Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa
File: 1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa (raw, json)
Hash identifier: 5u9etB1gvZShxXl/3MjZaw8XO1vIjXiIuTEl/jCqZOk=
Subject key identifier: 65:29:73:0F:D1:53:A5:6E:DC:A2:BF:AC:3E:44:7E:E3:CF:D4:EE:63
Certificate issuer: /CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
Certificate serial: 010D0C9F432858496FAF0A51F2F1408D46182600
Authority key identifier: 9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 32274
IP address blocks: 207.190.160.0/21 maxlen: 24
207.190.168.0/22 maxlen: 24
207.190.173.0/24 maxlen: 24
207.190.174.0/24 maxlen: 24
207.190.175.0/24 maxlen: 24
207.190.176.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0a:51:f2:f1:40:8d:46:18:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=097dbd97-ac56-4de2-bdc3-5e6967ee4b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:7b:b5:f3:f0:03:3c:b4:2d:3d:6c:39:42:
67:88:2e:b4:e8:92:a0:35:58:f1:31:18:57:5e:3b:
62:cb:cb:25:6b:0c:6f:86:6d:fc:6e:d5:37:2b:8d:
db:7a:a3:0f:34:4d:76:db:e0:70:e9:b7:fc:70:d4:
6b:02:0e:7e:28:f9:c9:da:bb:0c:a7:61:d3:1c:72:
72:86:f7:03:a6:c6:27:ce:3c:49:2e:25:75:85:04:
26:4f:b4:63:13:84:45:c6:f9:50:b7:48:a3:96:4e:
a7:21:84:da:02:41:1f:69:f3:10:45:2c:b4:46:2b:
c5:75:06:f1:5b:c5:39:7e:16:a4:cd:cb:c6:f3:37:
64:1b:58:ed:0b:ea:c3:b3:33:18:cf:8f:4f:5c:37:
d1:9d:8f:a2:9f:28:53:af:0d:50:a8:20:49:fd:97:
e0:dc:68:94:6c:c4:ac:63:37:6b:90:55:4a:73:cf:
e9:9c:86:ee:e1:c6:a7:20:11:a7:f0:9e:42:36:e4:
5b:a4:38:68:23:26:ea:94:29:93:d3:b8:6a:07:88:
eb:da:5f:0e:96:b4:e6:82:c1:11:a7:10:ef:2c:18:
8e:04:4f:14:eb:fd:a4:c4:a6:52:2c:0c:f2:64:52:
82:fe:c2:0c:56:60:80:4f:bf:ad:69:86:a3:90:bc:
8a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:29:73:0F:D1:53:A5:6E:DC:A2:BF:AC:3E:44:7E:E3:CF:D4:EE:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl
X509v3 Authority Key Identifier:
keyid:9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
sbgp-ipAddrBlock: critical
IPv4:
207.190.160.0-207.190.171.255
207.190.173.0-207.190.191.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:80:18:26:46:57:35:38:62:b9:99:14:da:31:c5:1a:62:a9:
d0:dc:e3:27:a3:b2:14:99:7c:9f:81:a2:95:f2:83:f3:01:0b:
94:2a:c4:31:71:51:40:8f:fe:b3:6e:17:e6:25:6e:3b:af:01:
a0:ea:f8:32:1e:00:a2:41:14:6c:33:76:da:56:e3:52:dc:1f:
b6:cc:5d:0b:d2:cb:97:d5:62:ec:2a:5b:d7:70:2e:e1:ba:57:
cd:11:73:ed:b8:61:31:c0:7e:97:4b:c3:ae:11:0d:0f:7e:e0:
45:57:59:44:26:03:cd:3a:3e:36:a3:27:7e:79:43:a8:4c:9f:
8e:0d:f0:6d:e6:4c:da:0f:97:f3:db:d6:1e:88:cf:94:4f:3a:
7b:4c:0c:54:62:a7:4a:6b:9a:68:eb:6c:4f:70:52:19:80:01:
c2:99:f2:84:ab:b9:b4:b3:77:ec:3f:9c:29:0a:70:15:d6:eb:
41:f8:d2:d4:e3:58:a7:3c:4e:c7:b0:80:f9:70:42:b5:5c:5f:
e1:03:ac:cf:13:16:26:76:c3:42:e6:69:20:46:12:f0:13:22:
93:3e:f1:0b:be:8e:79:34:f3:40:ad:71:2f:3b:e8:7b:3f:19:
4c:2b:5a:ea:59:5b:e6:22:2a:00:a3:fd:95:6d:7a:16:c4:65:
15:45:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net