Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa
File: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (raw, json)
Hash identifier: yOKuQhxatZM/wfsrSmwF62aq52u+94nuuQTc9F/xtAc=
Subject key identifier: 07:76:1C:B8:65:AF:29:51:B1:CE:27:99:07:19:97:B6:A1:DB:04:69
Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323
Certificate serial: 010D0C9F432858496FAF12E2BD6397C5526C5DC0
Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 7850
IP address blocks: 198.187.253.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:12:e2:bd:63:97:c5:52:6c:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=ff968a40-6178-4266-aab1-a263bb245478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:c4:dc:17:6c:3c:8d:b2:2f:ec:cb:85:b1:
a9:b2:d6:ea:62:fd:7b:09:d5:b2:2e:67:6a:8e:96:
76:e0:2d:c4:e6:3f:58:06:7d:bf:59:8e:01:2f:64:
ae:1e:ae:b5:69:18:9c:cc:8e:62:9a:d3:c2:13:cc:
c9:fa:d1:36:32:05:e5:37:f9:45:84:ff:04:2b:96:
ad:2b:15:9a:ed:24:15:01:84:94:bd:28:09:4c:35:
9b:38:09:ec:19:26:ac:93:11:c9:10:20:bc:8f:bb:
d8:51:18:87:45:70:83:6d:6a:61:55:a4:59:f0:0d:
c2:88:37:b2:74:4c:c4:ad:65:b1:72:11:28:27:9c:
d1:33:46:bb:80:b0:ce:c4:14:9e:50:1f:f4:60:71:
2e:6b:b6:15:40:33:95:bb:05:77:15:3b:de:aa:d7:
20:df:18:98:e1:ad:6d:62:04:f2:bf:ea:5d:c0:dd:
2f:83:bd:97:74:ab:95:73:76:99:b2:84:37:29:78:
55:d7:73:1a:7c:04:e9:a3:70:ca:46:55:dd:15:18:
dc:fd:b7:c5:76:56:33:43:34:43:0c:4d:a8:16:02:
54:08:41:68:92:2f:f7:8e:b1:ae:88:78:10:c2:df:
a2:c7:83:5e:d0:11:3a:40:79:4f:da:0d:94:08:f7:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:1C:B8:65:AF:29:51:B1:CE:27:99:07:19:97:B6:A1:DB:04:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl
X509v3 Authority Key Identifier:
keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer
sbgp-ipAddrBlock: critical
IPv4:
198.187.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:a5:0a:13:71:df:55:08:81:04:58:b7:53:4d:df:3b:39:1d:
e3:9e:d4:a0:88:13:02:18:c5:8d:b8:88:e7:13:b0:8f:b2:ac:
e6:ca:9a:99:3e:45:c5:1b:cc:d9:87:16:64:d1:f4:96:e5:3a:
95:c3:34:b1:ab:e9:20:90:9e:f9:12:ee:ab:52:82:92:92:8f:
d9:75:2d:32:6b:70:25:a8:5c:d9:e1:98:6a:4f:8d:ca:c2:d6:
04:77:2d:01:43:53:92:55:91:78:34:e9:d3:b8:0f:b2:c8:2f:
40:9a:3c:20:c5:84:7c:1d:2b:0e:a8:7b:a9:16:22:97:53:6b:
3c:2d:2d:c4:50:f3:d7:7e:82:1b:54:a4:96:c0:06:d0:a9:b4:
76:6b:6d:42:bd:22:07:c6:b1:89:d8:e3:a1:1e:9a:22:64:3a:
fb:7e:36:94:07:0a:d9:d7:b6:f4:62:f2:c0:2c:09:3e:aa:5a:
77:7a:45:1d:46:b4:6a:e8:3f:54:06:97:d5:51:8e:44:65:1b:
4e:a7:05:52:f3:d1:5b:2c:05:5a:4e:5a:9a:85:1d:d6:76:64:
63:3f:7e:f3:89:85:5c:4d:e5:aa:49:bd:69:20:b4:1b:8d:57:
ac:5b:a7:0c:66:38:c7:26:f1:f2:a6:5b:e4:48:d5:f2:76:b9:
9c:e5:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:27 2025 by rpki-client on console.sobornost.net