Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1248a108-6a6f-3b7b-bc71-f09a94b39b7a.roa
File: 1248a108-6a6f-3b7b-bc71-f09a94b39b7a.roa (raw, json)
Hash identifier: +d0gSWmUsugP+CFj7lovvdVw8lCY5alms55Tq0RnXIg=
Subject key identifier: FF:07:B7:D1:55:3C:6B:99:3E:C9:E4:EF:FA:17:74:2B:87:D8:AB:68
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F43285849711430CE3A0525A522A33B80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1248a108-6a6f-3b7b-bc71-f09a94b39b7a.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 23473
IP address blocks: 66.253.155.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:30:ce:3a:05:25:a5:22:a3:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=34c2be00-d41b-43dd-b368-c0acc905f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:b0:15:0c:04:66:6b:0f:c0:74:77:89:45:
cd:18:35:d0:06:d5:a4:b7:68:06:f1:99:da:ed:fa:
b6:8d:4a:83:02:17:dd:71:bd:9e:1a:3f:33:5f:9e:
8d:5c:d7:0c:3b:e5:9e:f0:4e:ba:3b:89:9b:c4:33:
e5:bf:2f:77:ac:b0:88:b9:6b:c7:6a:61:4c:37:e4:
77:0e:91:ed:d7:59:9d:1b:ac:11:0e:80:7c:46:14:
9e:64:bb:53:2f:e3:b9:79:f8:36:f5:5c:02:70:91:
60:75:64:b1:d4:a3:ac:f2:5e:f7:f8:3d:da:ff:d5:
3d:97:e0:d5:f9:02:7e:6b:07:18:54:f1:9c:a1:e1:
a9:90:2a:01:4e:4e:5c:b6:0b:6f:39:6e:d2:01:8f:
a4:95:d1:41:99:15:da:c8:66:18:d5:0b:9c:bf:ed:
b1:92:6c:8c:04:a7:ff:39:4d:18:68:a5:23:72:cb:
dc:9a:f8:be:2d:ab:da:55:16:9a:2d:ac:20:85:d3:
a0:bf:63:9a:3d:6d:e8:49:11:79:da:18:aa:65:13:
f2:88:91:3a:ad:03:a4:ff:f8:93:f2:48:c7:08:79:
37:21:22:e1:9e:0e:00:42:5b:41:db:3a:33:9c:4f:
06:bd:66:eb:49:51:ab:29:09:5b:65:f6:f1:00:bc:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:07:B7:D1:55:3C:6B:99:3E:C9:E4:EF:FA:17:74:2B:87:D8:AB:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1248a108-6a6f-3b7b-bc71-f09a94b39b7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:21:d0:19:d7:0f:08:4b:39:15:14:a3:a8:0b:0f:1d:50:a7:
d0:9c:67:4c:47:dd:8f:06:ed:d6:25:2e:b8:36:6c:66:d9:e9:
0d:9d:04:fe:7e:af:69:93:bd:5b:e9:c0:32:e4:30:22:28:4f:
81:a3:be:3d:f9:0e:07:3a:63:cd:51:79:b7:fb:67:b6:cb:a0:
86:21:48:2d:27:51:dc:44:2b:cb:cd:26:aa:f0:26:a4:ff:1a:
48:61:48:91:b9:a4:b6:2a:28:09:4f:1f:da:76:40:99:a0:19:
4c:c8:86:5a:a3:a0:58:61:42:f4:20:7d:94:07:e6:55:14:35:
cf:3d:f9:af:90:3e:f0:69:0f:ef:ad:f0:4f:34:e2:83:95:8d:
5c:20:28:1e:78:36:72:1c:10:ff:cd:5e:cb:39:09:9b:60:ac:
73:57:ea:e7:a4:da:11:ef:01:60:66:27:22:34:0e:6a:df:a1:
ab:a2:e6:0d:9b:19:e1:d7:48:e0:4d:e2:5c:bf:b7:09:e7:b8:
4d:23:c8:93:cb:f5:7b:73:c2:10:74:be:40:13:19:dc:83:9b:
61:63:f5:78:56:bc:21:53:24:3c:0f:4b:ec:2a:6b:53:7c:d8:
95:bb:a5:66:11:e1:aa:f2:65:d6:ae:7b:8e:b8:48:a8:f5:b5:
07:b0:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net