Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa
File: 0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa (raw, json)
Hash identifier: Qm4GUcSRZ7qyrkOQ7LNZpPoiaLE+p+op9HucZ4qTq9Q=
Subject key identifier: 10:38:41:C0:15:8B:96:9A:E2:A1:64:D2:EE:B6:2E:9C:98:05:CB:82
Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial: 010D0C9F43285848EF616A6EDBE25D94892B1040
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 174
IP address blocks: 208.94.140.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:6a:6e:db:e2:5d:94:89:2b:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=ac7d25b1-8812-4181-bbac-b51bd8ac6d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:e8:ef:d4:4a:6a:ba:65:25:fa:74:09:c4:
fb:79:65:1e:7d:58:d9:9e:db:79:29:2c:40:c4:dd:
77:ee:4b:d6:ab:a5:81:b6:a1:c5:86:6d:2b:bf:62:
3b:3c:39:cc:42:ac:95:d8:25:e6:39:35:d6:97:55:
c1:04:2e:ac:24:73:af:ae:a9:68:f7:5b:61:c6:55:
ef:fd:33:db:61:12:ba:a6:d7:13:58:ff:50:03:1b:
32:6e:ef:75:6d:2a:dd:98:0b:cf:2f:4e:2e:3e:3a:
14:d0:78:b6:2a:6b:2e:22:14:06:69:ff:ba:08:c7:
ed:ee:bf:81:fe:df:71:f9:fd:61:d4:e0:e0:8a:e0:
52:b7:de:55:a6:06:f3:80:64:6c:64:8b:c6:13:39:
fb:8b:60:d3:d4:cb:5e:f9:cc:94:38:32:58:ea:76:
b2:51:0f:ef:9b:86:10:3f:96:bc:bc:a3:b6:30:59:
ca:8d:c2:04:d2:18:ac:de:f5:03:2e:a5:b0:18:4a:
83:55:ea:e0:e4:ff:98:59:d5:9d:0f:74:2b:0d:12:
90:83:4f:98:d4:46:95:99:6c:4e:9b:5d:95:f4:34:
e3:ba:11:14:a7:9d:1c:c7:0e:3b:8a:16:8f:f0:ce:
7c:51:c0:62:fe:7d:02:49:87:c1:35:fb:a6:6e:ab:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:41:C0:15:8B:96:9A:E2:A1:64:D2:EE:B6:2E:9C:98:05:CB:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
X509v3 Authority Key Identifier:
keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a6:48:e4:26:ba:a8:6a:e8:b4:2c:17:52:23:ba:a1:60:1f:
93:b1:d9:e2:d9:9c:16:c7:92:a2:85:bf:ba:47:51:8a:51:9b:
d1:b7:42:56:5f:c3:a0:26:b1:57:fa:e9:58:e7:24:84:9b:4d:
2f:a7:00:99:96:6c:62:4b:a5:58:bb:0b:9e:0e:c8:d2:a9:bb:
08:05:a9:92:89:f1:9a:3c:c0:3e:45:60:f6:12:a3:5b:47:af:
81:97:b8:0a:e9:27:b9:1f:1f:30:23:d5:68:9d:4e:ea:76:36:
e1:17:9d:f0:02:50:37:d5:68:f9:44:18:09:75:6a:09:bd:94:
44:3c:d5:0a:90:83:36:36:85:08:7a:1a:80:d1:eb:21:9c:15:
8c:03:2c:f2:91:17:a6:b2:bd:35:84:7f:e6:b4:2d:23:ef:1d:
fc:08:99:93:11:03:92:b3:f5:c8:7b:29:e0:b4:d1:64:84:e0:
62:12:be:4d:71:57:7d:02:c5:fe:b8:64:af:9d:52:c7:b0:c1:
92:60:25:c4:46:3c:b4:13:a0:d8:c2:9f:7a:08:d5:9d:c6:68:
b5:f8:7d:3b:4e:ce:30:1c:d3:19:21:6e:70:51:ce:c4:fa:f8:
e0:d4:35:08:74:43:ba:02:b8:8e:74:ce:08:63:3b:4c:50:bf:
71:15:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:25 2025 by rpki-client on console.sobornost.net