Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa
File: c84238dc-4927-30ce-80e8-d4213dd4be12.roa (raw, json)
Hash identifier: 399OCgp4kI60l9+kPAf7wNyQ4zBfPIk1/oRo8lv+QHE=
Subject key identifier: 2E:BF:EF:3C:0A:CF:70:E3:FC:88:0E:FA:03:7D:8B:93:74:0C:7B:C0
Certificate issuer: /CN=fb8e9f00-13c9-406e-9c03-d71cd386c086
Certificate serial: 010D0C9F432858495C243DE2F2A77ABFE1B63A80
Authority key identifier: 88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 14618
IP address blocks: 198.89.26.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:3d:e2:f2:a7:7a:bf:e1:b6:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e9f00-13c9-406e-9c03-d71cd386c086
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=efd92175-b673-49b7-afed-2725dfd01143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:33:33:0d:97:f2:62:a7:b4:f0:48:23:90:
af:db:35:73:c1:d6:21:44:23:e6:f6:b5:4c:e3:f3:
2b:40:82:ca:66:79:ef:68:c3:a3:52:61:52:71:4e:
4d:92:1c:77:69:33:04:e3:37:95:d8:f2:65:95:08:
3a:9d:db:c1:34:02:c3:85:2d:12:ad:f5:3b:d4:29:
4f:5a:75:6c:67:96:29:e9:af:59:6a:82:2b:73:9b:
a1:f7:3e:47:1f:42:0f:d5:2e:1f:a2:3b:d3:f7:81:
20:bf:9c:9a:d6:7d:e8:36:b1:af:98:a9:41:8b:7e:
24:3f:a2:12:bf:39:d4:85:6f:b5:14:24:aa:27:59:
39:01:40:57:4e:d5:29:2a:30:c6:dc:ac:78:b9:dc:
27:45:a8:ce:82:17:d9:06:4d:9e:18:7a:fd:e0:41:
51:7e:de:55:9c:4b:48:32:69:8e:5e:a4:3d:e7:37:
1c:f3:c1:04:de:74:b0:6b:b4:db:dc:95:1b:09:c7:
97:35:95:ea:16:f3:e9:99:78:58:62:2f:fb:dd:ef:
19:13:06:3a:73:35:2a:5e:b0:4f:c8:91:44:10:8a:
c3:58:84:d2:d8:a7:ca:5a:0e:e2:d7:21:1e:32:a5:
d4:36:b9:97:ad:ba:db:f8:16:12:e6:ff:69:0f:1d:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:EF:3C:0A:CF:70:E3:FC:88:0E:FA:03:7D:8B:93:74:0C:7B:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl
X509v3 Authority Key Identifier:
keyid:88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer
sbgp-ipAddrBlock: critical
IPv4:
198.89.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:5e:8d:67:d9:b3:1d:49:b8:ec:bb:74:e9:e0:4e:85:de:0f:
74:4c:e7:3c:ab:9d:35:e8:7c:82:c1:5f:87:4a:19:74:38:d0:
a4:b9:7a:de:46:ad:2c:e1:9a:1d:32:40:85:c9:60:2c:32:d4:
35:93:c6:36:22:b5:16:b7:cb:72:7f:33:6c:29:29:aa:6f:bc:
96:20:88:9f:76:18:40:c7:73:c1:22:fa:e4:d2:a7:db:bd:b1:
a7:2e:c9:4c:31:96:20:49:5f:cc:11:7b:63:65:f7:1f:d1:dc:
28:a6:27:21:72:08:0d:f6:25:01:f1:19:d6:ca:f3:79:71:87:
52:98:1a:2e:af:8c:71:d7:38:a6:13:97:d0:1e:c1:cc:ce:a9:
e4:7c:46:cd:82:9d:60:b3:cc:bf:c4:b1:8a:dd:f9:a8:a5:4c:
6b:48:42:0f:fa:7e:b9:a0:44:39:79:2c:2a:cc:8e:cb:08:5b:
15:35:80:0f:33:06:ff:3c:85:2f:0e:f4:58:c6:23:1a:07:5a:
66:e4:cf:75:8b:4a:44:31:37:a5:aa:cc:2a:1d:19:f0:4c:5c:
05:0e:e5:46:9b:99:88:49:9b:38:fd:9e:e7:c3:5f:7d:8d:9f:
25:95:2c:9a:9d:f6:99:ea:ce:75:88:13:63:d3:29:12:2f:cc:
16:9c:3e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:06 2025 by rpki-client on console.sobornost.net