Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3643a877-e66f-3be8-b58c-f67287aee352.roa
File: 3643a877-e66f-3be8-b58c-f67287aee352.roa (raw, json)
Hash identifier: 2xHFpobpTra9TCLhROcq+hAL//rDLF8uNFY8jtqShFc=
Subject key identifier: 50:24:E3:80:C4:AB:95:4E:C9:56:B0:DA:94:0D:2E:AB:5E:53:CA:59
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584981D45A748D705D08F65F6E00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3643a877-e66f-3be8-b58c-f67287aee352.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 834
IP address blocks: 206.206.96.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5a:74:8d:70:5d:08:f6:5f:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=049a58a8-5186-4d8c-9d5f-4fc9ea406114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:84:45:d7:bb:55:5f:f2:12:fd:c5:84:4b:
f8:89:62:98:5d:5f:27:24:cb:0e:47:48:8f:a8:d1:
d5:b7:6f:e9:19:d5:0a:39:0f:5b:b9:e6:77:b9:41:
78:c8:23:f8:b5:f7:81:2f:b5:6e:f2:f7:bc:38:61:
87:d1:18:8c:96:d9:58:45:7d:0f:0e:e7:e2:eb:75:
5a:5b:b1:91:12:c2:f9:00:d4:bb:6a:34:3c:b8:ee:
dd:e0:40:d9:2e:c9:07:f7:a1:1b:73:d5:f3:da:80:
d4:81:68:b6:85:42:72:a0:27:8b:9e:fb:57:00:8b:
6a:2e:81:52:2e:96:66:cf:1c:b4:76:53:8d:43:05:
e5:45:ae:55:23:46:34:43:de:83:33:ea:d2:c1:05:
d3:12:b3:db:12:54:cb:b0:d1:31:12:dd:ee:8d:c1:
3d:dc:9a:81:71:c3:87:fb:ca:25:a3:e4:8f:06:60:
c4:c8:bf:7a:bc:52:5b:a5:9c:8a:9f:00:71:df:cb:
fe:6d:17:b0:66:a5:9e:f4:fd:67:0b:e2:7c:a0:1f:
a1:7b:54:b3:90:ee:37:e4:fe:9f:b9:12:fd:7c:09:
e7:65:7a:35:3e:2c:29:fa:97:e2:37:82:f3:fc:e7:
89:ce:8c:3c:5b:3d:41:eb:c3:88:7d:97:df:61:fa:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:24:E3:80:C4:AB:95:4E:C9:56:B0:DA:94:0D:2E:AB:5E:53:CA:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3643a877-e66f-3be8-b58c-f67287aee352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
206.206.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:6a:29:b0:1d:dd:5f:14:66:96:c6:91:a8:ff:b4:75:d4:b6:
ad:44:1a:b7:3b:17:d9:1d:cb:98:08:f8:06:bd:29:35:c1:77:
f8:0e:45:20:35:f7:5c:7a:ab:a8:78:f1:b6:e1:60:fc:81:f0:
a2:b3:1f:ed:8c:03:86:84:ea:1d:23:f9:6a:36:16:e1:b5:4f:
ff:37:5a:37:3a:b0:24:48:ba:bc:02:f6:20:5b:bf:99:77:bd:
48:f1:00:21:66:b4:16:df:fe:23:0c:b1:5e:d7:be:d7:94:cb:
3f:37:73:02:cb:c1:b9:71:09:c8:3b:07:8a:d3:fc:d2:88:7b:
2a:1d:6d:89:7e:83:87:f7:55:2d:fa:e9:df:68:23:4b:ce:43:
89:ce:2c:fa:1c:00:b9:dd:6f:a4:bc:27:70:7e:f3:19:59:0d:
18:a3:15:74:b8:57:e7:ff:6b:02:87:fe:0e:1b:4a:55:4f:c7:
8e:f9:d8:02:45:89:9b:00:08:79:41:64:af:0a:da:63:89:b4:
c2:5c:75:4d:80:f5:3d:61:c0:16:09:19:07:46:4e:ab:cc:4f:
31:7d:da:6e:d1:28:f9:a7:12:f1:ba:bd:cf:e7:9f:3a:71:43:
8a:3a:f9:00:2c:c7:9f:3d:da:ea:49:64:c9:ba:62:2c:65:b9:
7b:65:1d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net