Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa
File: d33ac72b-a2fd-3e99-9262-5396871638b8.roa (raw, json)
Hash identifier: +wCpZ91cmCctW1d9cZPV5mS25Z3oSicH9mGMf7LliT8=
Subject key identifier: DE:FD:AE:6C:FE:C4:04:DF:2A:D1:4B:DE:94:96:A8:BD:18:41:11:1B
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848FD56CACFE66DA4BC26619880
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53508
IP address blocks: 206.255.208.0/21 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ca:cf:e6:6d:a4:bc:26:61:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=910a35e1-9c39-4d7a-98b1-62ae5faab349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:e6:bc:c8:ee:01:81:fe:99:d4:2c:25:d2:
9a:f8:95:d0:66:3c:ea:4f:05:42:a1:f0:e6:03:de:
d7:0f:22:68:9f:a2:26:3b:e1:0b:e2:ac:ae:c3:e8:
f1:f4:0d:5e:c7:57:14:0d:dc:51:1a:1d:0f:1b:ff:
8e:67:fe:9a:be:1b:c6:26:60:e8:36:3b:ce:54:da:
24:24:cf:e2:df:50:fd:99:a7:f2:c5:c1:78:2a:93:
00:80:2e:74:37:3e:c2:f2:1b:05:5b:19:04:78:95:
e9:a5:b3:00:63:87:80:a1:8c:eb:3e:f7:fe:a0:52:
8a:cb:86:1e:d8:38:66:98:30:2c:37:c6:88:ed:64:
99:a0:83:34:35:68:c8:31:77:2d:ae:f7:be:1a:a4:
14:f7:63:13:7c:d0:19:86:d4:39:88:50:e1:6c:07:
25:ff:37:02:57:22:59:f7:52:c6:56:20:69:8a:03:
51:81:83:6d:36:59:f1:a3:26:cd:54:af:7b:25:71:
8f:67:30:4d:c3:7f:10:bb:08:d1:0c:69:a6:55:8b:
54:3d:8c:76:21:14:60:b5:0f:60:26:7e:f2:70:7e:
f3:13:a8:16:93:c5:bb:c5:45:cb:62:4e:45:cc:4d:
c6:ff:ba:19:c6:65:93:64:b0:96:39:02:af:76:65:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:AE:6C:FE:C4:04:DF:2A:D1:4B:DE:94:96:A8:BD:18:41:11:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:a6:0a:cc:d9:24:a4:9a:3b:0e:ae:cf:85:0a:df:71:ff:88:
1c:d5:0b:29:81:30:7f:95:87:a8:a4:e0:ae:08:1a:3b:86:b4:
79:c3:b3:92:23:73:7c:df:a9:a8:e9:87:f2:8e:de:7c:2b:82:
ed:c9:ce:e5:76:98:df:36:ec:6b:12:0d:f4:36:ad:c7:d2:3d:
33:e3:fb:5a:3b:d9:45:ff:30:8a:96:51:ff:e7:2e:e3:75:5e:
af:e0:f7:55:f1:ab:53:4d:5b:6f:fa:94:5d:d7:b9:4f:eb:d8:
f6:5d:f9:12:32:5a:68:22:0b:63:e4:9e:23:89:54:26:49:1f:
2d:ce:64:96:fe:99:b1:a8:4b:16:63:b9:f8:af:bc:36:93:1c:
5c:65:80:38:e4:ed:4f:73:2c:d7:0e:73:98:3f:8f:14:88:a5:
64:66:d9:7c:53:34:8c:ff:55:b9:ce:4d:d7:b6:3b:29:17:ac:
f3:b6:51:e4:9c:72:8b:6a:ac:1f:e1:19:50:cc:48:c6:47:c7:
e6:18:7f:c4:86:dd:fb:ed:4a:c5:1a:e3:9c:c7:61:90:f9:bb:
2e:dd:77:91:5a:16:04:55:b3:30:82:5b:a7:b1:c1:56:2d:57:
40:ab:33:b9:59:8e:d1:60:1b:dc:7f:93:e8:57:a1:75:f2:81:
37:2c:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net