Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa
File: 1190cb49-d6b6-36f1-8898-ac542e226430.roa (raw, json)
Hash identifier: eXhomTvClspSVziZw9pBG50Kmbh1NwYmGdahnWslSyk=
Subject key identifier: DD:BA:4F:B3:D3:46:4E:03:DC:0F:EB:33:31:CE:FF:6B:D4:29:43:44
Certificate issuer: /CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc
Certificate serial: 010D0C9F432858497AD9ACB923CAA962D3564594
Authority key identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa
Signing time: Thu 10 Apr 2025 13:00:59 +0000
ROA not before: Thu 10 Apr 2025 13:00:59 +0000
ROA not after: Wed 09 Jul 2025 13:00:59 +0000
asID: 7018
IP address blocks: 23.132.140.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:d9:ac:b9:23:ca:a9:62:d3:56:45:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc
Validity
Not Before: Apr 10 13:00:59 2025 GMT
Not After : Jul 9 13:00:59 2025 GMT
Subject: CN=2508df61-a3a0-4f6a-ae9c-6f6bc7012100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:d2:76:0a:b5:22:ad:87:3b:b0:f5:e1:6a:
0f:81:1e:36:59:53:7a:48:a4:ac:f0:46:d0:af:92:
af:cc:b9:b8:80:d6:db:39:94:40:44:32:45:80:b2:
74:8b:9a:a1:4d:ff:4e:b2:da:ef:2c:0c:e6:a9:d5:
8b:3e:75:eb:66:a8:bf:6a:10:7d:9f:2b:0f:70:ad:
54:6d:5a:cd:dd:20:c0:a7:95:50:bd:36:27:bc:f4:
6c:22:ba:27:e5:f9:36:0c:9e:c0:20:c8:af:24:69:
c5:ed:f9:2e:4f:66:48:d6:80:17:28:60:be:75:0e:
e4:2d:af:e3:76:93:55:6d:a6:8b:01:d6:60:59:e3:
0d:65:b4:06:d8:5f:c6:04:0f:14:42:5b:d2:de:f3:
c5:5f:20:7e:60:9c:13:f6:00:45:f9:fe:72:45:eb:
e7:5c:c8:30:8c:17:07:92:a8:5b:7d:07:a4:77:9d:
d3:ca:78:d9:05:28:c0:11:1d:d4:49:f5:47:31:21:
14:fe:17:16:33:5c:6b:e7:fe:ca:ea:96:cf:48:36:
e4:1c:22:62:8b:f3:dd:9a:34:5b:30:99:04:e6:a7:
18:76:bf:59:81:89:a1:f3:f3:05:8b:86:3c:6a:3c:
d6:4d:31:ad:00:9a:a5:2d:f8:ad:f8:67:bb:d0:19:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BA:4F:B3:D3:46:4E:03:DC:0F:EB:33:31:CE:FF:6B:D4:29:43:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl
X509v3 Authority Key Identifier:
keyid:D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f8:c4:aa:90:dc:78:e4:9d:79:10:c2:19:03:26:4c:97:b3:
61:48:f1:57:58:71:b2:99:0d:85:bc:b4:21:80:9f:40:ea:5b:
07:24:4c:17:a5:b8:0f:54:5f:a3:26:5e:f0:53:7c:a6:91:b3:
ca:57:b0:14:c4:e1:bc:31:98:0a:19:1e:45:5b:d8:b2:0d:c3:
7d:dc:8a:b5:c3:13:9a:2b:fa:f5:42:7b:16:29:3e:a4:7c:ad:
c7:19:a0:ea:eb:73:f2:5c:ea:2a:f0:b6:a3:cd:05:a0:ef:e3:
b5:1d:4d:66:64:d0:3b:df:9c:61:0f:eb:d1:bd:50:f2:3f:6a:
e5:b0:20:1a:e9:3d:53:b0:04:e0:c7:59:a8:bc:d3:7c:ad:ac:
9b:ae:80:52:80:73:da:22:41:f4:bb:75:52:92:6e:82:e8:9a:
a4:c5:d6:83:ed:a8:f5:28:c7:89:d1:78:6a:bd:e8:67:19:69:
53:5f:02:b9:23:70:23:0c:fa:d7:bc:7a:ff:d5:17:2f:94:ce:
4f:08:9c:c4:bf:e8:7f:b9:7c:6f:f0:d2:b3:90:96:34:02:03:
b6:0a:d3:ef:e5:7c:9f:7c:33:2c:3a:40:68:96:56:3e:85:48:
58:77:54:59:0d:bc:15:a4:33:e1:72:48:6d:bf:48:40:f7:83:
8c:8a:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net