Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa
File: 4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa (raw, json)
Hash identifier: PtYLCgwSR7DqefPwcDgykn5GFJVKDwzPKA7UW2LZM64=
Subject key identifier: 9E:94:A0:17:54:F5:49:2E:98:EE:AB:4B:B5:D2:7E:93:78:39:4E:1C
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285849754460398C7DC4069879F680
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 134365
IP address blocks: 107.151.200.0/24 maxlen: 24
107.151.201.0/24 maxlen: 24
107.151.202.0/24 maxlen: 24
107.151.203.0/24 maxlen: 24
107.151.204.0/24 maxlen: 24
107.151.205.0/24 maxlen: 24
107.151.206.0/24 maxlen: 24
107.151.207.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:60:39:8c:7d:c4:06:98:79:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=0dd94b32-ee41-4771-bc1b-0f5ac1d3062c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:69:99:05:6c:9b:ba:62:6c:75:b4:19:02:
68:e8:08:16:77:14:f0:3b:87:cb:7a:e2:41:43:cf:
22:da:99:e8:d8:1e:aa:37:a6:48:28:bb:22:00:6a:
eb:25:08:c2:f1:f4:07:0c:80:a6:95:aa:5b:e3:0d:
1f:c6:d1:2e:ed:22:fe:e1:f3:d2:f8:ad:e9:fc:b0:
1c:51:7b:63:6d:46:a9:0f:ee:e2:cc:13:92:05:41:
2a:ba:cf:32:c1:9b:2b:b7:f0:f0:5d:fe:16:07:88:
72:7b:4f:99:62:55:22:39:3a:34:36:6d:00:3f:f4:
2f:e3:f5:d4:72:a2:6c:5a:c2:0b:d7:96:26:53:19:
2c:a2:c3:3c:7f:69:71:de:bc:0a:d4:8c:2c:dc:fe:
69:2a:7e:bb:74:ba:1c:06:dd:2e:ce:31:c0:1a:99:
b1:6c:6a:66:e2:28:b6:ac:ae:3a:10:bd:22:e4:dd:
34:d8:65:b3:08:c1:e0:65:6e:51:40:5b:49:ed:52:
6b:ad:91:30:0e:5c:a4:60:f8:01:12:16:61:8f:0d:
a0:8c:ae:9d:aa:1c:54:02:b4:ee:28:e7:f4:77:e7:
55:6f:4a:94:45:7b:79:5a:93:98:d0:3e:f1:c8:38:
03:48:c8:f8:2b:3a:97:ac:2a:52:6c:de:b1:14:7d:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:94:A0:17:54:F5:49:2E:98:EE:AB:4B:B5:D2:7E:93:78:39:4E:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:23:93:bc:81:5f:5a:46:38:52:5b:36:3f:f8:a9:90:a3:8e:
88:7a:f9:ad:0c:eb:11:c6:9e:0a:3c:2e:53:82:fb:14:dd:b3:
ab:9c:89:02:a1:98:89:74:78:6d:20:c0:55:de:a3:f1:32:8e:
66:a9:37:ef:65:d8:83:69:c1:b8:b3:cb:a9:ba:9d:7c:cb:22:
13:3e:32:2a:98:3e:00:00:61:fa:0c:cc:c4:29:57:63:4e:b0:
68:bc:42:4a:0c:71:86:4e:e2:e0:2d:c4:3d:09:64:56:c5:23:
fb:4e:65:3f:78:10:44:fb:38:7b:00:aa:81:4e:09:b4:d0:6b:
5d:d6:0e:01:d4:73:c3:c8:a6:64:be:f2:6b:c8:1d:4e:9e:c9:
2f:63:96:36:5f:51:a7:e7:39:cf:a6:40:1c:d2:81:f2:e7:4b:
86:55:24:1a:ea:ec:03:20:02:37:3d:14:de:14:f1:69:87:d2:
cf:ad:be:d6:7b:3e:ab:2d:4a:ea:b3:2e:fb:14:f2:aa:ec:08:
e7:ed:46:9b:2f:39:c5:e1:89:aa:94:e5:ce:82:ef:c1:00:51:
78:09:b6:d4:3c:06:14:82:54:b7:a5:e4:4f:b6:39:f3:a3:8e:
a9:8c:84:f3:cb:7b:2f:64:f4:d2:e8:18:5d:18:e4:cd:06:bf:
42:b3:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net