Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa
File: cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa (raw, json)
Hash identifier: XTr9mif/smU+Oia6nQvXaOE8iz4tN4N8Q1AF0u9n0Lg=
Subject key identifier: F1:F6:18:53:CD:96:64:B4:D9:A0:E0:29:F9:89:08:39:1A:23:16:37
Certificate issuer: /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial: 010D0C9F43285848FBF127277E88329A23F0BB80
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa
Signing time: Mon 24 Feb 2025 02:00:38 +0000
ROA not before: Mon 24 Feb 2025 02:00:38 +0000
ROA not after: Sun 25 May 2025 01:00:38 +0000
asID: 36105
IP address blocks: 65.65.128.0/20 maxlen: 24
65.65.152.0/21 maxlen: 24
75.41.144.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:f1:27:27:7e:88:32:9a:23:f0:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Validity
Not Before: Feb 24 02:00:38 2025 GMT
Not After : May 25 01:00:38 2025 GMT
Subject: CN=46df4cac-bceb-4142-8cac-189f044d56b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:c4:5b:79:57:56:4e:36:98:04:36:f3:cc:
2d:7d:df:6f:c6:18:2e:ae:17:32:9f:19:90:52:5e:
32:65:ce:a6:c2:76:79:93:81:a2:94:c8:ba:5a:6b:
c2:31:a7:78:a5:78:3a:3a:86:46:ce:bd:8d:57:46:
39:f4:e2:e9:a5:e8:e9:61:5c:6b:ea:57:4e:ec:7d:
38:2f:10:cd:54:49:80:ca:97:33:d5:0f:ee:cd:49:
de:2e:ce:ae:cf:9a:01:81:c2:14:15:22:cf:2c:ee:
cb:3e:16:ae:bd:c0:07:d7:b8:14:63:71:1e:c2:b2:
fd:ef:ca:5b:af:16:10:7b:57:35:9e:37:b9:c0:ca:
df:ba:ac:f2:c4:e7:b9:42:78:7c:14:fa:f9:88:b3:
0f:b5:71:0a:a1:10:3c:a6:30:44:f3:82:14:cd:b4:
e3:52:a8:6d:92:c6:97:74:9f:87:01:2d:7d:af:85:
3f:b8:2a:89:3a:a6:95:c9:0e:81:d1:8b:80:81:0c:
2e:26:e7:7d:fc:aa:92:bb:be:fb:64:4c:8c:67:49:
24:db:74:85:34:90:38:e2:15:e1:e3:13:6a:1a:8c:
9c:38:31:50:f9:ac:28:d1:ea:46:87:ca:b4:c3:1d:
d4:b2:21:e0:37:55:37:aa:2b:99:09:9e:9b:cf:68:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:18:53:CD:96:64:B4:D9:A0:E0:29:F9:89:08:39:1A:23:16:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
X509v3 Authority Key Identifier:
keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
sbgp-ipAddrBlock: critical
IPv4:
65.65.128.0/20
65.65.152.0/21
75.41.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:e5:96:cc:a5:9a:43:9b:b2:1b:98:90:eb:89:88:11:08:95:
2c:a1:70:c1:89:66:40:ef:f1:a4:3b:95:18:4a:8d:97:02:6f:
22:a8:bc:28:5a:59:7d:22:6d:f5:bc:98:18:02:ec:59:e0:f3:
a5:c3:23:23:fa:d3:ee:b4:da:63:38:0a:be:9f:fc:68:6f:65:
ab:ff:4e:d3:e9:a3:ee:76:b8:33:cf:1b:84:a6:9c:27:15:d0:
1d:b1:da:c2:89:10:fa:01:0e:43:28:7d:b3:7c:83:96:bb:59:
50:c7:e7:35:80:64:9e:ae:a4:82:9f:2a:91:3b:54:1e:61:d9:
47:89:4e:47:0b:cb:8e:f8:2e:e9:0d:5d:8b:92:b2:d7:e6:1e:
52:5a:b0:ba:52:31:0d:08:a7:57:9a:ec:7b:11:ed:3b:2a:3e:
fc:3f:c0:5d:4d:81:29:f8:e6:a4:b7:4c:66:21:b1:af:de:5a:
6c:6f:08:6a:8c:6c:4f:0b:37:20:88:25:00:81:75:cf:e5:9a:
43:e5:b9:d9:8a:01:c4:0f:99:3a:ea:6e:01:4e:17:59:5f:3d:
66:6f:29:95:e7:ff:03:1e:43:91:d2:53:51:9a:c4:f7:11:40:
eb:75:36:27:3b:98:62:01:74:d8:f8:37:b4:b2:60:bb:49:cc:
3a:b7:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:34 2025 by rpki-client on console.sobornost.net