Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa
File: 67376c8e-267d-36f2-814a-f2c489f44f6e.roa (raw, json)
Hash identifier: VzanE16lQyAPbxNZOGEyC012Zq7rJIALx9gbEAGjPDE=
Subject key identifier: EC:22:27:24:20:D3:4C:39:B9:B0:BA:F8:AB:D7:5E:93:9D:50:57:76
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F43285848B1F62BDA49A18FF945DDB680
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 3738
IP address blocks: 192.250.154.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2b:da:49:a1:8f:f9:45:dd:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=c9f8771e-e527-4e0a-aae3-ff0d0bc04a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:af:c2:a1:3c:34:0f:f0:3c:52:79:c6:46:
a9:f7:2d:bb:22:b8:bf:40:69:f8:bb:08:a2:9e:12:
bd:0c:bd:bd:c6:3c:95:93:fd:2a:c7:bb:31:ad:99:
7c:9e:12:79:ab:8a:ea:22:6d:5a:2c:cd:b6:95:06:
64:10:b2:54:6e:ef:05:ee:2c:f1:ac:87:36:9e:fe:
4f:c8:7a:e4:fe:17:cf:91:f4:05:06:aa:38:c9:1d:
bd:a6:49:b7:bf:67:5b:51:87:46:a9:7d:b8:18:d9:
51:91:b0:70:ff:b5:56:7e:0f:98:b8:67:90:29:58:
fb:aa:e0:90:47:93:fb:95:6d:3e:94:49:af:e6:b4:
77:4d:be:25:f3:fb:de:88:14:b3:e4:32:df:bb:cc:
67:3a:f8:ea:02:9c:1c:77:29:8d:dc:4d:35:db:85:
57:a9:08:0a:3a:1a:90:63:54:0c:d6:0b:3a:31:1b:
f5:4d:8e:a8:a3:46:0c:39:0d:87:95:46:e1:df:63:
e5:5a:81:f4:7c:4a:02:41:52:7d:b0:a0:f2:df:f0:
0f:24:d8:b5:ca:12:24:4f:d9:a5:d1:51:31:97:0b:
35:cb:33:3b:12:54:10:f7:24:e2:02:eb:37:b4:ff:
78:af:78:65:c9:7c:28:df:fa:9d:d1:96:12:e4:38:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:27:24:20:D3:4C:39:B9:B0:BA:F8:AB:D7:5E:93:9D:50:57:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:95:07:f0:80:8f:20:18:06:7d:54:e5:ea:87:52:6c:72:d0:
98:b3:f7:31:99:7a:37:9d:7c:2d:19:15:da:87:c4:1a:5b:25:
47:6d:d6:1a:6e:75:d3:e0:d5:1a:83:03:2e:18:43:a1:0b:9c:
b3:b3:4b:a3:12:03:74:4e:06:f1:b4:72:71:19:ba:d7:16:8e:
ca:05:41:27:eb:3c:ad:f8:62:d7:34:a4:67:b5:68:88:cb:a1:
fe:85:37:3d:89:7e:58:4a:08:ce:e3:2a:7f:52:39:67:cc:83:
7f:21:31:e9:cf:c2:fc:d1:3d:63:4b:09:b8:5a:ef:2a:15:f5:
c3:a0:68:d4:d1:34:92:ee:5d:91:ad:df:e3:90:f6:b6:06:93:
c7:e9:c7:64:11:1e:43:0b:39:1b:0e:6f:f5:f9:a6:44:17:aa:
f8:db:40:31:be:0e:07:47:df:4f:07:78:78:75:ba:bb:59:ed:
64:a1:48:71:c9:fd:0b:19:4e:5a:8b:20:4a:14:2f:19:75:3c:
a4:a6:4a:a3:63:87:ed:64:c8:45:3a:f3:4b:47:36:c4:39:b9:
cf:ee:f9:98:c2:69:8b:86:c4:b1:49:91:6d:fa:cb:31:fe:06:
17:79:33:81:25:a9:eb:ea:17:68:e6:09:b1:1d:fc:1b:3d:1a:
16:3d:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net