Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa
File: 2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa (raw, json)
Hash identifier: DmFHe3e8lf9Oh2fjYvsYLi3h8ltsn5ULWbW5Vfia7Fo=
Subject key identifier: FF:75:BE:FA:CD:D4:ED:C2:59:B9:2C:57:D2:02:ED:0E:6C:C9:30:ED
Certificate issuer: /CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
Certificate serial: 010D0C9F432858497279B2CCDEE47C3130B5B480
Authority key identifier: 70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 396423
IP address blocks: 23.143.200.0/24 maxlen: 24
2602:290::/36 maxlen: 36
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:b2:cc:de:e4:7c:31:30:b5:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=d9ffc6b0-c251-44a5-ad48-b872dbab7e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:56:03:1a:b9:c3:a8:87:6e:4b:ed:2e:de:
41:4f:c7:fc:be:e1:67:8d:7d:c5:90:a5:e4:d6:eb:
07:2e:78:53:8d:6a:87:71:3d:e4:6e:2b:0b:cc:d2:
14:31:25:8b:36:e4:fb:b5:fa:61:70:2a:69:3f:78:
df:12:27:22:9a:d2:8b:e8:a3:1a:68:1c:15:50:25:
16:ec:3b:3b:8c:a1:0d:9d:a2:a2:8b:d3:c5:6c:1b:
0a:be:60:54:e4:a5:00:1d:c1:b5:2a:2c:ab:c2:45:
b4:c5:3a:36:f5:0d:2d:4e:53:38:b7:ca:be:52:54:
93:17:ac:61:b6:d4:7f:4d:bc:f7:53:ee:f5:fe:8e:
85:79:e8:4c:da:ca:51:bb:f0:6e:fe:cf:86:ea:2b:
5f:75:b7:6c:ed:3b:9b:8a:8c:de:0b:33:d9:2e:81:
d9:4a:53:af:ea:a9:dd:25:37:d5:7f:6b:3d:a2:e1:
9c:09:3e:1d:b7:0b:09:20:58:3a:11:65:12:c4:a6:
11:b5:3a:27:ab:37:4f:92:ef:a7:f6:e0:78:cc:57:
93:e9:8e:44:2b:00:09:d3:3b:24:09:e3:41:b5:94:
f7:29:49:64:46:86:93:d2:7d:47:5a:37:dc:b9:df:
bb:7b:fe:7a:7c:e3:ab:87:7a:bc:ab:d4:53:86:d9:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:BE:FA:CD:D4:ED:C2:59:B9:2C:57:D2:02:ED:0E:6C:C9:30:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl
X509v3 Authority Key Identifier:
keyid:70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.200.0/24
IPv6:
2602:290::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ce:a7:f9:cf:fa:30:b3:52:f3:31:b9:25:66:bb:82:fc:b9:
75:bc:79:bf:97:84:c8:d4:fa:8e:36:ba:15:4b:51:86:62:7a:
45:53:66:99:96:b9:d5:48:97:d5:e0:7b:88:d5:65:52:e6:96:
cf:3f:5b:51:af:fa:76:53:34:83:0b:f6:96:b7:03:36:55:25:
a5:28:7f:8e:b1:e9:46:48:6f:09:4f:e0:39:d0:2e:43:c1:80:
10:4b:24:62:ee:a6:76:bf:b6:b2:91:30:d0:ec:27:32:9a:a1:
6c:0a:8d:99:fb:3e:27:55:df:e6:4a:f0:d9:5f:a4:e4:c1:11:
3f:84:8a:f6:b5:be:5b:1f:f4:c8:76:95:26:7d:13:14:27:12:
f0:49:af:42:64:d8:fc:f4:ac:ae:be:38:6c:f2:85:4f:42:a3:
ae:3c:37:ba:d4:87:26:ed:44:c2:ba:11:e0:ab:93:89:ed:d3:
5c:11:a7:1a:da:6c:f7:56:f2:a6:c2:53:68:8e:13:fa:da:52:
7d:3a:a0:d2:ed:17:9c:47:98:6f:97:b5:2e:a9:72:46:e7:9e:
fa:34:55:89:38:71:81:02:f6:05:9d:66:d2:7d:9c:ae:d6:5e:
15:36:f8:c3:54:48:d1:18:3c:f6:8d:4f:5b:cd:e6:3f:64:b9:
e0:22:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net