Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa
File: 66cef13d-dff8-32f0-a25e-7a5331345d1c.roa (raw, json)
Hash identifier: WAURoaWK15gniQJ7KTZ8h2gl/JoLftCIxSRxQF02bX8=
Subject key identifier: EE:BC:FD:2F:70:31:0B:24:66:38:FB:CB:B4:29:2D:2C:F4:5D:B9:45
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F4328584940394E3E45B0FAB523414660
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 33392
IP address blocks: 142.202.112.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4e:3e:45:b0:fa:b5:23:41:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=e17c4175-da0a-4638-83f2-d2b9496cfa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:e0:1b:1b:3d:8b:39:0b:6a:c9:ab:09:56:
ab:44:b6:c5:8e:d7:2f:58:ce:ab:89:e5:a0:b0:de:
ee:5a:de:85:af:84:db:34:f6:45:5d:53:e6:4f:50:
1f:be:33:7e:f6:13:b4:6b:6a:58:bc:24:41:21:f6:
87:a7:5f:9a:f0:36:ef:93:af:f4:9c:4e:41:94:81:
fd:4d:7a:6e:31:00:35:22:35:9d:53:76:89:42:1e:
f3:d9:62:5a:ba:e1:0a:f2:ff:d2:8a:1c:7a:73:ff:
b7:8f:3e:28:9e:f5:04:72:19:05:9f:11:ea:13:7e:
a5:d6:9e:9f:6c:4e:51:4a:b8:ae:8a:82:b6:f3:58:
4d:76:e9:00:d5:36:0e:a5:5f:15:aa:ca:1f:f2:ab:
3c:c8:68:01:79:53:bd:26:1b:e0:e0:41:71:ab:a6:
d8:d7:9e:56:4b:9c:dc:ad:ff:a2:96:08:0a:d3:5b:
4e:02:b1:0e:9d:6f:8f:2c:dc:7e:48:9e:5a:ec:4b:
29:f4:87:a6:ec:f4:e9:de:af:a5:d8:4d:7f:d0:41:
2c:fe:31:72:55:26:a2:e8:3d:62:cf:d9:07:7d:53:
82:50:f3:78:cd:0f:6b:40:a4:27:d6:66:28:14:13:
13:04:a8:e7:00:bc:d6:2f:96:04:f7:15:01:d4:5b:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BC:FD:2F:70:31:0B:24:66:38:FB:CB:B4:29:2D:2C:F4:5D:B9:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:05:a8:f7:82:47:7b:7c:dc:6e:3c:10:65:ea:b9:e9:65:64:
e5:56:19:25:30:89:f4:fe:43:ea:c5:30:2b:47:6e:35:2f:cb:
91:94:eb:5c:73:71:23:1a:96:95:13:94:e8:e9:42:36:fa:73:
33:bc:3f:72:07:e3:d3:5b:bc:09:2b:ec:d8:11:be:a4:30:94:
0e:0c:d7:fc:cb:43:53:ce:64:be:ce:6a:bf:eb:5f:52:a6:f2:
4a:81:ca:23:dd:4b:a5:c8:a0:cf:81:da:79:84:75:33:21:73:
41:c6:31:ca:77:b0:32:26:6a:e6:f5:91:9a:7d:67:d1:b6:5a:
20:e4:1d:43:6d:f0:09:5a:82:a0:17:ca:5c:8e:93:3b:24:ff:
69:06:27:f1:7d:f6:41:ae:fc:43:5f:1c:cd:bf:9b:37:81:6f:
65:7c:26:d0:9c:9e:e3:46:c2:4f:b1:79:bb:08:31:4a:5c:1a:
d7:ed:67:a8:d6:7a:75:55:e2:57:55:82:07:12:e2:28:af:f7:
44:5c:5d:00:bb:ce:49:b1:db:db:b8:d9:f7:44:63:57:9d:15:
f6:c8:06:19:2f:c1:06:62:65:61:7d:d3:c6:78:b1:38:00:f1:
fc:ea:65:d1:88:64:a4:69:b4:33:e2:3f:33:a6:0b:dc:d7:90:
13:0f:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:30 2025 by rpki-client on console.sobornost.net