Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
File: eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json)
Hash identifier: dvk9N1//8Cm2a0RGjH2wrOY3Qpa7+Sg7HoRnnP+y2V0=
Subject key identifier: 68:E9:41:A7:18:71:08:5C:66:64:E1:55:9E:77:8B:50:7A:F3:26:1E
Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial: 010D0C9F4328584950F965D2E229AC1F1384FF80
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 21559
IP address blocks: 104.238.232.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:65:d2:e2:29:ac:1f:13:84:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=63afd923-4e3c-44ea-b019-ec9b5e9bd37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:3f:3b:26:04:68:42:0e:cc:a0:43:87:f0:
c7:ed:3d:dd:b2:47:68:11:51:e1:3c:65:7c:42:af:
0b:cd:51:9c:25:64:0b:d5:41:d7:95:34:9d:b5:64:
9a:c6:18:a8:87:1d:8a:9a:2b:37:97:79:e6:ae:49:
65:87:ee:df:ee:56:e1:8c:7f:ff:e2:91:a0:67:46:
ad:4c:e4:f7:ec:04:be:05:3f:7d:d6:19:b1:f5:bc:
64:5a:cd:f3:f8:63:80:e3:2f:ea:93:5e:29:6b:24:
01:63:d4:d3:f8:79:a1:17:d2:b7:1e:f4:bd:e6:73:
87:59:df:cb:a4:fe:54:ef:bd:60:bf:3b:49:ff:bc:
40:39:ce:20:55:e9:5b:db:0c:1f:7a:26:ea:f2:d8:
5c:e6:57:a6:69:00:de:97:a5:61:bf:4c:81:df:2b:
51:11:79:3a:d5:c4:95:9d:52:47:e4:b3:02:e2:90:
5b:b2:87:95:9f:ea:1e:27:7c:a2:1b:d7:c5:6b:e7:
14:c7:46:4f:f9:eb:4a:67:c9:28:a9:e1:2c:1d:15:
c6:38:10:3e:71:23:b8:7e:db:32:ec:23:ce:96:1e:
8c:88:fd:da:f2:c4:df:ff:00:45:43:df:63:e8:18:
37:fd:0b:29:07:23:4b:c7:bb:e9:3b:9d:f6:09:91:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:41:A7:18:71:08:5C:66:64:E1:55:9E:77:8B:50:7A:F3:26:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
X509v3 Authority Key Identifier:
keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.238.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:41:70:94:b0:c7:f9:89:04:1c:34:8f:f8:8a:f4:00:c7:bd:
07:c7:49:78:95:e3:0c:e0:d2:0c:0b:6b:af:88:a4:35:e1:73:
4a:4a:8f:01:a7:24:1c:eb:7a:ed:58:70:0e:b5:7d:f2:cd:f2:
0b:05:ee:bf:a1:a3:91:c7:4e:1d:a5:fd:2c:81:ce:35:81:95:
e1:e0:a6:91:f9:7d:a2:83:62:cf:0f:f6:22:6b:e9:7b:e0:97:
12:b6:de:d9:60:23:00:ff:05:b8:20:92:bb:5e:fa:06:34:6c:
3d:d4:a0:70:88:76:91:a2:f2:e9:49:ef:d1:26:ef:0d:ca:77:
ef:5b:0c:6d:da:a9:09:57:7b:63:bd:e0:18:b1:92:64:bd:f9:
b5:9b:96:4c:f5:41:2f:a8:f7:e4:89:3d:c5:fd:a8:c1:c1:21:
7a:ed:97:3c:2c:ae:48:ca:36:3d:d9:f8:f4:2d:d9:c9:48:f5:
ff:34:03:54:ec:6a:58:56:16:cd:1b:a5:e4:e3:c0:94:1c:55:
99:f1:c1:d8:f1:95:27:d5:f5:4a:79:0d:32:d1:b1:1f:c1:85:
74:10:9c:c5:3a:1b:01:ce:f1:b8:2d:15:d7:cb:60:3a:21:97:
2e:31:17:78:f3:5c:a6:83:cd:cb:b0:a5:44:c9:97:a7:dc:0c:
23:95:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net