Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa
File: 1a781c28-0942-31de-bd94-cb1c908194c5.roa (raw, json)
Hash identifier: mbcZc11L5SVxF3zsUpTFw0xv0x1S4FhR03oxSVaMhMI=
Subject key identifier: 77:28:9B:F0:6F:9E:78:B2:C1:E7:79:48:E6:1E:0D:DF:BC:B1:97:ED
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F43285848ADC60329B5FFF5DD9F4B1E00
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 397373
IP address blocks: 67.21.32.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:03:29:b5:ff:f5:dd:9f:4b:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=cb176f91-56b1-4366-ac6a-c489f67cc0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:00:19:6d:b5:74:c5:89:0c:82:96:26:da:
f8:8c:b3:2b:cd:3d:05:18:c4:51:23:85:3f:30:e7:
0c:5c:44:9f:1d:d3:2b:eb:f2:1f:f8:3c:f5:2c:c2:
a4:60:6c:fa:69:fe:85:80:26:b4:fe:6f:32:dc:ec:
a1:2e:f7:60:1d:9a:7c:cc:55:a7:c5:8f:60:37:e7:
16:88:29:ea:43:31:59:c5:e5:9b:1c:e6:be:1a:91:
38:89:2b:4d:e9:bf:05:a5:24:77:3b:48:0c:70:a0:
93:77:fd:99:de:9d:d5:2f:11:bd:5f:bf:5a:32:62:
88:dd:34:f9:cf:12:c1:72:31:18:47:46:18:51:71:
61:3f:c2:f5:bd:f0:cb:58:d9:a7:14:72:bf:27:b2:
63:e5:74:42:96:9a:4d:86:c6:af:31:1b:ba:c2:ab:
bf:ec:a0:52:36:1b:04:a6:3c:62:d7:be:84:6c:3c:
83:84:63:66:90:68:6c:c7:da:08:0e:04:22:21:d5:
d6:5a:ef:a9:17:8a:c5:ef:56:c5:b1:52:e5:7d:59:
13:87:4d:ad:d8:2d:2a:e7:d5:8f:b2:f7:b5:67:eb:
1e:2b:66:ee:0b:35:e3:46:fa:55:8b:b2:d4:4f:fe:
eb:87:57:f7:3e:d1:c9:02:4d:7b:90:8b:9d:4c:52:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:28:9B:F0:6F:9E:78:B2:C1:E7:79:48:E6:1E:0D:DF:BC:B1:97:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
67.21.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:a4:38:b9:0a:40:a7:db:0f:ec:c9:04:81:08:1a:64:1b:92:
78:f2:e9:58:8f:5e:da:d9:44:5f:fb:39:93:f4:2d:09:44:1a:
27:e4:bc:00:8e:2b:c9:1d:3e:e7:58:53:28:cc:00:06:79:68:
1b:67:23:56:03:83:1d:2d:e1:e7:db:38:65:62:ed:30:cd:d8:
82:bb:44:d2:71:e9:1d:62:93:36:f0:9a:76:7b:22:fe:23:31:
6b:83:95:c7:5c:38:5d:3b:bd:b3:1a:2a:11:43:85:ea:7e:4e:
be:54:13:5d:39:af:06:22:4b:58:5d:dd:af:6b:e4:ab:65:17:
61:b4:f6:40:1b:c6:c2:b0:7b:e2:70:21:09:eb:c5:3e:64:40:
a4:ec:a6:5a:d8:4c:4c:f2:a2:b8:d7:27:a4:e1:f0:b1:04:ba:
98:43:2e:ee:b7:38:3f:5f:c4:5a:d6:5a:fd:25:ef:77:d5:b1:
ae:9a:36:97:7f:1e:8a:07:7f:86:c6:a0:bc:4a:9c:12:2e:b4:
e5:45:a5:bd:18:5a:d6:25:b8:8a:bf:d1:1e:19:6d:03:5e:1e:
d6:08:4c:e0:d8:19:b2:ff:60:e1:e5:c1:c2:81:09:8e:47:4c:
2d:35:95:59:d5:3b:36:0f:0d:3f:1c:90:dc:71:3c:c4:ae:83:
a4:4c:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net