Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ff80e1a8-1841-36ce-8708-dcfd0d348438.roa
File: ff80e1a8-1841-36ce-8708-dcfd0d348438.roa (raw, json)
Hash identifier: /6i8+ESdfzminMQI9wr8SqSVCWh/bNZ0zomA2CS6TVM=
Subject key identifier: BE:F5:F6:94:16:4C:7E:A8:34:34:2F:7D:8A:EA:39:31:E4:AD:10:C9
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584981D4485DE8CA1F4AF3207920
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ff80e1a8-1841-36ce-8708-dcfd0d348438.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 395075
IP address blocks: 207.253.144.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:48:5d:e8:ca:1f:4a:f3:20:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=31c75237-7431-40bc-9391-e0325d8665f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:40:d8:26:f9:35:3b:b7:75:6d:ba:ce:71:
48:9b:ef:2a:02:59:79:8d:61:2b:74:e7:28:d6:a0:
67:ac:5e:70:a3:8a:37:a4:d0:38:0b:6d:81:52:6d:
5f:6c:b4:46:42:00:8c:66:b9:f2:71:0d:80:d1:8c:
3e:16:c3:22:cd:69:0e:d2:bb:fd:62:b4:d2:27:a8:
33:91:27:ae:6d:4d:3c:fd:18:97:4f:20:0b:07:1c:
30:56:d1:9f:b1:06:d2:4e:e7:d0:55:74:35:45:a0:
7e:e5:94:a3:e7:ab:84:a8:78:21:64:6f:58:a2:47:
d7:97:dd:a6:00:26:4b:17:b7:79:40:24:8a:8f:be:
bb:70:33:5b:84:c7:ac:fd:80:7d:65:5a:90:ad:1a:
ff:97:f0:4b:70:a7:6d:1e:34:f2:07:f1:e8:fa:81:
f2:74:5e:12:10:d3:0e:9b:ca:ca:1f:f9:68:ac:7e:
71:37:e9:2c:ac:68:13:a3:39:20:70:f6:92:0f:e7:
60:51:32:3e:30:c7:db:50:4e:83:2b:61:2e:1b:60:
8e:7c:7e:1b:cb:56:1b:69:da:7b:57:f8:ba:08:fe:
e0:64:48:f6:51:a4:87:a3:0b:5c:1a:8f:04:a4:f9:
3b:4d:9a:10:5f:76:2a:ac:1e:f0:47:70:da:4c:f5:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:F6:94:16:4C:7E:A8:34:34:2F:7D:8A:EA:39:31:E4:AD:10:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ff80e1a8-1841-36ce-8708-dcfd0d348438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:35:62:ba:d2:a6:14:a6:24:28:14:9c:9d:03:57:8b:a3:29:
31:45:e0:84:4f:4c:22:15:7d:0f:8f:1a:3d:06:97:34:87:db:
bb:14:c4:30:9a:03:92:ad:2d:9f:cd:58:60:d9:d4:0b:96:29:
e8:c9:c7:ff:6b:72:58:6e:af:36:7a:e1:8d:c1:d2:17:2c:15:
2c:f2:b2:a1:d8:be:f3:b9:a4:a0:93:c3:1c:9f:02:d0:a6:5f:
96:a2:8d:63:2d:43:a0:ba:3b:60:50:5d:db:dd:a9:92:22:cb:
1f:d2:d2:d5:ab:8c:86:68:33:53:72:f7:ee:c2:2a:fa:cd:a9:
15:e4:5a:e1:bd:8f:ec:5b:12:73:39:1c:e6:99:83:de:04:9a:
47:c6:e5:0f:5d:c4:bb:11:2d:18:95:3c:a1:ea:58:5f:af:e6:
4d:02:3d:e5:8c:c5:47:c0:b9:24:eb:64:7d:f3:37:c3:8f:0d:
96:f2:e4:92:18:7e:23:65:7f:db:19:7a:4e:9d:b5:83:ae:89:
af:6b:17:e3:27:d9:df:0d:ef:b8:b6:f8:66:af:e8:71:69:2a:
ce:30:57:46:94:c0:6c:f4:f0:45:56:c6:67:02:cd:77:98:88:
6a:87:0f:17:c8:38:df:0c:14:b8:da:10:e8:65:4b:08:ea:2f:
53:6a:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net