Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f2a88c3d-fad5-37b1-95c8-c9cd32c867e9.roa
File: f2a88c3d-fad5-37b1-95c8-c9cd32c867e9.roa (raw, json)
Hash identifier: RxFDTYefcPXeEwRP0U9jzVGO3cYS12amPBOZZACAUEw=
Subject key identifier: 99:CD:FD:62:B8:5C:DF:B4:0D:47:D6:DF:A3:2F:9E:CA:E4:EA:55:B2
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F43285849806F22A10A23D2ADDA36E000
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f2a88c3d-fad5-37b1-95c8-c9cd32c867e9.roa
Signing time: Sat 12 Apr 2025 13:01:01 +0000
ROA not before: Sat 12 Apr 2025 13:01:01 +0000
ROA not after: Fri 11 Jul 2025 13:01:01 +0000
asID: 21559
IP address blocks: 198.52.240.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:80:6f:22:a1:0a:23:d2:ad:da:36:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Apr 12 13:01:01 2025 GMT
Not After : Jul 11 13:01:01 2025 GMT
Subject: CN=4f33d507-6057-49ff-8c0a-565a91935601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:9a:fb:29:44:cf:38:34:6f:fa:63:43:e4:
54:ee:2d:e2:ae:76:69:a2:04:7a:a8:04:bd:07:10:
e7:5a:8f:6c:f1:35:82:9a:83:06:2b:59:c2:91:96:
f4:e9:5b:9c:72:51:e3:ab:86:ae:53:4a:e8:9e:58:
16:08:15:58:93:43:86:8e:16:cb:38:01:d7:f5:d1:
d5:c0:ba:d4:89:8a:d6:ca:ab:e8:c5:55:28:e9:d4:
13:0e:9f:9a:52:06:77:4b:a6:2b:92:eb:68:e4:91:
41:73:9f:7d:dc:bb:c3:07:94:fc:97:7a:0c:af:9b:
69:85:65:e6:6d:8d:b0:11:19:33:b9:47:1f:83:a2:
9f:57:05:ed:00:65:0d:ea:60:05:51:e9:81:31:fe:
5d:0c:a9:ef:6b:ba:5a:98:fd:e2:61:7f:cb:fd:5a:
77:95:6b:41:e2:33:6b:d1:78:04:60:c6:76:68:1e:
b0:43:35:9b:53:9e:c5:68:62:12:93:70:3c:a8:8d:
84:5c:07:a5:a8:a1:0a:dd:81:73:06:33:98:58:12:
7c:24:0d:6e:07:d5:d0:f4:16:c6:a7:87:c9:92:7c:
53:64:62:9b:e7:3b:42:cb:fa:c7:54:3a:f5:b4:86:
c5:5d:19:db:af:a4:2e:1f:e1:84:99:2d:cb:94:83:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CD:FD:62:B8:5C:DF:B4:0D:47:D6:DF:A3:2F:9E:CA:E4:EA:55:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f2a88c3d-fad5-37b1-95c8-c9cd32c867e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.52.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:8e:e2:e1:35:b1:cc:52:d9:dd:34:63:ae:8a:0b:fa:94:3f:
b9:3f:0c:41:61:a7:bb:c9:7b:31:63:24:eb:91:04:1c:0b:be:
23:8b:a4:b5:fb:bc:5c:7a:9c:e9:af:cc:94:c4:7f:cc:70:ac:
9f:19:e2:c4:8e:9d:79:66:b2:a4:8e:0f:ca:e8:97:09:99:7b:
a1:f6:f9:3e:f0:cf:44:5f:3c:a3:c5:6f:d7:fa:73:e1:83:97:
78:ab:d2:72:09:96:e2:ce:f2:a6:80:f7:e1:cd:f6:1d:15:61:
76:11:63:ae:d7:92:aa:99:4e:39:fd:a4:7c:62:8e:9d:5e:2a:
17:91:2f:5d:52:37:39:e2:72:dc:d6:15:98:73:6d:13:46:a6:
ab:2e:2e:59:1b:61:60:5a:97:b9:84:b2:d4:b1:8d:b5:ef:0e:
fb:51:51:08:02:c8:03:46:a2:19:bf:4c:d0:4d:a7:b6:73:43:
03:b7:8a:24:6a:c0:74:2c:f5:86:12:10:09:80:7b:3a:de:53:
85:db:eb:26:1d:64:29:55:74:ec:17:2d:db:91:bf:23:ab:d7:
1e:46:90:f2:bd:7d:60:9b:04:69:d0:0a:4d:ac:e6:fb:ca:7b:
fb:e7:72:ee:1f:2c:89:7a:17:fd:d8:1c:1d:73:8d:f5:28:97:
15:1a:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net