Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa
File: 8c609069-4384-3695-9ac5-2533f2d92953.roa (raw, json)
Hash identifier: nJ9vCYO3MbG4EQtNn0bjDKM5xJYfW9h6CfAO/B/Q7BI=
Subject key identifier: FA:64:00:D5:2B:EA:15:CE:B9:12:CF:A2:7B:26:AA:77:45:FE:E2:F5
Certificate issuer: /CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8
Certificate serial: 010D0C9F432858495C243F36DCF008CF5D97D880
Authority key identifier: 9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 46523
IP address blocks: 199.38.56.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:3f:36:dc:f0:08:cf:5d:97:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=18682b25-0bd7-4293-a40f-239546d101cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:dc:a2:43:40:fe:f0:39:25:04:2d:3f:1c:
59:af:b5:c1:8b:17:8e:d7:33:67:3d:a5:13:24:dc:
fe:04:9f:fb:a4:6d:5e:c7:1f:b7:d8:ad:30:a2:12:
e7:d1:65:fd:71:f1:0b:1e:ed:79:12:86:b2:ef:62:
24:bb:e2:49:3d:87:f6:7c:57:2b:79:b2:ce:1d:90:
ce:b1:ba:3e:4a:81:9e:56:3a:a2:8c:75:df:cf:46:
4d:99:f8:9a:13:94:10:dd:ca:9e:ed:92:cb:a6:29:
f7:95:75:3c:1c:dc:2d:7a:58:5f:0a:0f:67:45:73:
ca:51:cc:41:57:30:0c:1b:13:77:67:45:d1:1b:03:
39:0b:a2:98:85:ec:9c:ab:4f:c3:bf:58:fa:45:6e:
a7:8e:3e:6a:70:92:f2:0f:80:1d:5f:44:9d:d3:77:
74:42:e8:4d:50:ee:b0:32:a1:9c:f9:65:02:31:dd:
24:64:04:f0:2f:f6:e0:f3:eb:77:c5:0a:0c:18:15:
68:b2:2c:c0:37:86:f5:8c:54:9e:b7:79:88:0e:b9:
d6:58:33:9a:2b:e9:c8:46:10:91:9b:20:02:a5:46:
2c:59:39:71:67:34:d3:29:1d:72:a0:30:83:95:d2:
b2:10:3e:cf:a5:94:43:ce:a5:09:26:71:65:53:c5:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:64:00:D5:2B:EA:15:CE:B9:12:CF:A2:7B:26:AA:77:45:FE:E2:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.crl
X509v3 Authority Key Identifier:
keyid:9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.38.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b9:18:57:64:bd:cc:65:e2:bd:b8:28:a0:18:55:ef:b6:c8:
87:50:82:8e:70:a3:11:ea:2c:a3:12:de:5b:7d:06:c4:96:90:
f0:b2:4a:aa:9f:d8:82:a8:33:b3:ac:03:3f:9b:89:5c:9a:a8:
98:71:a9:91:a6:1b:ea:de:a9:7d:a5:b4:76:f1:77:73:d0:90:
dd:83:25:71:08:ed:5b:64:87:7c:95:6e:bc:f1:4d:7f:9b:77:
61:91:dd:6d:fe:2e:18:25:a9:32:b4:1d:64:aa:72:31:8d:f1:
a1:0f:cb:df:8f:a6:9b:ee:e2:29:e4:6a:ba:c5:08:da:1c:c0:
74:45:a6:ca:62:ee:2a:75:ae:68:a5:ad:cf:9c:2c:9d:4a:eb:
18:21:2c:4b:9b:da:a2:f2:5c:e7:24:b4:76:d8:bd:a5:ce:e7:
77:55:be:60:58:02:f0:de:a6:59:a5:6d:fb:b7:7e:ac:ad:e5:
fc:b3:c3:d7:60:19:15:9f:72:b5:17:71:ba:a5:9d:de:64:a7:
1d:9d:4d:72:8b:62:a7:25:9c:c9:b1:9c:3d:e5:28:99:56:a8:
2b:a6:23:f8:00:16:97:c4:e3:74:2c:36:08:dc:f5:2c:13:2d:
00:0b:7a:94:28:6b:60:02:c3:05:53:67:d8:ce:47:20:f0:d2:
5c:c6:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:25 2025 by rpki-client on console.sobornost.net