Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa
File: 30b3dfbf-986d-3282-be34-b6747cec19c5.roa (raw, json)
Hash identifier: BGv+G9/7VhRy013TZ5fczW+8r98LwKoz9gNrhcvDW6E=
Subject key identifier: B0:BB:50:C0:69:30:F9:65:18:93:87:EE:A6:EA:43:57:ED:0A:6C:2D
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F43285848EF613F291141943B627F0600
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 18593
IP address blocks: 138.8.107.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3f:29:11:41:94:3b:62:7f:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=1730db72-9852-4dea-be59-cc77357a06e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:f9:5f:ba:32:ef:20:b1:01:b1:3b:df:ef:
eb:eb:b4:1d:e3:d6:cb:b6:1f:04:82:bd:86:2d:66:
78:24:4a:a1:fd:d9:8f:f1:b8:18:7e:9c:16:6c:1b:
d8:76:e0:52:f0:90:9e:28:a0:39:1a:45:51:20:52:
3d:a5:08:54:75:08:68:54:dc:41:60:cb:a9:38:a9:
9d:17:c3:61:40:5f:43:6c:13:a8:8f:ff:bb:c5:2a:
04:b1:4c:58:be:95:7a:e7:5a:c6:d3:35:ac:e8:84:
47:9f:17:ea:22:5c:c5:4e:b7:d4:32:e1:93:d9:d8:
3d:ff:a3:88:68:f8:fc:38:f6:26:5d:2d:5e:b9:60:
75:3d:85:7c:a3:f0:80:3d:dc:1f:05:40:4e:c4:52:
12:af:20:f9:af:b0:d8:9e:8b:63:d3:02:d7:bd:69:
01:06:a2:9d:8d:57:f7:3a:dd:6c:53:18:6b:7a:09:
9e:30:3d:ef:e1:b0:d2:a7:db:9b:bf:7b:4b:e0:99:
0f:bc:48:8c:0a:2c:7e:a7:8f:e3:6b:e2:21:24:0a:
64:c5:ae:43:05:ce:38:ea:b0:03:af:b1:51:5b:86:
41:98:60:27:5f:55:53:09:8e:5b:1e:a5:ae:4c:d4:
11:ce:72:86:33:c6:0a:0b:07:ae:ec:bb:c9:26:49:
e0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BB:50:C0:69:30:F9:65:18:93:87:EE:A6:EA:43:57:ED:0A:6C:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/30b3dfbf-986d-3282-be34-b6747cec19c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:41:89:9f:b3:fa:d4:a6:13:ae:d2:63:35:7b:af:77:67:b9:
ba:39:43:e8:60:f7:e6:2c:c5:0f:00:c7:6a:6f:d0:00:e6:95:
40:55:4e:1b:40:d6:17:ef:7b:10:05:90:15:87:a4:71:56:37:
88:6d:8b:29:5a:76:72:4e:b6:16:71:b4:35:db:6c:45:55:19:
b8:6b:a0:21:39:c3:20:2d:47:2c:97:8c:10:06:e9:af:21:1f:
47:11:d3:30:46:89:67:2d:4c:c9:7b:18:67:1c:2e:f7:34:d5:
6e:72:2b:18:63:8f:55:24:2e:65:c7:e9:13:2e:b0:87:63:ca:
56:91:cc:8e:47:b7:6d:e2:fb:d1:47:75:35:f2:27:e0:59:a8:
f5:44:92:45:38:97:3d:e7:cd:1e:f7:af:78:d7:a0:3a:6d:2d:
1f:ac:eb:50:f3:84:a0:a8:84:63:7c:5a:e7:22:44:41:c1:7e:
31:94:0e:9c:35:5d:2f:43:7b:0f:85:fa:04:6c:22:46:9b:cb:
f4:77:99:5e:33:94:a9:a8:e6:a9:7c:cd:c7:54:64:1b:cd:aa:
4c:ca:8f:9d:3c:89:d4:af:8c:da:40:b6:9a:42:b7:c4:26:66:
e1:3e:41:53:58:52:29:50:39:34:4a:24:f2:38:e0:b3:9b:eb:
00:ee:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net