Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa
File: 4c09f404-0682-3e12-a569-27fb667f5de3.roa (raw, json)
Hash identifier: ItmKZbUDiHCId0G8IZjoML17JFMXwArZjjDA5U2lLXY=
Subject key identifier: 73:17:2A:9E:EC:31:50:2C:F7:05:DF:6A:BF:5E:59:38:41:7B:DC:D8
Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial: 010D0C9F4328584913AC17F267FB15CA65DAA640
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 52.144.58.0/24 maxlen: 24
168.245.151.0/24 maxlen: 24
192.139.134.0/24 maxlen: 24
199.19.89.0/24 maxlen: 24
199.19.90.0/24 maxlen: 24
199.19.91.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:17:f2:67:fb:15:ca:65:da:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=817337bb-ff33-4725-a4b4-93d24aa7dfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:5a:5e:3a:6d:29:45:bd:f4:7c:b2:2f:db:
4c:7f:9e:a3:f9:be:40:a0:c3:55:a4:d3:b9:bc:2d:
92:9b:f1:40:49:4b:e0:09:f1:ec:cd:cb:2e:ac:b8:
5d:49:d9:06:73:84:df:bd:70:c5:41:fc:a3:ab:14:
ed:de:e5:6c:69:46:ff:f5:a4:ba:8e:e1:2b:dd:95:
9a:0b:3c:33:4a:7c:7d:c5:e9:3c:f4:e0:a3:2e:cc:
bd:d0:6f:6e:dd:99:61:f3:78:5c:45:ac:f7:f9:09:
52:58:0b:54:aa:53:71:06:be:f2:c8:07:80:2c:d0:
de:96:50:1d:e8:5b:8c:41:af:56:e3:e6:39:ce:cd:
06:e3:f6:fd:29:fa:59:ef:9d:a2:2f:e7:87:30:14:
ba:6d:92:7c:f7:ef:65:0e:b6:f7:84:d3:e1:b4:fd:
e1:f2:b5:62:5d:13:60:59:76:b0:f0:bc:1f:82:b7:
b5:11:98:e7:aa:4d:4e:a4:1d:39:b0:5f:b7:5c:27:
be:e6:ed:b9:f8:cf:0c:1e:32:8e:4e:45:d9:12:e5:
6b:9c:e9:e9:40:21:08:8b:03:2b:0b:41:ef:cf:25:
21:f0:77:a5:42:34:36:6f:c0:5b:23:76:cf:68:a2:
d3:9e:5f:ab:3e:a3:6f:31:c8:a3:5b:8a:08:26:49:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:2A:9E:EC:31:50:2C:F7:05:DF:6A:BF:5E:59:38:41:7B:DC:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
X509v3 Authority Key Identifier:
keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.58.0/24
168.245.151.0/24
192.139.134.0/24
199.19.89.0-199.19.91.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:97:47:4a:63:69:93:e2:bd:27:48:51:ed:19:a0:23:c8:7d:
91:74:8e:41:d8:bf:71:bc:01:c9:ac:d2:5f:90:fc:42:57:30:
05:00:eb:69:bd:c5:0a:d2:88:d5:2e:b3:44:81:d3:3b:e0:97:
a7:e6:92:89:58:74:83:22:e1:48:48:23:be:9b:16:9f:03:27:
7c:e9:61:b5:e2:bf:a7:13:83:8a:3e:77:ad:64:b4:21:ad:b4:
90:26:e7:88:d4:63:25:4d:75:cc:6b:fe:94:70:ee:0d:ed:28:
2a:16:d2:fe:44:c4:34:77:38:30:84:99:4e:89:a2:9b:8a:fa:
47:02:9c:38:a9:05:44:d8:e9:70:2f:33:29:77:9c:4e:90:75:
96:09:3c:3f:d8:d5:ca:e1:23:0d:76:5c:1f:d4:00:cf:9a:3d:
7c:9c:c8:ba:7b:96:79:b2:83:4a:bd:cc:2f:2f:08:f2:09:3c:
fe:2d:12:3c:50:52:99:2e:b9:86:d2:51:a3:d9:34:a7:ab:c1:
d5:26:c2:2f:05:4e:71:39:9f:dc:6b:93:e8:9b:89:6c:ff:7b:
8d:c6:34:6e:1c:33:7b:27:6e:46:29:56:ee:f6:aa:e1:44:8c:
66:5b:75:7f:86:dc:e9:f7:7d:3c:a4:43:18:d0:0b:4d:44:a2:
4c:d9:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:25 2025 by rpki-client on console.sobornost.net