Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/df561cb6-2c93-3a7a-8557-a364422ceb63.roa
File: df561cb6-2c93-3a7a-8557-a364422ceb63.roa (raw, json)
Hash identifier: /rwD09FVdiRTxAenPeP4od9AVUJBbCOmj4PFtqByDws=
Subject key identifier: ED:75:D3:9B:FB:A9:DC:AF:0B:06:D1:C5:90:98:D5:C1:32:E3:32:2B
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584972E95DAB309FC0046EABE360
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/df561cb6-2c93-3a7a-8557-a364422ceb63.roa
Signing time: Mon 07 Apr 2025 16:46:11 +0000
ROA not before: Mon 07 Apr 2025 16:46:11 +0000
ROA not after: Sun 06 Jul 2025 16:46:11 +0000
asID: 23473
IP address blocks: 104.145.120.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e9:5d:ab:30:9f:c0:04:6e:ab:e3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Apr 7 16:46:11 2025 GMT
Not After : Jul 6 16:46:11 2025 GMT
Subject: CN=705af57b-6fc9-4574-a8a3-618223d7bdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:42:d8:48:49:d8:ed:2f:95:e7:bc:76:e7:
39:74:f4:1e:b5:1c:3b:70:87:9c:7d:f2:95:0f:ec:
31:73:4c:b8:d1:f9:ad:76:c7:f3:af:6d:84:06:fb:
f9:d3:c5:00:63:44:c5:a1:84:83:37:9a:68:11:67:
70:69:00:37:7b:15:45:64:8a:72:7e:24:b4:c7:6f:
a1:a3:af:bc:5b:aa:b8:4a:6f:f8:cb:c4:fa:c3:0a:
41:75:4d:1b:45:12:62:bc:ed:66:14:33:09:9b:c1:
7b:30:10:43:dd:15:a7:87:bb:ed:ff:20:03:06:ab:
e1:62:67:51:5b:17:0c:87:17:5c:14:e6:91:a8:49:
f7:e6:97:96:4c:fa:b2:39:df:73:94:0c:46:d9:f2:
d9:c4:0b:f4:cb:c6:3f:68:b3:f6:e6:12:89:83:86:
d9:2b:f5:bb:00:48:8e:ca:31:dd:9a:5a:86:eb:02:
1c:a8:20:e5:b8:41:f3:b1:99:b2:86:b8:11:bf:fe:
8f:4f:e7:27:df:ba:36:7b:29:c7:7e:2e:da:0e:1d:
76:38:5f:4c:42:12:fc:20:6d:0c:41:1a:8f:d3:92:
cf:e0:c4:18:78:d0:a7:92:5a:2a:f0:2a:4d:34:80:
45:8b:74:c2:19:21:bc:05:22:fb:f6:8f:21:0d:27:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:75:D3:9B:FB:A9:DC:AF:0B:06:D1:C5:90:98:D5:C1:32:E3:32:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/df561cb6-2c93-3a7a-8557-a364422ceb63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.145.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:eb:a9:6f:c4:23:78:4d:48:b9:8b:bf:5c:6c:03:65:fc:25:
6f:e4:57:8a:4e:43:ea:b7:39:c6:60:92:67:2a:ef:11:0b:f2:
ef:ce:4b:ac:5d:07:6d:aa:ad:2a:5f:cd:ad:a4:e9:33:7a:e0:
32:36:8f:e5:ec:ce:e9:66:46:b9:6b:58:a4:55:21:08:f2:1e:
d6:96:1b:56:e6:e1:fc:41:0c:c9:62:89:8f:df:49:83:44:5a:
11:03:58:ec:e5:73:61:63:d6:3d:ff:65:db:00:30:5a:1f:f7:
d8:36:34:77:51:d8:84:ff:dd:43:92:9c:24:56:2d:99:39:cc:
ae:d1:14:c4:98:f8:a2:f0:db:b1:ed:15:db:a1:ec:25:8d:0a:
0c:23:5b:86:43:1a:94:0f:09:5c:cc:de:70:c3:ca:e9:7c:00:
80:a8:eb:a1:ce:88:f7:57:6a:e7:a9:13:e2:9e:bb:52:5d:1a:
17:19:a6:2c:db:4e:27:f5:d0:bf:8c:ca:d2:93:21:7e:94:77:
14:94:83:f5:2c:bc:49:8e:4d:0d:e1:5a:64:df:25:96:4e:e7:
da:a2:33:85:a6:b2:dd:7a:3a:74:be:be:dd:b3:79:65:f2:5d:
a5:39:ea:3a:df:0d:ec:f5:ec:dd:e6:44:e6:92:09:e2:0e:6a:
14:65:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net