Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/383770ce-feb2-3ca2-af12-193f9f1483e0.roa
File: 383770ce-feb2-3ca2-af12-193f9f1483e0.roa (raw, json)
Hash identifier: JbAJFIJ+IaWxiBKpAkgI+GUIm1n4aUBsIEGDM8LWwmw=
Subject key identifier: B3:63:BA:6B:E7:59:36:3A:59:FA:AB:B8:25:F7:F8:1D:29:F6:3F:EE
Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial: 010D0C9F432858496CBC33F4F1FB7F2238CE8980
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/383770ce-feb2-3ca2-af12-193f9f1483e0.roa
Signing time: Sat 05 Apr 2025 11:40:20 +0000
ROA not before: Sat 05 Apr 2025 11:40:20 +0000
ROA not after: Fri 04 Jul 2025 11:40:20 +0000
asID: 16276
IP address blocks: 23.154.104.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:bc:33:f4:f1:fb:7f:22:38:ce:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Validity
Not Before: Apr 5 11:40:20 2025 GMT
Not After : Jul 4 11:40:20 2025 GMT
Subject: CN=d810c7a7-4f92-46d0-bda1-a992b50f4ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:03:38:36:2a:02:20:63:f1:6c:d6:cf:af:
aa:f6:17:41:e9:b6:ea:1c:2a:0a:a1:c8:e9:a0:ec:
2f:0b:91:37:ad:69:0a:44:02:95:ad:36:92:6c:25:
c2:0f:da:40:7c:76:42:21:e8:34:d7:8a:bd:50:1d:
e3:f9:55:5e:1d:34:be:f0:77:a1:71:13:c1:aa:38:
e7:0c:c8:0b:40:57:0f:ec:c3:6c:cb:d5:3c:32:96:
c8:21:b3:2b:79:53:18:3b:eb:f8:3b:3d:4b:d5:88:
48:cd:ca:ca:71:6f:0c:d1:79:bb:cd:9f:38:54:fc:
e1:c8:bf:f4:61:20:96:63:80:7a:7e:4c:1e:6e:c6:
4f:42:26:f8:e8:8b:03:cc:ce:4c:5e:73:f4:6b:5b:
8f:d1:c0:07:0c:c6:f0:32:d1:fd:1e:9f:e5:4f:45:
6c:29:0c:27:bb:bf:87:64:fe:c4:0d:37:59:c1:90:
9f:dc:54:ad:a3:a9:30:16:55:38:b5:9e:2b:ec:2a:
64:cf:2b:69:1b:d5:81:34:aa:c1:75:4d:e2:f1:de:
e5:8a:3a:31:63:25:bd:ee:b5:38:23:df:d0:8c:13:
30:62:2e:b1:5b:26:d7:6a:8a:7d:6c:56:91:09:3c:
26:4e:fb:75:62:27:c0:68:08:6c:85:15:26:56:db:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:63:BA:6B:E7:59:36:3A:59:FA:AB:B8:25:F7:F8:1D:29:F6:3F:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/383770ce-feb2-3ca2-af12-193f9f1483e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
X509v3 Authority Key Identifier:
keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:2c:35:25:16:85:de:a6:25:5b:ea:e2:51:fa:7c:73:14:c1:
f1:b4:da:d7:e4:3c:bf:48:c5:fe:a1:66:2e:6f:b1:e6:b0:83:
3c:d5:c7:63:52:2c:60:a1:74:d8:61:2d:e0:29:3a:59:8d:0b:
85:8f:ea:d8:a2:48:18:a2:42:81:91:2e:ed:93:d6:39:32:59:
1f:5d:0d:96:6c:c1:3f:73:a0:80:14:94:5e:08:e9:a4:41:0f:
20:c6:0d:00:47:b3:d2:70:2a:c4:e1:40:92:2d:3a:d5:c9:46:
9a:e5:24:36:9b:2c:3f:34:19:7a:45:c6:8b:94:ea:4a:a1:f0:
7a:04:99:78:31:bb:ae:e4:b1:07:5e:a5:26:55:c2:e9:46:a3:
18:b5:42:f3:78:71:4c:29:db:94:ee:38:e2:93:01:ef:60:e2:
9d:67:a3:e1:af:da:69:0e:4c:2d:39:0f:93:b4:de:95:3e:61:
4c:d9:2e:31:b2:42:0c:d9:f2:21:c7:5f:60:ab:39:f7:7f:66:
d9:91:18:b1:d8:ea:63:aa:e5:10:a1:27:4b:42:89:2c:47:3e:
75:f3:27:5d:e8:66:50:2e:93:50:86:86:e6:bd:de:f7:39:5c:
f7:e0:23:d2:54:f8:51:2b:27:8c:a1:c5:30:a4:f1:5c:4d:ca:
17:96:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net