Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
File: 094ccd51-115c-3648-97eb-45a013b21434.roa (raw, json)
Hash identifier: iYqVrexoUJLBrWWOv0GGOlUpHL72fVlk6Zq3D2sMy2s=
Subject key identifier: 10:2C:A1:97:3D:A9:0C:70:C1:33:46:CE:B6:66:F4:53:5D:49:E4:02
Certificate issuer: /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial: 010D0C9F43285849393E7518B8AA58ED6E9E0D00
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 39951
IP address blocks: 208.65.36.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:75:18:b8:aa:58:ed:6e:9e:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=e73feed2-3c18-4a71-91a1-fbac466061d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c3:2a:c0:c7:66:61:05:4d:09:14:d8:28:f7:
bf:28:b9:91:0c:dd:d7:d7:90:74:2d:fd:49:21:49:
de:bc:60:f0:af:a4:6d:0a:44:25:d3:42:46:77:63:
c4:d6:39:1c:31:fa:57:e7:3d:39:c9:d6:c9:db:ac:
78:2d:b4:97:f6:fe:0a:e7:40:bd:ab:03:c9:f3:38:
73:82:c9:f5:84:c7:79:32:6f:5b:99:c4:39:48:78:
0a:1b:b8:5b:82:c7:e8:a9:f6:ec:71:04:9d:af:2c:
b7:aa:9b:7e:62:d8:5f:15:f5:2b:ce:f4:34:61:ac:
6c:74:7a:40:96:4a:da:c4:f7:7d:b5:4c:58:4e:ad:
45:34:53:01:2a:77:c1:1a:45:29:c9:26:b1:a1:9c:
67:59:ed:f6:5e:37:40:dd:3d:c2:5e:15:8c:4e:f4:
55:33:0a:29:b1:b0:37:a9:a3:b7:66:02:4f:a9:d7:
ee:e9:65:0c:61:0b:4b:bc:98:6c:db:48:8f:b1:99:
d8:18:95:05:68:0d:86:50:e3:33:25:6f:2c:a9:68:
be:47:70:e7:0d:3a:ba:3f:f9:54:79:2e:ea:0e:b3:
76:8e:1f:a0:73:58:c4:80:55:0a:06:03:ca:10:1e:
94:0b:42:18:92:8f:03:98:86:5e:33:80:1c:71:39:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:A1:97:3D:A9:0C:70:C1:33:46:CE:B6:66:F4:53:5D:49:E4:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
X509v3 Authority Key Identifier:
keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
sbgp-ipAddrBlock: critical
IPv4:
208.65.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:8c:df:90:17:33:d3:f9:50:51:1a:ff:cd:e7:c5:4b:a2:7e:
8e:a4:a7:9d:68:75:17:36:bd:55:af:29:63:c7:56:11:63:2f:
f8:d0:e4:e8:44:d6:1e:22:19:f3:d5:75:ac:49:7e:4c:89:2b:
20:c1:dc:e3:4f:f2:2f:f8:2c:06:a2:f6:3d:5e:38:d0:67:eb:
95:c9:d4:7a:af:70:ed:54:58:04:a7:97:d0:1a:93:c2:f1:e0:
ef:d2:60:70:f0:4b:21:94:cd:25:50:da:bf:4a:cf:7a:df:a1:
44:4f:c0:bd:ce:57:47:eb:0e:3b:6e:a4:70:af:13:9e:91:8b:
82:eb:0a:7c:a7:06:d2:c3:f2:ca:85:ac:00:5c:40:94:ae:a0:
bc:a3:64:c3:c8:ed:74:19:9c:d8:e7:9c:5e:3d:ab:1c:a2:b2:
fa:48:5a:74:f3:39:13:22:ff:65:95:6e:3e:a9:d6:5c:a8:c6:
9c:2f:b2:35:fc:82:52:bb:1b:7b:df:6a:62:60:0e:f2:52:27:
0a:de:81:f0:ba:bf:a9:c0:ca:f6:55:e4:98:a4:87:a2:94:b5:
6f:f2:ac:69:6a:f7:98:e4:0b:b2:61:76:44:79:1f:34:36:a6:
8c:53:98:d7:36:c0:e9:35:55:18:78:e8:1c:43:e7:3b:6f:08:
45:9b:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net