Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa
File: 27c00e98-a122-30ab-aab2-3e653d16930e.roa (raw, json)
Hash identifier: KbR9LXvEZ5o6r0VdvBRoCLLs12eNofnxfxuoO2Cyk3o=
Subject key identifier: D9:58:88:03:0A:47:A5:5E:79:5E:FE:BA:A8:DB:65:AF:C6:08:6C:4E
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F4328584913AC1F62D2C146D3BF7FD380
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 27446
IP address blocks: 64.147.208.0/20 maxlen: 21
64.147.208.0/24 maxlen: 24
72.27.224.0/19 maxlen: 20
72.250.224.0/19 maxlen: 20
72.250.224.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1f:62:d2:c1:46:d3:bf:7f:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=49838046-ef3b-4eb3-a423-1e940afe0126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:3d:b5:57:5c:e8:1d:0e:e6:18:9c:c1:06:
d8:d1:7a:06:e7:e4:67:5b:d9:1b:bc:50:d5:e1:71:
e9:17:4c:ae:6e:76:e7:08:ab:94:36:73:a5:4d:2e:
c6:aa:b2:8e:98:0b:51:eb:59:63:c7:47:4d:91:af:
af:8a:11:8b:9e:f5:23:52:02:5e:7d:67:a0:8b:cf:
42:05:98:e7:e4:d7:8f:fe:db:33:29:2d:d6:2c:b3:
74:9e:cb:90:c3:41:52:27:64:6a:96:cc:24:f4:42:
05:b5:8b:81:67:2b:2f:85:b5:7b:2d:32:a1:49:d4:
87:08:f4:47:36:78:15:b8:4c:b1:9a:24:15:e7:bf:
73:ca:29:f0:84:d8:8c:16:42:0e:cc:cd:fa:c7:d9:
8a:29:1d:10:d0:5a:63:b6:88:16:ca:15:75:48:20:
3a:da:f6:09:45:63:0a:55:c4:ea:75:ab:76:69:8b:
5b:44:ef:66:09:fa:70:0b:a5:a8:01:40:02:9f:9b:
44:09:4b:13:01:99:59:59:c9:14:75:8e:54:ac:5f:
63:da:84:a3:d8:16:62:0b:f1:5e:2b:ff:99:b2:88:
ce:51:ee:d5:8d:8f:e5:d7:3e:bf:d1:c0:3e:fb:e8:
09:cd:9f:bb:51:3f:e0:79:e4:9c:80:23:e0:0e:47:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:58:88:03:0A:47:A5:5E:79:5E:FE:BA:A8:DB:65:AF:C6:08:6C:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.147.208.0/20
72.27.224.0/19
72.250.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:06:dc:34:16:28:58:04:28:de:51:3d:e0:48:15:75:97:97:
78:02:62:b1:53:ad:ed:e9:83:99:3d:34:6c:39:5a:6c:4c:f5:
ed:74:d1:13:84:3a:96:d1:bd:0e:12:13:56:b7:ce:bc:c2:d8:
2b:0a:75:bc:c3:58:8b:99:e1:66:37:37:b7:51:1b:a0:bb:fa:
86:86:58:96:44:91:51:c4:38:df:88:c4:c3:4a:0b:f6:41:b6:
a9:3d:cd:04:0b:3e:4d:29:99:2e:c2:a0:81:e6:0f:49:42:4c:
14:68:79:5b:93:e6:0f:6e:58:95:e6:83:cb:a9:0f:7d:5a:18:
29:3e:f4:66:a2:9b:c0:41:90:57:22:00:b0:b6:4e:bf:47:44:
a6:81:6e:55:79:99:04:21:fd:6b:af:30:59:56:41:8f:c5:a2:
dc:3a:b9:bd:e2:d5:ec:7f:2a:88:88:04:aa:79:a4:ba:c0:c6:
27:24:15:17:9d:2e:70:b6:f1:cf:1b:c7:fc:fa:3f:c9:08:f1:
ab:a0:99:6e:e5:13:1a:8c:b9:a0:f7:50:7e:a6:e3:a9:00:1a:
d5:ef:ef:78:e8:34:c1:30:81:f0:63:34:b1:4a:28:6d:96:af:
f8:e7:12:44:11:fd:35:70:bf:a1:bc:0d:3f:38:be:57:49:32:
74:b8:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net