:0f:17:c6:6e:f3:25:04:51:f0:92:
b2:e8:e1:3c:eb:86:c9:17:1f:e4:48:1b:cd:4b:5c:65:d4:9b:
af:ee:b3:db:75:ef:53:d8:6f:ef:e5:63:a4:94:a1:a4:55:c2:
c7:e9:0d:e0:17:7a:94:e6:e4:9e:b6:d7:fe:38:43:3d:84:70:
7d:f3:d6:31:2b:28:b1:9f:37:f4:da:33:0f:69:fa:49:5f:7c:
e1:21:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net