Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa
File: 3e196079-8695-30ec-97ad-a014098a62f1.roa (raw, json)
Hash identifier: Jc9eHHE4Sqh/HOjrqEh8ybj6a6GoZLcVXiOQKdoN0RM=
Subject key identifier: D2:37:12:3A:17:79:09:BE:22:1D:F5:C1:51:1D:8B:F1:0E:B1:00:DB
Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc
Certificate serial: 010D0C9F432858496E4989C6A6573CBB638901C0
Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa
Signing time: Sun 06 Apr 2025 01:00:47 +0000
ROA not before: Sun 06 Apr 2025 01:00:47 +0000
ROA not after: Sat 05 Jul 2025 01:00:47 +0000
asID: 400519
IP address blocks: 198.22.204.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6e:49:89:c6:a6:57:3c:bb:63:89:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc
Validity
Not Before: Apr 6 01:00:47 2025 GMT
Not After : Jul 5 01:00:47 2025 GMT
Subject: CN=c67cadbf-fb81-479c-9eee-3ccd0ad57195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:21:71:8d:33:12:3d:3d:39:39:1f:4b:b2:
bb:8c:51:07:77:c8:51:7c:f7:96:9c:0e:c8:f4:49:
61:1f:9c:be:05:07:54:6d:19:ee:dd:ff:f1:b7:03:
68:8a:76:5c:7b:70:1b:2d:c9:80:43:57:1a:17:c6:
5d:b5:d0:01:bc:d8:1e:55:67:3c:44:73:12:ba:08:
a1:5b:96:dd:07:07:88:db:2c:51:5e:b0:47:be:44:
d6:9a:35:d9:3d:21:76:01:bf:28:84:61:f2:e6:72:
36:26:ef:92:79:1d:96:e0:23:8a:31:e5:60:28:e1:
b5:1a:72:0a:7a:e5:8c:66:30:4b:0a:52:bf:b6:b4:
3b:4c:0e:9f:4f:2f:68:4e:ec:40:ac:c2:ae:b8:4b:
b5:5f:e4:fa:26:d0:4f:11:13:7b:ad:40:3d:72:b7:
15:66:06:0a:60:56:ea:3f:c1:f6:d0:4b:2b:80:e9:
c2:96:af:43:1d:ba:76:02:e0:4a:2b:ad:3f:c1:58:
a5:0d:dc:8d:1e:d3:11:f0:be:9a:f4:05:2c:cc:4b:
18:ab:12:e4:c7:b4:1b:01:28:44:4f:bb:35:d9:12:
0d:ae:e2:6c:e8:85:03:84:ee:34:c8:31:d1:ee:9d:
26:18:a2:c7:1a:4c:ff:63:a1:8b:71:8e:d4:da:42:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:12:3A:17:79:09:BE:22:1D:F5:C1:51:1D:8B:F1:0E:B1:00:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/3e196079-8695-30ec-97ad-a014098a62f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl
X509v3 Authority Key Identifier:
keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.22.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a8:a1:8e:f2:a4:0b:d5:02:1a:63:b7:20:9e:4a:ea:83:00:
61:37:a7:02:5d:91:02:8d:05:29:14:31:58:ac:05:cc:16:63:
88:90:e0:84:bc:ce:9b:18:92:ba:f4:22:02:ff:4b:e2:58:b8:
74:9f:29:7c:5a:d0:d8:41:c7:a2:ec:d2:66:af:96:17:95:7a:
cb:bd:85:a5:f2:52:b8:dd:33:9f:82:53:de:60:77:cc:03:a9:
a3:6b:8a:cd:67:4a:d0:33:bf:8b:ad:e5:da:0b:18:9c:7a:ba:
e3:fb:7d:86:27:04:16:50:28:d7:c8:75:0a:62:6e:eb:6a:69:
ac:34:0d:2c:f9:54:74:9c:4b:d0:3b:e7:49:ee:a1:21:d9:45:
d6:a4:b6:1c:2d:a6:0d:5e:1f:9e:52:ff:48:13:03:58:7d:ad:
8f:94:8e:9f:76:55:43:0e:f3:66:bf:9f:3d:88:b8:ab:55:59:
ae:cf:a4:76:32:11:99:07:8a:39:f5:7d:64:d9:3d:27:f8:44:
40:cc:6a:60:bb:0a:14:02:95:84:f8:ee:eb:d2:ec:b9:ac:51:
0b:0f:73:94:ab:1b:38:b8:0e:36:0a:ad:00:34:35:46:d2:08:
e0:fd:de:33:a9:e0:25:2f:99:b5:c3:76:da:71:e1:5c:e4:34:
73:c5:e6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net