Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa
File: f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa (raw, json)
Hash identifier: 7vmy8aLRDcviNhIxsMkP9e5fwqofec4Q1TU8tg3QsYM=
Subject key identifier: FB:9C:1D:FF:80:C1:EC:CF:FC:B9:D2:64:85:FB:BB:EB:20:B7:B6:90
Certificate issuer: /CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
Certificate serial: 010D0C9F432858497279B2FA5C07A280EF7CD3F8
Authority key identifier: 70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 395648
IP address blocks: 23.143.200.0/24 maxlen: 24
2602:290::/36 maxlen: 36
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:b2:fa:5c:07:a2:80:ef:7c:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=8513f306-748b-486c-8efd-7dd923312c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:85:d5:20:f5:9f:c6:a5:e4:35:b4:f9:5c:
f6:72:39:2a:aa:8e:99:93:05:bf:28:59:f6:1b:37:
35:09:43:e9:2a:d0:59:6a:b5:1f:9b:f4:30:2b:df:
41:25:4d:6a:58:7e:ba:75:a9:39:b2:ab:45:5f:c1:
b1:4d:61:b6:4d:17:5b:13:e5:7c:f6:1b:60:96:34:
a6:85:90:f6:2f:66:ac:2b:56:03:3b:1e:26:06:26:
89:fb:e4:a0:f8:b9:cc:6d:58:eb:2b:7e:65:f8:7f:
e9:de:a8:32:16:db:8a:45:0d:44:62:f9:a7:0a:8b:
03:ee:07:d2:c9:bc:7e:93:17:7a:d7:5a:a0:cc:b3:
92:df:14:0a:62:6c:b8:d7:ae:12:8a:ed:c3:1d:36:
d8:65:2f:29:36:4e:b6:d4:c4:b7:b5:2f:29:ac:ec:
f7:57:5c:ae:03:ea:6a:db:49:b7:86:fa:59:43:ad:
10:cf:fc:61:f3:05:44:2a:cb:c2:40:15:d4:f3:16:
f7:83:e4:3b:0b:6c:31:15:f0:20:cd:25:1b:b3:87:
af:7b:f3:0b:0f:05:c4:d5:8a:bd:58:ad:1f:75:23:
bf:40:7c:96:40:03:d5:03:64:75:06:46:6c:58:bf:
68:c8:36:ce:aa:16:d1:4f:26:c0:5c:7f:d3:67:8e:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9C:1D:FF:80:C1:EC:CF:FC:B9:D2:64:85:FB:BB:EB:20:B7:B6:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl
X509v3 Authority Key Identifier:
keyid:70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.200.0/24
IPv6:
2602:290::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:a8:db:a0:f3:79:cd:0d:d2:d5:53:1d:93:d8:36:87:8b:60:
35:9b:80:c4:88:81:58:cb:cb:48:38:a1:ba:08:3c:b0:d7:e4:
a0:72:02:fc:7e:20:cb:76:91:cf:a0:6c:62:f9:27:c2:8f:64:
a4:8c:b8:c7:37:b6:24:0a:20:ce:bc:7a:81:ab:31:9d:d1:0b:
68:e7:31:e8:2a:8f:88:41:af:6c:48:54:dd:7d:89:a9:7d:9e:
d3:ff:e1:94:af:c0:07:1b:e0:3f:af:33:c6:5e:d3:81:57:54:
df:45:b5:03:5c:6a:a9:22:6c:0f:93:1f:32:3a:f3:ec:9b:c4:
e8:71:bf:01:8c:a0:38:1d:38:40:d6:1b:4a:f3:9f:13:72:93:
45:9f:fb:57:cf:ae:2f:a0:87:d2:ae:72:18:c0:7c:6c:e3:83:
c9:53:84:71:e2:90:ce:01:2c:cf:15:e1:79:83:bf:63:9b:e5:
88:53:46:82:72:eb:18:02:c9:8f:4f:3a:4c:37:de:1c:1f:51:
f0:04:21:c6:40:af:2c:75:ba:54:9d:09:df:19:46:6d:4f:b0:
df:47:b0:7a:2e:16:87:30:86:13:51:11:36:5e:d0:de:f4:74:
c8:a3:41:4b:8d:45:5b:41:49:a1:6e:cc:74:52:58:2c:d1:12:
a4:96:42:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net