Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa
File: d97f986e-cea3-3138-8288-1c3a31bda324.roa (raw, json)
Hash identifier: M2eIvzCC+PZebYHt3Ua0k2T99Lk7OYMtxSJnpJhN/V0=
Subject key identifier: EF:0E:97:33:4B:D3:6D:AB:BC:44:E5:B4:B6:86:3C:64:3A:DB:0D:C7
Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2
Certificate serial: 010D0C9F432858495ABEC3447746A5DC16DEF180
Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 800
IP address blocks: 162.120.72.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:c3:44:77:46:a5:dc:16:de:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=5a7bf726-f530-4210-84c7-4a6e743aba91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:57:8b:d9:2c:ec:2f:58:65:cf:8f:90:f1:
30:66:6e:e7:80:4c:b6:37:d8:f2:21:77:6a:da:0e:
5a:a8:63:3d:6f:77:af:60:ad:88:74:ca:f3:ba:50:
b6:4d:a2:fd:0c:24:50:f8:a7:f9:2b:78:05:75:1c:
cc:93:57:75:fa:e7:7c:2c:7f:3b:da:dd:27:b8:88:
aa:4e:3c:4a:4a:0b:e4:2f:eb:2b:b9:29:75:6d:4c:
0d:45:56:5d:d4:00:5b:a7:59:16:b9:06:ea:b6:4f:
1f:38:9c:30:a9:be:b9:ac:df:2e:da:8d:27:d1:7a:
a5:30:72:63:0d:90:6c:0d:bb:1a:1e:3f:b8:d9:aa:
62:cd:63:48:4d:d8:24:4f:df:98:27:54:b8:a1:e0:
02:4c:2a:5c:c2:57:7d:b3:01:03:b6:5b:6e:20:3d:
40:22:67:1d:51:6c:15:ef:05:bd:61:5e:88:a2:3a:
02:fd:7c:a0:e5:c5:70:df:9a:9b:35:dd:a4:2c:42:
9f:75:3f:a9:84:e6:01:23:7e:80:19:52:d4:6b:f6:
bb:5f:99:86:f3:26:03:ce:dd:67:7c:45:73:ad:06:
a9:1f:67:b3:df:0d:0c:ec:5e:44:e4:b8:c7:da:30:
2c:13:fc:e4:60:1b:50:ee:e6:b6:fb:3a:9f:25:4e:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0E:97:33:4B:D3:6D:AB:BC:44:E5:B4:B6:86:3C:64:3A:DB:0D:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl
X509v3 Authority Key Identifier:
keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.120.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:72:1c:fb:00:9a:43:77:a1:63:70:1f:52:e0:7a:04:c8:79:
02:75:a4:63:9e:56:12:e7:da:40:02:8b:7c:51:9c:1f:a9:8f:
15:f2:a3:41:b6:bf:ac:c3:a2:1c:40:07:dd:51:4f:26:21:61:
b0:61:40:e1:89:e5:cc:f4:56:94:fa:2c:21:a4:58:c1:e9:5c:
f5:e5:8a:b6:b9:e2:d2:16:be:fd:b5:5b:f5:c5:de:f9:1a:52:
02:3c:90:24:43:26:10:80:3b:67:f9:cb:b6:e7:15:54:ee:40:
8a:a1:7f:ed:60:cb:d1:5f:8a:c1:2f:24:bb:9c:1a:64:e3:98:
8e:88:98:98:5b:f3:42:7d:31:9b:02:8f:98:70:b5:63:4b:e1:
a1:7a:35:bc:f6:71:de:af:d3:7c:26:3c:a2:b9:2d:b9:d0:7a:
6a:74:f6:17:68:60:c9:4b:e0:13:1d:32:e1:0d:92:ea:ef:07:
7d:73:65:8b:25:c4:fa:4d:bc:22:56:07:0d:f5:22:ca:55:7d:
83:84:20:63:2b:a1:76:c7:53:2d:5a:d0:27:82:86:79:86:c9:
74:7d:4d:f5:03:8c:f3:df:06:5e:ee:45:d6:6e:f3:ff:d8:b0:
50:4b:f7:a4:b4:f0:df:24:91:4a:e6:87:99:51:a5:92:6b:29:
f6:01:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net