Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
File: 088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (raw, json)
Hash identifier: NP2sdJfrdi5pitJWq7OR7P6DL+wCs7q4UwWY7T4Yymo=
Subject key identifier: BC:B2:7F:9E:A2:ED:6A:A4:A3:22:79:4E:67:10:90:E5:10:02:BA:12
Certificate issuer: /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
Certificate serial: 010D0C9F43285849648448EAEA3F91AED0EDE380
Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 393249
IP address blocks: 137.82.0.0/16 maxlen: 16
142.103.0.0/16 maxlen: 16
192.5.96.0/24 maxlen: 24
192.73.5.0/24 maxlen: 24
198.162.32.0/19 maxlen: 19
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:48:ea:ea:3f:91:ae:d0:ed:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=99997f16-52f8-47ec-992c-d2307b55ffe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:44:47:11:ec:14:be:e3:54:e9:7b:95:4b:
cb:f6:20:a6:4e:c2:3a:1c:1f:d1:6c:78:01:03:63:
f6:e8:ea:dd:ed:7c:03:a7:c2:6c:6e:5c:0c:c2:b7:
d9:5f:81:dd:03:d9:01:c0:db:df:bd:e5:4e:39:cb:
c3:ed:94:7d:0e:48:66:f2:b4:80:27:b8:ac:5b:7a:
c3:d6:2d:ad:a3:27:b6:f3:86:a8:b6:d4:34:ad:8e:
78:39:b6:4b:89:be:2c:21:b3:28:28:fa:34:60:eb:
3c:bc:24:5a:3b:1b:c1:f4:3d:03:b2:80:45:31:3d:
6e:4e:b8:a9:8b:bf:51:26:66:e1:d2:cc:a3:40:4a:
e2:ce:07:20:a5:95:8a:5a:87:67:be:39:b2:00:fa:
4d:76:5e:61:d3:43:6e:4d:97:08:60:96:63:32:35:
b7:5e:0f:5d:13:62:5f:e1:bd:c4:cb:99:70:3a:28:
01:1a:70:0e:b7:c0:1d:f5:bd:ff:c5:73:c4:97:f7:
f4:04:d7:30:12:f8:c6:1f:06:8f:0a:10:d1:d3:44:
30:4b:16:eb:e8:6b:bf:45:cc:9c:32:08:e4:1f:6e:
3b:eb:55:13:b0:1c:e6:12:4b:b7:4f:d6:53:01:90:
db:9b:e5:25:21:50:35:d2:75:a2:1b:7b:15:dc:b2:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B2:7F:9E:A2:ED:6A:A4:A3:22:79:4E:67:10:90:E5:10:02:BA:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl
X509v3 Authority Key Identifier:
keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
sbgp-ipAddrBlock: critical
IPv4:
137.82.0.0/16
142.103.0.0/16
192.5.96.0/24
192.73.5.0/24
198.162.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ed:f9:0b:85:33:45:25:a8:95:92:50:c2:53:49:24:b3:5f:
83:d6:cf:9f:7a:20:4c:0d:f1:7d:e2:ee:33:5b:9c:90:6b:d2:
fc:d9:77:f0:a1:57:84:22:ee:11:bb:92:3a:6e:fe:fc:23:d8:
bb:84:e3:5c:0c:e8:5b:1e:b8:5d:22:04:1e:a8:ee:08:95:7e:
05:dc:d5:fe:f2:b2:4c:e3:1c:3c:16:e6:b1:51:47:b5:1d:92:
fb:d1:63:59:78:2c:70:28:3f:df:e7:1a:f6:98:bf:77:20:96:
3b:fc:56:8a:ec:d1:6a:f8:ab:86:0d:f8:bd:0e:02:a6:dc:87:
d6:4c:a3:d0:9b:7f:5a:d9:d2:14:d4:dd:39:f1:e4:1d:98:16:
57:43:3e:cd:7b:77:21:f1:2c:e3:3a:83:b8:80:3b:2c:5c:a3:
29:71:9b:da:7a:fe:06:77:5e:db:b4:1b:b8:78:68:76:9b:c6:
9f:17:32:ac:34:e0:2b:51:62:62:e7:af:f2:db:40:12:f3:a5:
ef:7b:be:e2:3b:21:ae:8d:72:29:b0:71:e0:14:38:92:5d:2b:
3f:91:fc:77:3f:84:b0:c7:2e:e7:91:1e:61:f8:24:d0:02:0e:
87:fd:26:ee:69:39:b5:3a:26:eb:af:bd:96:ed:2a:95:ae:b7:
59:1e:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net