Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/c8d7b551-aadf-3bf3-af14-9a7f5f74373a.roa
File: c8d7b551-aadf-3bf3-af14-9a7f5f74373a.roa (raw, json)
Hash identifier: uY0/Per4FMVfMUr/XuGrW/whpoAa8pV03XZkxhdCNlE=
Subject key identifier: 2A:DC:87:96:8B:C8:37:E9:55:EC:C3:DE:AC:2E:51:E0:1F:9F:43:F0
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F432858496B7ED608541E0E2EC9670D80
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/c8d7b551-aadf-3bf3-af14-9a7f5f74373a.roa
Signing time: Sat 05 Apr 2025 01:00:47 +0000
ROA not before: Sat 05 Apr 2025 01:00:47 +0000
ROA not after: Fri 04 Jul 2025 01:00:47 +0000
asID: 53471
IP address blocks: 208.52.177.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6b:7e:d6:08:54:1e:0e:2e:c9:67:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Apr 5 01:00:47 2025 GMT
Not After : Jul 4 01:00:47 2025 GMT
Subject: CN=2befdc1c-d1b7-4140-8891-395dca0a832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:ac:c8:2c:5d:3f:73:41:a2:d7:b5:a0:82:
9f:39:a1:36:51:36:54:e3:28:71:f3:4f:bb:bb:7d:
b9:88:01:28:cb:ba:fb:8e:cd:55:97:23:32:f8:9a:
e7:11:d7:04:d0:84:3c:bf:7c:5e:15:58:39:f3:0c:
f3:f1:ee:48:71:7e:27:1d:22:cc:31:e8:6b:f9:11:
cf:50:6a:73:78:f7:6e:62:8c:69:d9:4d:a5:c0:f6:
1b:66:b5:70:fd:1d:f0:fb:48:f2:59:bd:1d:2b:c9:
61:1d:55:f3:75:44:ff:79:99:e1:69:a2:ba:88:c2:
f8:8d:6b:4d:06:95:74:5b:de:df:ce:c0:b9:3d:82:
32:b9:3a:9f:cb:19:63:de:46:ea:d2:53:13:42:03:
9f:27:07:7c:3a:4c:5b:7b:c1:30:9d:70:67:cc:b6:
08:bf:8b:0b:2c:8b:cd:ce:87:00:ee:d3:4c:6c:ce:
ec:0f:1e:f8:0c:ca:c4:e4:cd:14:7d:6f:f0:38:7f:
c0:ba:83:4f:d4:d4:60:7e:fc:ea:b3:42:fe:79:55:
40:2e:d3:e4:6c:b7:2f:ce:11:b5:bd:6e:24:70:c7:
7a:a4:52:2f:e0:ff:77:f7:69:34:1b:d9:be:d4:bb:
ac:26:84:b9:b0:77:40:71:cd:07:18:be:6d:43:bc:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:87:96:8B:C8:37:E9:55:EC:C3:DE:AC:2E:51:E0:1F:9F:43:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/c8d7b551-aadf-3bf3-af14-9a7f5f74373a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:61:34:84:82:15:91:f2:ff:24:63:76:0d:8b:22:bb:e6:00:
6a:e8:8a:2a:54:70:a3:03:9a:24:7c:69:ef:32:6f:61:b9:a4:
71:dd:1b:22:da:ba:88:66:3f:b7:bd:0b:c4:37:3f:13:c6:9a:
8b:09:79:5a:7a:f1:fb:62:ed:ce:10:73:cb:2f:a6:6f:2a:b9:
87:86:bb:93:ac:2d:59:91:94:98:7a:a9:be:2c:0e:bb:e8:db:
b6:0a:be:b6:de:c7:53:08:00:ab:a8:bb:98:fc:1a:e3:c1:92:
59:9c:54:b9:17:42:25:52:8e:be:86:40:f4:bc:d3:95:bb:8d:
69:1f:16:bc:95:c4:ee:09:18:11:09:e1:be:a0:47:e4:ad:14:
24:3c:76:67:9e:63:e2:32:ee:f2:60:33:a9:39:dc:86:09:4b:
d2:fe:5b:c3:c2:0c:f1:e6:e5:20:47:fc:df:7d:c8:d2:c1:5e:
7d:4f:e1:62:66:4f:b4:e7:1a:e1:81:cd:e2:bc:ca:2b:f0:14:
b1:2a:62:42:08:4a:b9:0b:0a:fa:3d:82:25:d4:17:a7:c0:f4:
0b:bc:a0:e9:ff:09:dc:73:c9:10:cb:19:85:db:66:b6:f7:ed:
da:0f:2f:c9:da:93:09:53:3b:1b:26:02:17:6b:78:d6:46:7c:
ff:ba:6d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net