Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
File: 03982157-61b3-3065-ae38-53829dc9dce4.roa (raw, json)
Hash identifier: 1lW+ZsKIU6NxHp3tP1nOI42zytV/XHPVhCnZtX+ZnAQ=
Subject key identifier: 21:4C:71:DD:FA:9C:9C:1E:79:05:68:AA:64:50:08:50:92:EF:CE:9E
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F43285848EF61695AEE94BCCF5DC63E50
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 56308
IP address blocks: 148.188.240.0/21 maxlen: 21
148.188.248.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:69:5a:ee:94:bc:cf:5d:c6:3e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=4f18213d-eb07-46dc-931a-e9140b2579a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:04:94:89:e8:a9:f0:c6:f6:35:f8:ec:ac:6a:
a7:36:26:0f:93:1d:f2:c0:4b:c8:4f:8b:a2:50:a5:
b7:ad:b3:2a:28:90:5b:54:20:23:4b:e4:03:20:52:
e2:49:f9:41:b6:39:9d:c6:20:86:5f:d5:7c:25:07:
72:73:10:d2:2a:63:16:ee:f9:ec:33:ac:30:de:ac:
df:ab:21:cf:6c:62:3d:77:74:12:64:07:d7:9b:ea:
d9:ce:31:cf:1e:da:9f:4a:0e:8e:f7:b9:d1:5d:3e:
42:3b:31:96:06:4b:be:1a:a9:33:85:14:9a:e5:e8:
f0:7f:8b:04:54:5a:7b:33:9c:b8:f1:81:63:3f:2e:
fd:c9:e8:9c:b9:b4:44:c7:eb:49:26:49:81:f6:11:
9a:fd:f5:e9:d6:d0:f7:94:74:ab:2e:f6:45:f9:89:
15:47:db:44:95:bd:71:a5:4d:d5:75:4d:70:75:9b:
89:4c:3c:dc:2e:b8:16:39:89:72:63:5c:d9:9b:dd:
c7:ed:c2:a4:48:47:e3:28:81:59:de:46:f3:f1:e7:
9e:7b:e9:8a:a6:f1:3e:4b:1e:09:92:1e:c3:79:2f:
37:99:d8:c0:23:30:e8:0d:3c:9f:2c:3b:f0:5c:43:
0f:29:87:7c:41:f2:ab:a1:84:f9:bd:57:fa:83:2f:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:71:DD:FA:9C:9C:1E:79:05:68:AA:64:50:08:50:92:EF:CE:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.240.0-148.188.251.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:25:f5:43:6e:9e:00:c2:87:b4:82:e0:ad:fd:35:4f:49:d6:
55:ef:87:14:d6:b2:a8:a6:4b:ab:52:ab:2d:95:85:fe:03:77:
cc:10:44:43:f5:0c:4a:0e:37:9e:0d:b3:ff:c4:a1:33:d7:62:
d9:9c:22:90:4e:ac:80:13:73:50:e1:09:00:13:ce:da:0c:51:
db:c4:b3:00:f9:74:7a:05:fc:bb:0e:f4:9d:71:ad:aa:ea:32:
49:74:0a:87:00:43:a8:4c:b7:c3:12:d0:20:76:2a:c1:58:c0:
32:68:ea:00:93:74:f0:ed:1d:94:13:cd:d5:dd:d2:f3:aa:b5:
06:e4:95:0e:98:f2:35:95:f9:cc:65:15:61:88:91:99:a5:36:
e5:ee:28:45:6d:5f:2e:2e:5c:30:5b:2c:14:c6:14:68:a1:d6:
ef:f0:29:41:d8:36:ee:f3:9a:ec:c3:25:44:98:37:40:b2:a3:
fb:c6:ec:e6:1f:9a:e2:8b:e7:85:0b:32:0e:64:bb:13:16:ee:
1a:0f:81:9d:07:ac:df:1f:69:33:f5:89:84:4d:a1:1b:35:f2:
55:2d:3d:3a:fe:73:a4:0f:19:c4:df:eb:56:cb:2f:64:76:91:
26:0e:06:78:b1:86:d5:f2:0d:08:72:d4:8a:2b:75:41:32:0e:
4a:a8:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:29 2025 by rpki-client on console.sobornost.net