Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa
File: 5986a15c-31f2-3481-a490-90f8833a40b9.roa (raw, json)
Hash identifier: 30M3C9CozSSDd/53qCQhZNwBIDNOVu/B8onHTTzO3fc=
Subject key identifier: 61:CB:4D:65:48:66:57:80:F0:68:4C:92:31:E8:19:2E:2C:56:DE:B8
Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial: 010D0C9F4328584919418A33AC62CDE3522C64C0
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 22765
IP address blocks: 72.20.201.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8a:33:ac:62:cd:e3:52:2c:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=fa4fb9d4-525d-4ebe-9e4d-8a84b5af5493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:00:d9:10:f2:ea:4a:c9:e9:80:d3:ff:d0:
d3:12:7c:e4:a9:42:cf:12:24:4d:25:66:e4:c8:2a:
2b:d6:ad:99:ff:9f:be:1d:96:ff:82:70:a7:ee:bb:
c8:cd:3e:90:8f:74:92:0e:c3:c8:07:e0:77:31:36:
5a:fd:65:b3:1e:eb:40:4c:fe:96:ec:a8:57:7a:d7:
3e:7f:41:46:97:7f:44:03:22:49:01:e2:0c:17:93:
54:bf:04:d7:98:7f:93:d1:20:ba:1b:1e:0e:ef:94:
63:f1:83:1c:60:d6:6b:29:0f:a6:99:fc:ae:9d:c6:
ae:bf:4e:05:57:6d:10:b3:4e:75:e8:0a:95:4b:1f:
94:5d:fd:bb:ee:5f:cb:dd:6e:89:77:7a:b8:dd:31:
78:e5:49:db:18:02:a3:ae:46:57:a9:3c:af:1d:06:
9a:fc:f7:31:7b:53:b6:a9:cb:78:a5:ff:57:be:a8:
5e:3f:8e:09:61:27:bd:00:c2:93:c9:37:ca:4e:e3:
cd:d7:89:98:4d:d4:e6:6e:d9:3b:44:f2:5e:00:af:
0d:09:34:69:d1:e4:82:37:dd:43:0f:a0:f6:4d:21:
63:78:55:b4:ce:58:00:b2:55:5f:07:6e:cf:d5:9b:
4d:d9:62:7a:16:7a:ec:13:5e:26:5d:04:fa:bf:b4:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CB:4D:65:48:66:57:80:F0:68:4C:92:31:E8:19:2E:2C:56:DE:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
X509v3 Authority Key Identifier:
keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:4a:47:36:99:bf:96:0d:2c:89:6c:32:2b:6a:7d:8e:1c:6b:
a5:f0:d5:5d:32:67:f7:ad:cf:56:f5:93:2c:f3:d9:8e:24:91:
de:07:b4:95:80:29:3b:da:d2:83:f6:7a:4a:95:2f:a1:96:86:
98:46:63:e4:82:e0:fe:3a:14:a6:89:1e:58:e1:df:ac:53:5b:
db:54:20:ef:ec:5f:b1:e4:18:17:94:d2:3a:aa:f9:57:41:8a:
ce:28:42:63:64:d7:c8:6e:21:b0:53:9a:b6:5b:7d:c1:af:6e:
66:9a:49:4a:7c:c0:13:26:c0:57:0a:c9:54:b2:77:73:49:86:
89:08:ac:08:03:c6:00:fa:fa:82:07:9f:d3:cc:50:c4:f8:93:
ef:a1:b6:34:3d:62:43:51:8d:7b:5d:64:26:cd:b3:c8:23:cd:
71:7b:cd:9e:2a:d1:7b:0a:50:b9:32:1e:c9:57:f1:c6:a4:87:
89:67:c9:ec:39:d3:66:3f:05:6b:33:da:5d:30:8a:ba:f0:78:
30:cf:db:8d:28:93:f8:27:ba:51:98:18:cf:61:fc:b5:78:32:
7e:54:3a:5a:36:3f:47:26:42:8c:3b:67:e8:e1:1d:d1:64:7d:
7e:5b:21:59:3a:ab:6d:b2:26:87:2f:e5:f2:5a:0b:2f:ff:8a:
ad:0b:7a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net