Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa
File: b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa (raw, json)
Hash identifier: 6rFNyEiqpJ425DHAiqVMveHV1v3JP7ZwQItbOIoXztE=
Subject key identifier: 2E:66:47:56:EF:B6:24:64:45:E2:7F:17:AB:8B:22:5B:B8:56:E4:E0
Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial: 010D0C9F432858497279B40FEA42C2400C8E1E10
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 32723
IP address blocks: 204.11.160.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:b4:0f:ea:42:c2:40:0c:8e:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=32819b08-7f2c-49ee-956c-67b629e93882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:34:23:1b:23:7c:94:09:01:d2:9c:55:24:
c5:a1:cb:27:ef:9f:cd:cc:06:5c:d4:fe:04:b3:32:
8e:d3:80:45:7e:24:26:c1:62:93:05:6e:02:d0:9a:
88:a9:fd:9d:94:d3:d6:fe:e5:2b:52:c7:39:66:a9:
4d:c0:55:9c:f8:8f:a9:76:76:18:90:d7:fa:c3:db:
f6:62:f4:a9:61:70:e4:36:92:1e:0b:82:1d:48:fa:
51:ab:c4:77:42:4a:33:6b:b2:7f:b1:11:94:b3:d8:
de:e9:9f:88:5d:57:90:57:b0:92:27:05:de:72:b9:
0f:fd:42:0e:d9:ea:79:9d:cd:24:72:78:a2:3a:c1:
79:41:c8:39:b8:60:44:13:0d:90:ed:f9:05:74:13:
8c:d8:0b:c8:c5:60:d9:45:d9:8d:42:7e:92:26:4a:
c3:46:91:85:7f:d4:c8:50:d8:96:bd:0f:5c:1c:e3:
ed:b0:02:c5:c7:e5:37:6e:8e:a7:19:1a:3f:a4:8e:
79:f0:2d:6e:e1:cd:6f:50:3d:23:79:b5:16:c3:75:
0c:4c:41:39:d7:e1:89:e3:23:54:07:d5:93:28:01:
9c:e6:00:a2:c4:6a:77:79:21:bf:d0:29:d6:6f:1f:
47:a0:1b:96:29:0b:f3:50:f1:a3:de:fa:3a:a1:68:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:47:56:EF:B6:24:64:45:E2:7F:17:AB:8B:22:5B:B8:56:E4:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
X509v3 Authority Key Identifier:
keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
sbgp-ipAddrBlock: critical
IPv4:
204.11.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:9b:66:a2:94:fb:f7:3b:a7:69:7c:dc:8a:49:f3:9d:38:e5:
53:5d:14:f3:39:3f:6f:dd:23:31:84:17:43:20:63:54:ce:d2:
75:62:44:67:6a:a7:96:8c:fb:f5:e1:7d:8d:0f:15:1a:75:5c:
13:53:51:4a:d4:a7:fd:6f:73:b4:f4:4b:e7:5c:62:d2:3c:15:
f7:12:a1:a8:35:45:58:cd:74:06:16:61:ee:06:92:a3:71:d6:
8f:cb:63:49:c9:8a:2c:21:01:46:cc:87:fc:b3:6a:14:0c:9f:
53:ff:19:6e:a7:fc:5c:77:83:95:ad:fa:e3:3e:e3:a3:d1:87:
b8:37:a2:84:f4:f0:5f:06:32:22:a3:14:41:41:5c:7a:81:69:
d7:bc:e4:06:17:5f:5f:f1:f4:d6:84:a5:a4:44:50:76:2e:e5:
02:5d:99:87:d0:23:b5:27:96:df:11:e2:24:7e:ec:41:15:37:
ad:64:bd:86:50:91:ba:2a:df:7b:2f:90:9e:27:d5:4e:d5:ca:
fe:1f:75:d0:b7:56:80:b5:88:5b:95:ac:f8:c0:47:f9:04:f0:
06:34:f8:77:c9:ad:86:27:85:8d:f1:34:c4:dd:0a:71:2c:2c:
d7:ac:cd:45:20:5d:d5:72:82:34:4b:9c:a1:4c:68:0c:ab:78:
ec:51:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:24 2025 by rpki-client on console.sobornost.net