Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
File: 33acdaeb-a95e-3df1-be44-e1190abf4019.roa (raw, json)
Hash identifier: j9E6pa8jlPauoZ79PAjBhbclwI7s6PWzDULyeR6XSDs=
Subject key identifier: CB:19:F9:37:9F:17:6C:69:0E:99:80:C2:C5:20:67:D9:17:F8:4B:48
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F432858496A19A722D2CC366EB0EE0680
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 16509
IP address blocks: 164.152.64.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:a7:22:d2:cc:36:6e:b0:ee:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=9d23a21c-a4a0-47be-89e8-72163285b38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0d:f1:d0:61:4e:82:42:dc:4b:21:83:95:73:
6d:a4:f5:55:4b:29:1d:79:49:1b:83:d0:91:ba:bc:
cc:0e:da:f1:ba:5f:f9:63:f8:39:aa:11:5a:96:c0:
47:97:d0:bf:c6:74:4c:dc:01:53:ce:c2:74:8e:c1:
62:52:a1:30:cf:0e:80:51:0b:3d:7b:75:8b:db:37:
13:df:0b:86:c0:56:e7:8c:c4:91:ae:4b:de:45:82:
18:8e:0d:17:d4:a6:e9:1c:59:c2:07:bc:9d:62:0a:
a8:1c:7e:27:5f:bb:06:1c:a8:29:a6:b9:e7:18:3b:
e4:3b:f3:37:6f:e4:a7:08:85:5f:92:5f:3d:5d:37:
f3:54:4b:ae:79:8f:72:33:d8:31:d3:da:eb:4a:ea:
5a:f1:1e:ba:4b:01:6e:ca:ea:e3:2b:c2:c7:67:ee:
f5:96:7b:0a:d8:ec:f1:29:d8:fb:e2:0a:70:d3:6b:
d1:f4:34:b0:74:be:4c:1f:c6:da:0d:57:90:43:51:
97:7b:e0:4f:93:20:b6:55:af:80:31:f6:70:04:05:
61:93:01:b6:70:5d:73:5e:1a:5e:9d:d2:66:a6:29:
93:79:db:dc:6b:ea:60:08:36:76:13:3c:ae:ae:70:
2e:ae:31:6e:49:a1:bc:f0:fb:e2:8c:2b:45:2e:b7:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:19:F9:37:9F:17:6C:69:0E:99:80:C2:C5:20:67:D9:17:F8:4B:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
164.152.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:78:82:f0:b3:82:b3:3a:04:e1:52:36:c6:22:64:11:06:13:
ea:5b:0c:45:fb:4e:c8:dc:cd:aa:c2:38:5c:b3:1c:c0:57:44:
5c:35:4d:57:50:d5:be:91:ad:cb:c2:30:00:72:39:6a:e0:37:
1c:29:0a:68:0a:d3:8e:f6:16:99:1c:93:a5:a7:54:75:bd:bc:
a9:a0:a7:eb:43:72:e4:95:a6:2c:db:87:fe:47:f3:2a:ae:23:
18:d1:d7:fa:b9:46:1c:f9:9c:e5:be:8e:e3:f0:45:43:26:06:
2a:d9:04:d6:16:d0:58:27:de:76:da:04:c9:66:3b:18:34:3b:
2f:c7:d4:2c:38:d3:0f:cb:83:a4:f3:d5:02:e7:fc:48:0e:f0:
f2:a7:85:5f:b7:f6:44:7d:5d:e2:a2:f3:ab:fd:e0:d2:cc:92:
12:23:01:42:77:45:b7:ed:00:77:54:c9:eb:71:5a:b7:d0:6c:
13:65:77:86:f6:0d:29:90:52:1b:a2:80:2e:c7:64:5e:79:29:
9f:46:6f:7f:16:80:39:84:ed:76:40:9e:2c:3f:c8:a6:1f:15:
8f:44:71:40:c9:cd:ed:7b:1b:1a:91:b1:49:f6:2d:75:79:75:
b7:2a:f9:66:6f:3c:95:1a:a2:09:82:78:35:bc:79:3d:b4:6a:
7c:21:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:26 2025 by rpki-client on console.sobornost.net