Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa
File: a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa (raw, json)
Hash identifier: +07QKJezNggL0BT9FrKvumu6sPRciOlkqwYkuKRPTwc=
Subject key identifier: 0B:3D:2C:F8:34:A3:49:B6:77:F4:57:C0:59:70:AF:E9:E6:0B:ED:78
Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial: 010D0C9F43285848B1F62F5C8C6A88C4836B5300
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 3738
IP address blocks: 192.250.144.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2f:5c:8c:6a:88:c4:83:6b:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=3d702f75-8ba1-4211-9519-77515465cf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:de:4b:3a:38:09:5d:39:df:d3:34:d1:34:
08:aa:18:d8:19:7c:e4:d1:b6:32:d0:b4:08:5e:02:
b2:0a:22:dc:34:54:ee:96:0f:70:ef:28:95:3f:d4:
09:97:f3:82:49:0f:bc:f3:4a:53:84:86:eb:b7:bb:
57:f2:c6:55:11:d7:bb:e6:96:91:00:0d:3e:29:71:
a4:89:d4:6f:ee:5b:63:ff:e4:e2:14:ab:ba:6c:8e:
73:f4:f7:f9:28:44:b5:07:66:31:38:57:66:cc:ab:
80:da:b1:9a:1e:69:95:15:17:c4:32:e9:13:f3:a9:
a4:bb:d9:d9:72:b5:44:f1:1b:7d:ef:b5:64:96:ff:
62:0d:3f:b1:8c:b5:b5:9b:60:8d:c4:cf:7e:7e:43:
ff:3b:f5:a4:c3:a9:d6:b3:0b:7c:07:cc:a4:b5:ab:
03:3e:9e:e1:02:04:97:98:a1:1f:b7:f4:75:61:78:
c7:19:34:07:ab:d7:c2:6e:33:3f:b7:75:e7:1b:67:
38:e5:73:b3:f2:7f:2f:90:7f:18:bd:2d:9e:97:c3:
93:17:12:6a:e9:ec:1a:75:4f:cc:b9:fe:ee:75:0b:
0b:5f:c3:6a:8c:b4:55:cd:2b:79:1e:9a:1f:25:de:
e8:bc:2d:64:e3:a1:6c:57:f3:bb:d9:5f:bf:06:8a:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3D:2C:F8:34:A3:49:B6:77:F4:57:C0:59:70:AF:E9:E6:0B:ED:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
X509v3 Authority Key Identifier:
keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
sbgp-ipAddrBlock: critical
IPv4:
192.250.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:0c:30:7c:f1:42:ad:02:e1:23:30:be:0f:ff:32:81:10:25:
90:0a:b3:9c:92:86:43:71:45:2c:6d:52:1e:01:59:ae:ce:e7:
14:a4:c5:61:a4:03:b3:1a:41:39:05:21:ed:97:c5:52:35:61:
43:32:97:20:66:72:4a:03:a6:d2:9a:40:da:51:cf:d2:72:84:
08:4c:7f:32:9a:1f:f7:f4:c4:e9:ed:27:bc:67:97:09:1d:d2:
8a:00:97:ac:90:9a:ee:23:fa:c6:bc:40:3c:be:b5:e1:c7:20:
9b:cb:b0:ba:3f:e0:ce:cd:4a:dc:98:fa:39:c9:0a:36:9a:da:
af:99:f4:45:d5:09:1e:9c:bf:33:5e:92:f5:79:26:25:40:10:
7b:ee:45:aa:39:41:d5:12:a6:53:2f:24:9a:70:4a:1d:51:06:
e0:da:f2:27:b6:ae:08:d7:3e:3e:91:0b:cd:7d:98:e5:58:b2:
dc:11:62:8f:49:d0:77:ad:44:69:aa:60:b9:4a:d2:1b:62:fb:
54:87:27:ec:61:35:2f:60:6c:5c:aa:ad:70:9b:df:ea:f6:33:
78:4b:e5:09:2f:2d:0b:88:01:92:2c:a8:fb:ba:92:06:4d:29:
14:aa:1e:91:a2:38:38:a5:03:53:48:51:99:82:92:7e:20:e3:
67:c8:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net