Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/054b2fde-6806-352d-be70-ec8e030d1725.roa
File: 054b2fde-6806-352d-be70-ec8e030d1725.roa (raw, json)
Hash identifier: Ga5G33wUe0D3jaookM6hh22n35Uy0aKVqd224ZuKYso=
Subject key identifier: D8:CF:81:B5:42:6C:0C:D6:B6:A1:B0:6A:60:CC:C5:D6:79:FD:94:61
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858492CB21D89873E901D389DE2C0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/054b2fde-6806-352d-be70-ec8e030d1725.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 139285
IP address blocks: 107.151.236.0/24 maxlen: 24
107.151.237.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:1d:89:87:3e:90:1d:38:9d:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=decced29-d18b-465d-b8fa-8983f310f0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:a0:21:30:96:cc:7c:e0:7c:f4:e8:a0:b3:
0b:f6:23:e3:85:3a:81:2c:8a:40:ee:02:ce:31:a2:
10:d8:b6:1b:d7:d2:5d:a0:96:d7:b1:9c:72:a0:7a:
ab:ac:d3:f1:b2:dc:11:3c:22:63:0b:5d:56:d5:a1:
3b:d1:ad:97:f8:dd:7c:39:2b:f6:e1:c2:87:2e:a3:
1e:f2:46:bf:ff:6e:73:72:20:72:e2:7d:e5:f9:88:
db:cb:56:d6:c5:65:50:bb:77:6c:c7:6b:31:20:16:
a6:8a:e3:f6:7d:ec:e6:98:d3:28:ea:8b:c5:b2:36:
68:79:b9:fe:30:d1:b6:15:16:4a:15:63:dd:85:ce:
63:7a:c9:f6:16:a4:f9:c7:80:02:7e:52:be:61:ee:
40:c3:fe:d2:ab:57:cf:dc:cb:ab:e3:fa:78:1a:45:
29:27:1c:b0:05:cf:14:14:fa:f2:83:b6:5f:bb:02:
4b:28:df:04:9c:c0:27:2f:74:d2:12:9c:09:69:47:
4d:e5:0f:3b:0c:1d:c9:ff:e4:7f:68:ef:9a:fc:21:
98:ef:d7:46:b7:24:6e:cc:40:94:00:15:a8:65:cc:
3b:33:32:92:66:95:55:71:cc:b9:4a:58:19:f7:15:
f9:57:f4:40:5e:4f:15:85:27:59:a3:44:38:c9:f7:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CF:81:B5:42:6C:0C:D6:B6:A1:B0:6A:60:CC:C5:D6:79:FD:94:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/054b2fde-6806-352d-be70-ec8e030d1725.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:a0:81:24:e9:cc:b2:d7:29:56:a0:22:31:cc:d5:18:27:64:
7a:ab:06:07:61:60:53:fc:dc:28:76:b4:97:f5:6f:42:e4:3d:
44:12:34:4f:bb:dd:f6:99:3b:10:63:01:2c:f6:bd:6c:7a:30:
b9:01:cf:b2:1d:39:d6:cd:6e:38:a1:8d:e7:b7:2c:0c:10:44:
74:c7:6c:d9:e2:c3:65:bb:d2:78:a4:e5:98:f3:e1:c7:af:e0:
f8:c2:d6:9e:d6:c1:0d:71:23:be:36:52:76:4a:7a:de:b5:16:
8b:70:2d:98:1c:7f:5f:10:f4:ad:14:a4:b9:e9:11:5b:8b:dd:
5b:0c:47:ea:79:9a:4d:5a:79:bf:2a:d6:02:cc:9e:73:1c:fa:
be:1d:d4:cb:f6:77:8d:f7:7e:b9:94:4c:21:38:54:78:44:94:
21:ad:0c:6f:9b:61:5a:80:28:f6:53:2b:2f:e1:68:e6:0b:52:
a1:5a:b9:67:1f:62:dd:78:1f:ba:04:25:e0:a9:4b:dd:d3:12:
a7:3c:7c:4e:19:03:2f:b6:64:21:3c:70:12:37:41:25:c6:8b:
0c:10:43:b5:20:1f:52:ef:18:87:74:4d:7b:fa:91:54:c8:fc:
58:b2:32:dd:31:1b:04:51:fc:f1:66:e9:48:e3:44:4f:a7:79:
10:16:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net