Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa
File: 94da6f54-9255-374b-a408-2e35886a522d.roa (raw, json)
Hash identifier: 3c9GRIRNn9VUZ6Om/is8mra+HCvtznCkJaWID5dcR9M=
Subject key identifier: 72:07:3A:A4:1B:A7:3F:D4:83:D0:62:1F:A6:63:81:E7:80:A4:05:15
Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Certificate serial: 010D0C9F43285848EC968BA5CE6A63807FDF7280
Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 40948
IP address blocks: 104.152.196.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:8b:a5:ce:6a:63:80:7f:df:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=8fea4696-b46b-4fad-9ebd-1ed333b112cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:08:16:b1:23:f7:ac:7d:56:a1:ed:68:22:
e1:76:29:60:22:eb:a8:65:5b:7c:17:be:7f:fc:1d:
2b:1e:3d:50:c9:fd:a1:bb:4d:cb:15:6d:65:c1:23:
9f:d5:31:59:9a:e5:af:5f:86:9f:d0:67:98:d1:95:
53:4b:68:7b:23:b7:2d:3a:6c:81:5b:91:72:81:71:
c5:6b:ae:4d:20:0a:bf:33:34:05:c0:d6:ed:b6:3e:
a7:1b:b3:41:2a:36:db:da:02:a4:66:6f:ba:72:a9:
15:ed:08:cc:88:41:c6:76:c5:36:7e:9f:8c:2e:ec:
3b:9d:85:39:11:b2:1a:82:4e:22:c5:57:77:fb:0a:
26:27:84:f8:8b:0e:a9:37:e8:90:c9:1c:7c:50:72:
d4:3c:c9:4d:1a:22:4d:07:4b:90:00:22:1c:55:cf:
59:8e:71:61:24:2b:a6:48:d3:f8:e9:f1:37:95:69:
7c:94:f3:f4:d3:2e:68:83:2b:99:db:72:46:2d:64:
b6:8b:59:a7:10:c4:3a:d9:fd:04:c9:e6:b1:7c:5c:
e6:ad:af:83:b3:05:1f:65:6f:92:45:25:23:e0:59:
8d:3f:e9:32:45:37:6a:b7:b1:70:55:0f:39:fb:8c:
a4:52:f2:69:f9:4c:05:44:7e:7f:70:83:95:53:ed:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:3A:A4:1B:A7:3F:D4:83:D0:62:1F:A6:63:81:E7:80:A4:05:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl
X509v3 Authority Key Identifier:
keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
sbgp-ipAddrBlock: critical
IPv4:
104.152.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:30:f3:dd:aa:dd:b1:ef:41:2e:2a:e3:95:f1:31:eb:ed:a0:
bf:ea:e6:05:fa:37:52:9c:cd:e3:5a:7e:ea:16:c0:96:fc:7c:
26:43:da:28:eb:3b:4f:eb:82:d2:b8:db:49:44:a2:b5:ae:0e:
b0:b0:6b:78:c3:ac:04:20:19:ee:f0:a9:ad:79:1e:16:0a:77:
5e:81:c7:55:5d:aa:30:59:af:13:ad:41:26:6d:55:8d:f2:39:
a6:00:ce:78:bb:37:dd:40:37:91:76:89:61:43:40:00:73:a1:
63:67:6a:4d:46:a0:cf:ca:f2:60:9b:60:f1:e9:55:64:19:76:
f5:af:3c:0c:20:0d:70:f9:35:d0:a2:0e:89:00:99:d6:69:c5:
08:fd:fc:8a:49:3a:21:44:c3:3c:1b:1c:af:12:82:d8:b6:d5:
fd:03:ad:83:e4:e2:6e:3a:fa:f1:41:6e:c9:f5:a1:f5:5e:d0:
4c:5f:5d:9d:72:35:c7:99:52:cd:87:41:d4:ba:c4:37:fc:d2:
97:aa:88:77:af:a3:06:77:fa:5e:17:b8:ab:57:2f:33:f0:68:
ab:15:f3:93:cd:65:5a:80:02:46:ce:cb:91:23:74:50:6c:33:
ed:74:de:12:ad:81:bd:66:4b:40:0d:00:41:47:cf:81:52:c4:
e1:d7:67:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net