Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa
File: 3a49eb68-6216-3abc-822d-65fec49cdd7d.roa (raw, json)
Hash identifier: eMMBMeBtkmyxDt5DWv20sP4xi/8ENOGpC0PYhi3aqqc=
Subject key identifier: 1C:8A:F3:B3:7B:53:FB:16:F2:D3:03:10:D3:D4:7D:A2:A8:2C:03:F2
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490E16B9856503E586E0758B00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 12189
IP address blocks: 131.153.124.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:b9:85:65:03:e5:86:e0:75:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=1a94c243-1939-43a3-854e-c19b68b51701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:2d:42:38:cd:5e:c6:b4:4a:c4:2e:b7:42:
e3:4b:36:1a:54:76:1f:59:ff:80:0b:b0:e3:6a:18:
ff:d3:fd:90:f1:c9:a1:99:a6:4a:96:af:52:0e:62:
f2:aa:55:71:d2:ce:4b:7a:52:91:69:7b:e6:f9:74:
ca:21:cb:87:ae:b6:0f:8b:70:72:03:99:86:ec:2a:
7d:e1:e7:77:94:c8:06:94:5a:d9:01:8f:ff:80:24:
00:4a:9a:fc:2e:60:02:a7:43:91:0b:f7:67:ac:07:
be:39:b6:c0:d4:dd:40:31:f5:b8:a2:9e:08:cd:24:
5a:3e:06:88:a9:cd:e2:16:28:56:72:43:76:9f:06:
b2:de:58:e4:d5:64:03:1f:b7:11:b3:e4:b1:1e:df:
c2:3f:04:60:a8:28:13:7a:4a:1f:c4:74:b4:f5:84:
ff:ae:04:c2:5e:7c:06:ee:de:e7:05:59:1b:6c:ca:
0c:30:e4:66:e8:ea:75:c7:57:69:10:36:1c:f9:d5:
8d:9c:d8:9d:e8:ee:16:1f:d1:73:01:e1:d2:3e:29:
eb:ea:61:0f:3d:c0:6e:da:fb:73:f6:b8:aa:7c:68:
85:37:03:d5:a8:9e:90:77:d4:c2:22:6c:14:3d:e7:
36:d1:bc:71:51:c7:47:66:a5:fa:2c:e5:c3:e1:ea:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8A:F3:B3:7B:53:FB:16:F2:D3:03:10:D3:D4:7D:A2:A8:2C:03:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:36:2f:b0:fd:2b:c7:9a:f6:11:37:fd:9d:bf:bf:82:ca:dc:
4a:e3:b8:4b:48:ae:11:92:2c:19:c8:28:3d:d4:42:9a:10:8f:
92:f6:0c:24:80:65:08:a6:d6:58:e0:99:8c:fb:d3:93:6a:55:
9d:81:e5:37:ae:b1:14:07:81:00:cb:da:03:94:a6:81:87:a0:
77:54:13:ff:ad:0e:d4:1c:52:38:27:6f:26:f0:33:46:93:84:
40:10:45:a5:82:33:9b:f5:3b:9d:07:a0:bf:a8:6a:70:46:5c:
c0:e5:34:94:fc:57:85:64:20:c4:bc:b7:b5:33:e6:43:3e:8d:
32:02:45:34:b5:59:c8:bb:47:02:bc:0f:a2:6b:7c:8c:0e:a2:
12:cc:93:61:c6:b3:b6:89:91:e4:f7:94:df:94:24:b8:e4:87:
8b:cf:51:17:d6:ee:90:01:3e:ff:36:d8:bf:b8:ed:72:cd:ab:
b8:4a:a9:9e:d8:ad:e3:16:05:ab:4e:8e:a8:03:1d:30:e3:df:
8c:0e:2e:ac:4f:a3:6a:c1:28:24:9e:fa:04:aa:9b:04:9c:cc:
e3:77:13:31:71:d1:5d:af:72:fb:a0:d5:5f:b6:bd:d1:a5:6d:
b7:f6:8c:57:cd:ef:e8:f5:b8:98:85:35:b0:fa:5c:e8:14:68:
5d:4b:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:26 2025 by rpki-client on console.sobornost.net