Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa
File: fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa (raw, json)
Hash identifier: SN4dzigA0njyNAZ5dC5hdT9dAHekZW0rhm8TPomDEUA=
Subject key identifier: A5:D8:FA:53:B4:94:8C:C9:76:43:84:BF:F0:64:39:EC:A3:53:FF:4C
Certificate issuer: /CN=0f27cf1f-c7c6-435c-a313-992cc63104f9
Certificate serial: 010D0C9F43285849780F0934F0B5A4B8926FF900
Authority key identifier: A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 30528
IP address blocks: 66.96.16.0/20 maxlen: 20
72.0.64.0/20 maxlen: 20
2001:1928::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:09:34:f0:b5:a4:b8:92:6f:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f27cf1f-c7c6-435c-a313-992cc63104f9
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=42d77336-e7bf-4b99-85cb-fa63f7120ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:95:19:fc:23:cc:c2:74:eb:39:79:14:2b:c4:
b7:dd:4e:ee:44:a8:75:b3:f2:db:41:99:50:a6:37:
e4:be:a3:db:8f:d6:56:e0:f9:53:68:b0:ce:b1:fe:
5c:6f:b6:ea:b1:56:74:17:6f:6e:1b:7b:7d:6f:fc:
0b:85:2c:a8:20:07:a2:fe:89:47:83:78:a8:1e:03:
73:89:bc:1a:07:71:82:be:59:0c:95:9d:2c:79:87:
e9:ec:d1:64:e4:f3:34:6e:fa:07:d8:12:55:bc:d4:
fc:48:6c:17:33:08:1c:ef:dc:1f:32:a5:13:c2:c3:
55:48:11:6e:c9:4d:41:7b:5d:91:67:a8:77:6e:d1:
d8:04:22:d2:61:91:9d:ad:dd:b9:9e:47:7b:22:8c:
a2:8f:1f:c0:0d:3b:dc:f3:20:74:0c:5e:5d:88:d4:
58:75:27:3e:3f:24:2f:80:6f:d1:cd:3c:03:47:a3:
77:99:e9:af:8d:be:96:b9:e6:a8:c1:8e:ae:a8:77:
cd:4a:24:a1:7f:26:bb:3c:6a:41:9a:6b:31:49:f8:
a5:a2:10:c9:a6:77:92:ad:0c:be:13:95:d4:11:43:
c6:30:8e:25:06:6b:e0:43:0d:41:13:34:3b:af:45:
b3:f3:cf:6a:8b:0d:c3:fa:f7:fe:b1:f9:ee:a0:b3:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:FA:53:B4:94:8C:C9:76:43:84:BF:F0:64:39:EC:A3:53:FF:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl
X509v3 Authority Key Identifier:
keyid:A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.96.16.0/20
72.0.64.0/20
IPv6:
2001:1928::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:13:36:b4:57:68:89:11:f6:a0:d8:4b:b9:06:47:bf:2d:e7:
b1:b1:98:22:27:28:ba:f1:61:15:fe:c5:3d:b6:b4:12:25:fa:
a3:f0:20:23:ba:49:1b:33:3d:f7:6f:cf:89:6b:a9:5c:48:bd:
bd:e3:81:78:b5:c6:33:10:da:76:ee:84:03:b0:e3:cc:78:9c:
9b:5c:86:75:43:c9:ba:11:8a:47:cb:ea:c2:9b:f5:33:fd:1c:
fc:95:05:ba:b9:9d:1f:17:3e:60:cb:16:09:5c:50:d4:13:74:
20:9f:74:a1:c3:35:ba:f6:61:08:87:d0:c6:db:1a:2f:46:4c:
43:d5:f1:85:96:d6:fe:74:0a:a8:1b:1c:bb:db:2d:2b:81:0c:
16:c3:b4:f4:77:b4:90:1b:00:b9:7c:91:3e:97:86:34:44:13:
c7:47:d6:42:f9:8d:3e:fa:aa:f6:eb:b4:c9:d9:30:29:3d:69:
b4:d6:ab:a4:70:90:11:f8:25:4a:bb:49:8f:47:c2:45:bd:75:
d3:7a:2c:5a:33:11:0e:3f:52:f8:aa:cb:8e:2f:91:78:d3:3f:
52:79:d7:9f:3c:bf:cf:3c:1c:8f:67:3f:d5:f8:39:2b:e9:84:
2a:31:d2:77:52:1d:76:1b:0f:fa:57:f1:f2:fb:0f:0f:07:96:
d3:93:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:31 2025 by rpki-client on console.sobornost.net