Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbe710e8-c099-31d9-acfb-6e80887bcc1f.roa
File: fbe710e8-c099-31d9-acfb-6e80887bcc1f.roa (raw, json)
Hash identifier: gnnzdmqLtY7vZEWJQju3V1w9IJGwJ6m95wu/RnSdOlQ=
Subject key identifier: 3F:CE:9E:83:0F:B3:4C:2F:CD:11:BE:78:D9:06:10:F4:28:3B:DF:EF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858496FAF1C8A2EAC68EF720419C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbe710e8-c099-31d9-acfb-6e80887bcc1f.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397234
IP address blocks: 198.133.199.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:1c:8a:2e:ac:68:ef:72:04:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=d8f53976-465c-430a-b480-381494acebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:3e:35:d1:0f:2b:bd:34:d1:c5:a2:0e:7d:
c6:74:52:00:84:ff:d3:30:10:0e:64:b5:c4:91:0a:
6e:c2:c1:c6:76:2a:3d:b0:ba:88:71:34:f6:a5:99:
b4:67:bd:7d:14:ca:9f:c1:0e:b3:e1:65:e8:d1:d9:
cb:b7:0a:55:ff:b0:a1:ba:6f:ad:51:b7:72:fc:96:
85:da:a4:c0:5e:f1:13:cd:0f:23:4b:d4:67:90:82:
a3:27:68:a2:2d:b2:3b:a6:f4:d4:b7:a2:a1:8f:22:
d1:cf:ba:ce:88:7b:8e:33:0e:f7:b8:6d:1b:45:fa:
b8:52:35:00:f7:e6:ef:83:89:ed:7f:95:58:3b:9e:
94:39:8a:8f:a9:a1:63:57:0d:8a:67:72:60:28:d0:
7d:e6:32:04:d3:5b:15:67:69:ac:8b:c6:53:73:77:
03:4e:9e:15:d0:5e:48:8d:9a:26:a0:41:c6:55:89:
d4:f6:18:cc:4f:68:16:13:21:93:eb:1c:91:54:d2:
c4:42:16:88:2a:cd:ef:54:ff:ea:c7:d1:89:e6:e2:
2a:f7:dd:a8:7c:a8:61:4c:0c:86:88:26:9d:b7:da:
97:4a:ec:c3:ce:7f:f2:2f:7b:b0:3d:52:6b:4c:33:
eb:95:89:c3:f4:49:04:ed:14:bf:96:4d:38:d8:58:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CE:9E:83:0F:B3:4C:2F:CD:11:BE:78:D9:06:10:F4:28:3B:DF:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbe710e8-c099-31d9-acfb-6e80887bcc1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:21:d5:d3:1e:f4:24:17:1f:64:df:f2:99:58:1d:86:5e:c8:
e8:10:0e:6e:e7:0c:77:9b:dc:26:a0:be:d3:d6:c3:cb:ed:8f:
8e:72:44:96:d0:5c:2d:e1:d3:1d:ef:ed:4c:04:11:ec:62:36:
70:5b:3f:1a:84:19:3a:5e:39:b4:c6:ed:f8:d7:ab:91:7f:ee:
25:86:4b:31:11:d2:9a:d5:7f:e1:0f:4d:f1:50:ee:a1:0e:13:
38:04:51:e4:1d:51:00:7f:4f:82:82:2f:a2:58:f3:77:84:b0:
22:76:4e:a5:3c:f9:e3:c5:a5:b7:03:cb:63:2a:31:60:11:f4:
31:2b:6f:36:89:a3:84:ae:09:5b:64:f5:21:26:5c:bf:5f:5a:
d2:43:71:1d:85:1f:f0:d0:40:b7:25:71:39:46:bf:68:ae:a2:
09:71:b1:b8:21:4c:b9:de:64:f5:76:dc:11:24:96:d6:ad:69:
91:c0:97:00:8c:c3:c4:59:b3:86:9c:8a:54:c5:ab:db:ab:66:
bf:29:86:b5:1c:43:40:4b:48:82:61:ec:36:9e:e4:b4:6b:7f:
90:b2:25:49:60:ee:eb:e2:1e:dd:86:19:82:06:dc:3b:f8:22:
ac:00:5b:43:30:63:7e:eb:22:34:0a:a7:9f:f3:d9:69:87:61:
30:00:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:44 2025 by rpki-client on console.sobornost.net