Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa
File: b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa (raw, json)
Hash identifier: oA2CVv+hrhyxsV9Cvc5U9uDYK4gTPTDnoAqLPZPLSl0=
Subject key identifier: CD:06:0F:DF:62:F6:76:72:BE:40:9F:41:61:C5:DF:8F:00:03:05:54
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F432858491941795436BDC097AF6357C0
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 22568
IP address blocks: 72.250.224.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:79:54:36:bd:c0:97:af:63:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=d198f813-d768-48b1-93f8-c55d72d5018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:0a:f7:7d:64:aa:08:fb:5b:32:d6:db:0e:
2d:67:f2:cb:e5:28:ae:98:f4:2f:fc:d3:31:d9:e4:
01:67:7b:db:02:32:18:44:8a:aa:35:ba:f8:3b:9a:
bf:b6:19:6e:1d:f7:76:24:c6:91:12:ad:0e:22:80:
f3:88:1f:8d:f5:7c:19:8d:ad:74:66:6d:2e:ad:88:
80:39:39:53:25:8d:32:a4:a8:cb:30:78:94:36:fd:
39:df:a7:5a:ea:13:e5:0d:ea:cc:11:5b:15:a1:43:
a6:59:68:e9:b4:e5:2f:4f:98:e9:f9:4b:20:37:ad:
fd:0e:f5:c4:07:47:fc:4b:b3:02:fb:fc:7d:b2:6c:
7e:d1:12:43:7d:44:db:ae:1f:b2:05:cf:7d:9c:ad:
23:e8:f6:bb:68:1b:d3:41:d3:84:25:b0:7a:68:ea:
e9:b6:1d:bb:b4:b9:a9:4d:3c:9c:87:57:51:d9:2c:
aa:78:eb:34:63:28:10:84:d5:7b:d1:d5:f9:f9:99:
b8:54:7f:d6:00:ba:6c:73:73:9e:44:bd:a1:4d:6b:
fa:df:bc:a3:7c:74:c8:10:ba:88:f7:95:30:26:08:
2b:96:52:99:41:ea:5a:47:65:cb:45:72:30:11:ed:
6e:c7:af:fc:89:64:3e:e3:9f:6f:56:49:d5:fd:41:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:06:0F:DF:62:F6:76:72:BE:40:9F:41:61:C5:DF:8F:00:03:05:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.250.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:50:2f:5f:08:9d:73:4a:79:93:80:2b:8e:96:2f:75:78:3c:
59:fe:fe:93:72:6a:ae:42:a1:8d:44:d6:ba:2a:e8:45:8a:fa:
48:18:9e:86:99:39:e4:73:de:67:a7:e9:f3:d6:59:74:70:61:
ca:e7:bc:90:67:3e:a7:6c:b3:4a:ce:32:66:c7:dc:87:87:c2:
0d:4b:a9:1e:0d:0d:50:58:e6:82:24:fd:a3:c3:dc:74:1d:8c:
dd:2e:8c:ff:f0:79:fe:90:98:e1:14:e6:cb:cf:27:e8:bd:bc:
c3:18:29:36:14:aa:9b:c2:ae:16:40:b5:2a:12:92:29:04:de:
b4:bd:f4:92:3a:09:74:dd:df:e2:08:4a:59:49:cf:d1:e9:6e:
b8:8c:70:c8:a2:26:61:90:34:5a:d3:46:00:64:11:b0:70:ab:
b7:25:09:cd:67:43:d4:99:cb:28:89:85:07:7d:d7:04:c2:57:
b7:98:c7:84:85:52:93:7d:a4:eb:3b:73:3e:aa:f2:46:ac:a6:
df:8f:79:23:3c:15:c9:71:ca:61:d2:42:eb:73:c3:4b:6f:06:
57:38:d5:fd:f6:09:55:42:84:50:c6:5c:49:54:d3:75:cc:9b:
01:d2:d7:0e:f7:18:a2:2b:61:fb:a0:2c:2b:7e:44:a4:6a:70:
fa:cb:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net