Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa
File: 2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa (raw, json)
Hash identifier: KJgOFDBBhvpT3to5hSzvUKJtZ8NR+q6e9mw9qFY0DbY=
Subject key identifier: 52:DF:6D:0B:15:D6:3D:C4:F6:46:6B:AF:E5:91:A3:AC:14:DF:01:F9
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584900216F0102704A22A5BF70B8
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 13536
IP address blocks: 216.179.0.0/17 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:6f:01:02:70:4a:22:a5:bf:70:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=143b0af8-82f8-4898-ae81-00cc7213c0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:1e:91:df:ba:63:9b:0f:df:f7:36:2f:ce:
3a:e5:f8:44:fb:d7:03:f4:91:23:1d:94:d9:cf:4b:
9d:d2:95:2b:3d:a8:6d:62:07:d0:76:71:49:a2:d0:
ae:cf:d3:77:7e:48:36:04:51:90:11:ff:a7:9c:04:
3f:d6:30:cc:a1:b7:35:1a:35:ed:dd:6e:76:a5:e6:
fe:36:19:77:b3:a4:e9:e3:b6:28:f4:92:16:6d:79:
0e:4d:7f:cc:ea:c9:30:80:ec:b4:61:a2:85:ba:b7:
c1:ea:b1:ad:38:68:8a:e3:76:f9:dc:a8:54:28:b8:
fe:64:65:f6:37:4b:2e:6f:46:c5:63:a0:5a:c8:d0:
13:0b:94:54:7d:1a:51:16:69:ab:24:d3:99:a3:7c:
89:1a:8b:d8:10:69:63:e9:ab:06:ac:79:26:ab:61:
ec:b4:36:f9:29:4e:8a:f6:63:a2:ab:e4:88:f6:76:
c5:c1:e2:ef:27:db:75:b7:78:8b:7d:64:0b:54:fb:
74:5f:31:c5:40:38:20:e1:ec:41:29:4d:8b:4b:4a:
78:e4:7b:92:5b:51:da:67:3a:28:91:83:18:ac:b1:
03:8f:24:4c:ff:98:d7:a8:41:e9:5f:5d:c4:4f:a9:
f7:1d:75:4d:f7:75:e0:5e:83:79:3c:ab:9d:56:46:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DF:6D:0B:15:D6:3D:C4:F6:46:6B:AF:E5:91:A3:AC:14:DF:01:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.179.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:74:30:3e:1e:5d:b5:53:95:c7:76:0f:91:20:d3:b0:38:f2:
15:e0:2e:52:37:2b:b0:ca:f3:fb:5f:02:0e:16:85:91:40:bc:
31:18:e4:c2:66:8c:8b:76:45:e7:14:79:b1:1d:3d:76:6a:ec:
6a:c8:99:5c:8a:be:2f:93:75:91:ce:ea:4f:d1:5a:d0:71:4e:
f9:ad:6f:0c:f0:00:3b:2e:b0:f2:97:88:8c:59:bb:b8:53:fd:
59:8f:0e:87:75:3e:7e:ee:68:ce:bf:45:d5:63:d0:fc:74:64:
3d:dc:0b:1d:9f:15:10:af:a8:72:3d:2a:e3:a8:40:e3:77:ad:
49:ab:17:20:c9:51:78:ea:2d:86:86:82:0a:96:db:f9:0f:f9:
a8:76:4c:f2:1b:ac:04:ee:a1:46:22:88:1a:47:24:50:15:9c:
15:c7:6f:db:cb:46:b9:bd:d1:d2:0f:06:a1:04:45:d1:55:04:
24:c7:c4:cc:27:7b:9f:fd:02:7c:fa:b9:e3:1d:11:34:38:6f:
bc:85:5f:ff:f5:ca:dc:45:32:a1:9f:13:a2:7d:e9:32:11:01:
fd:81:32:5b:45:64:f2:ea:47:fd:22:3a:a5:48:e5:65:6f:bb:
46:78:69:85:cb:ca:79:4b:5c:98:34:f9:1c:50:58:8d:5a:24:
24:bd:01:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net