Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/30d92917-64b2-3784-b6e0-655a7c72083c.roa
File: 30d92917-64b2-3784-b6e0-655a7c72083c.roa (raw, json)
Hash identifier: YtyVgLo0tCJBzQhJ9XjTU8/Ui8DczdhuLpnczUZ2vBM=
Subject key identifier: DD:29:FE:0B:39:03:85:47:0F:61:57:91:E7:5E:05:6E:9A:85:C0:B2
Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e
Certificate serial: 010D0C9F4328584961B98537CC93041FC145AB48
Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/30d92917-64b2-3784-b6e0-655a7c72083c.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 33099
IP address blocks: 216.40.80.0/22 maxlen: 22
216.40.80.0/23 maxlen: 23
216.40.80.0/24 maxlen: 24
216.40.81.0/24 maxlen: 24
216.40.82.0/23 maxlen: 23
216.40.82.0/24 maxlen: 24
216.40.83.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:85:37:cc:93:04:1f:c1:45:ab:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=b48b970a-2d80-4025-9e4b-f1ac34304927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:60:fd:da:15:b4:2e:5a:58:42:6b:5f:bb:
79:86:28:49:fa:24:45:0f:fd:ec:2b:b3:ca:a1:a2:
2e:63:24:ae:04:6b:b0:20:8b:d4:58:61:30:2c:79:
47:9e:04:38:a7:e5:e0:54:33:74:21:94:5d:a7:12:
94:31:22:d3:46:74:90:ad:89:5c:ee:0c:94:a9:5b:
52:84:a4:68:89:b8:c4:e2:08:c7:3e:4b:61:70:39:
ba:35:96:e4:da:1e:89:e7:69:01:38:73:51:16:4c:
f7:3c:f3:19:67:70:a4:dc:03:05:74:ee:e6:2d:dc:
ca:0a:e3:70:19:27:ce:4b:ca:ef:4b:0d:19:2d:5f:
bf:b0:70:b8:5e:0a:33:3e:e4:c1:4a:f7:7c:40:bc:
89:c6:87:f4:e4:7f:8f:ae:0f:f5:43:07:13:b4:17:
56:d2:e3:95:dd:01:cd:03:11:2b:70:2c:1b:dc:11:
e2:66:07:41:36:29:f0:e9:44:98:c8:3c:da:c5:21:
68:0e:87:50:92:4b:6b:5e:91:5c:f6:b5:59:bf:c8:
1a:08:b7:7e:dd:d2:8e:b8:f2:49:b5:2d:f0:51:9b:
18:fc:45:b6:a1:f1:74:6f:b7:a4:c8:10:af:db:fd:
49:b1:25:57:dc:60:ea:8e:56:c7:0e:eb:cf:b7:6d:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:FE:0B:39:03:85:47:0F:61:57:91:E7:5E:05:6E:9A:85:C0:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/30d92917-64b2-3784-b6e0-655a7c72083c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl
X509v3 Authority Key Identifier:
keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
sbgp-ipAddrBlock: critical
IPv4:
216.40.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:3f:c7:68:6e:30:ab:11:89:62:c7:02:91:05:d5:3a:4a:8f:
38:c6:b7:b8:b9:95:83:a6:a5:ca:61:4e:41:e1:72:dc:4d:4f:
b4:a2:26:ee:25:78:2c:21:01:87:e7:66:36:c0:27:11:cd:30:
73:8d:89:8a:25:5c:48:7a:c8:f1:c9:bf:ba:e0:a2:76:dd:16:
08:91:0b:a2:da:68:c0:2c:8f:49:00:1d:0a:da:1b:64:7b:54:
62:95:4f:5b:59:c5:1c:b8:9f:ee:f1:d6:14:7e:da:fb:b4:a5:
d1:56:9d:a6:d5:0b:36:01:1b:47:68:5c:b6:ed:18:f8:0b:54:
ae:fa:52:8c:a4:bf:19:d0:bc:f7:4b:79:ac:24:dd:a1:6a:29:
98:e1:6c:89:ea:f5:5a:70:d8:f2:b5:73:d1:73:3e:83:07:a7:
6b:b6:d2:a9:8f:d4:5e:cd:62:c2:cd:a8:f4:80:6e:be:de:44:
05:58:4c:71:97:6d:fe:51:80:93:e1:60:f5:ac:a4:e4:17:73:
f6:ba:d3:84:e5:ca:39:53:c5:d4:4f:58:e9:00:0d:89:dc:5a:
23:06:9b:b2:17:9d:32:fb:76:b5:8a:a5:e6:99:a5:18:f6:fa:
d4:3b:52:c0:16:92:af:67:20:0e:84:71:4f:d8:b2:4b:65:f5:
72:eb:d9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:37 2025 by rpki-client on console.sobornost.net