Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3cad8533-e32e-3054-ba93-3b327624a170.roa
File: 3cad8533-e32e-3054-ba93-3b327624a170.roa (raw, json)
Hash identifier: QbxmFHsPOLiZVzvC/jEJV+BgJ7WCW+6duwtZxhJKG68=
Subject key identifier: EE:D1:EC:5A:5C:3E:00:23:C7:93:F1:89:4D:5F:EB:DD:79:9D:1E:03
Certificate issuer: /CN=3d1c553d-7b57-40d6-a02c-deff888b678d
Certificate serial: 010D0C9F43285849754454CAC37DF44531A74A00
Authority key identifier: C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3cad8533-e32e-3054-ba93-3b327624a170.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 14618
IP address blocks: 64.65.61.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:54:ca:c3:7d:f4:45:31:a7:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1c553d-7b57-40d6-a02c-deff888b678d
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=da96b7cb-c7b1-4d02-ab53-9c1c8bcbafcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:9b:3a:dd:84:24:ce:9b:99:6d:7a:f3:c3:
54:60:69:4a:63:4d:aa:5b:0f:63:b5:91:9e:1c:10:
69:f4:d2:0b:82:56:37:ae:e2:46:32:0c:81:21:c2:
f0:77:d0:16:0f:f6:d8:fb:e8:8a:92:db:9b:0f:f0:
60:a5:75:bf:c1:8f:ac:cb:d7:0d:fa:6a:4a:2d:6d:
91:2f:36:56:51:8e:53:66:67:03:61:71:c1:35:19:
8f:bb:4f:d7:c6:e0:17:50:07:a8:68:9c:d1:5f:12:
a7:cf:fb:12:07:26:de:1b:66:65:0d:e5:19:12:48:
bd:21:df:a0:9b:0d:d6:13:11:26:84:49:12:2f:35:
e0:03:11:fa:90:c8:72:f6:6c:11:3f:a6:0b:83:56:
20:3d:da:ec:57:94:84:1c:97:42:03:c4:52:c5:78:
92:4b:0f:70:af:2c:c7:10:05:85:3c:9f:9d:65:b8:
a9:ac:9c:00:34:c6:f6:6a:ed:1f:ec:6e:91:25:9e:
79:7a:c2:a0:88:f1:28:cb:15:16:ae:50:d9:d1:ae:
d0:06:d9:f7:dc:9e:24:42:70:21:b3:7c:33:7a:1f:
6b:70:26:79:2d:91:45:f0:7c:f3:0c:0f:89:e2:05:
a5:17:3b:07:05:ed:79:55:be:79:bd:77:af:a4:8d:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:EC:5A:5C:3E:00:23:C7:93:F1:89:4D:5F:EB:DD:79:9D:1E:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3cad8533-e32e-3054-ba93-3b327624a170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl
X509v3 Authority Key Identifier:
keyid:C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.65.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:f6:11:df:da:b6:4e:c6:d4:1e:88:2b:36:fe:00:e1:f5:9f:
a6:26:da:ee:30:24:b1:c6:cb:67:2c:19:62:ff:de:2d:c0:7b:
2c:7b:07:ba:fb:0d:d9:fd:20:0d:8b:7b:f8:40:cf:47:d8:d5:
55:41:99:83:de:4b:24:6e:ca:a8:02:90:93:f6:0d:84:45:c7:
03:d0:29:89:00:11:ec:28:0d:31:71:61:40:f0:5b:26:2f:91:
ba:74:fd:9c:26:b6:d5:25:a6:34:4a:04:a8:75:c1:18:ac:79:
d9:6e:3b:35:80:55:91:e8:42:1a:27:8a:35:dd:d2:6c:11:d8:
36:17:d3:6d:6f:b8:a0:1f:e1:cf:21:19:68:f3:42:d4:dd:e1:
fc:7e:d2:80:77:80:35:d6:7e:db:44:5a:f1:0a:5f:b9:29:00:
88:6f:f8:89:6a:50:07:24:da:47:72:8f:d0:e6:59:53:b1:40:
70:3d:89:34:e9:58:a0:e5:0a:c6:32:63:4f:54:af:9d:35:ae:
a8:f6:d7:ef:fc:53:90:6a:17:8d:38:09:02:6a:ca:5a:57:f1:
74:7a:47:57:32:36:13:17:d5:30:a3:d1:da:e5:bf:97:35:43:
ab:0f:55:18:69:5a:25:3e:ee:93:17:d0:e8:e4:0b:55:03:19:
50:a9:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net