Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/8bfbe947-6130-3027-9160-9675c543f8da.roa
File: 8bfbe947-6130-3027-9160-9675c543f8da.roa (raw, json)
Hash identifier: rnLIj6fJg+0HQfSvB//l82BHAxtr/QQ4VX/Wjhcb8JY=
Subject key identifier: 4E:D2:FC:6D:27:DB:2E:E6:84:B5:49:1C:11:04:FA:A0:3B:EE:A2:A7
Certificate issuer: /CN=7770be2f-95a3-43e4-a139-53984564db4a
Certificate serial: 010D0C9F43285849648444472804DBACA2FC0100
Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/8bfbe947-6130-3027-9160-9675c543f8da.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 53706
IP address blocks: 162.213.204.0/24 maxlen: 24
162.213.205.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:44:47:28:04:db:ac:a2:fc:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=4ef0f332-e7f0-4ad5-8b42-e98af317e488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:60:40:25:50:7c:db:59:3a:f6:4a:69:8c:
ce:65:bd:79:cf:b3:1b:15:0f:1c:1a:6f:44:30:3d:
da:69:4a:dd:bb:b2:83:1a:09:05:8b:7f:33:c4:15:
a5:3c:2c:5c:3c:ab:98:44:50:c9:5c:9e:f7:70:9b:
4a:a4:4e:15:15:ac:31:42:29:6f:a8:63:c3:92:32:
66:fa:37:07:36:d6:9c:0d:82:7d:14:b6:44:66:80:
e7:39:05:19:db:39:4f:1b:90:5e:d6:66:70:bf:a1:
9d:f6:33:9c:0c:34:e1:a4:cf:6a:ba:63:53:bf:c3:
02:21:57:3b:30:37:e3:0a:4f:72:03:77:60:71:f0:
aa:fe:e5:11:6c:b3:88:f2:99:28:ee:96:5f:5f:0b:
e3:ff:a1:37:7c:78:49:d9:83:d9:f6:6b:7f:e9:cd:
3d:40:00:84:3a:66:cb:45:ec:03:7b:a6:d7:4b:23:
6d:7e:9a:98:55:2b:37:c3:9e:9b:5c:29:65:83:c8:
ec:f9:cb:89:d4:b7:da:10:1b:b7:47:a8:9e:a4:19:
1b:aa:04:4b:4f:00:cb:ac:24:44:53:4a:55:0f:e8:
43:f5:f5:0b:3b:45:75:83:71:89:14:bf:05:e0:ad:
20:43:8f:17:f6:9f:4b:4b:71:94:94:6b:58:f0:39:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D2:FC:6D:27:DB:2E:E6:84:B5:49:1C:11:04:FA:A0:3B:EE:A2:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/8bfbe947-6130-3027-9160-9675c543f8da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl
X509v3 Authority Key Identifier:
keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
sbgp-ipAddrBlock: critical
IPv4:
162.213.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:bb:82:e3:17:67:81:e3:fa:7f:9c:06:f7:56:bf:b7:62:55:
39:a8:f8:64:72:5c:7f:4a:e3:cd:a5:c6:41:e7:b3:14:93:14:
ca:b9:6e:87:d0:32:2e:78:e9:eb:0b:9e:61:69:6c:66:cc:40:
29:d2:9d:63:db:32:6a:e2:fd:8c:16:3f:3e:82:a7:b9:ae:4f:
f0:1c:8e:fa:74:45:cb:a3:58:bc:43:b8:83:f5:15:f9:25:f6:
60:18:22:bb:2d:35:af:f0:db:fe:db:ec:97:9e:28:a7:36:bb:
ea:fd:24:8b:cd:ae:00:5f:7b:3f:cc:03:c4:c5:94:4b:9b:b3:
f2:eb:b9:c2:56:cf:25:aa:1b:e8:2b:de:48:d3:44:33:65:da:
5f:16:c6:a0:6c:cd:89:ed:8c:55:55:5c:d2:4a:ad:63:ae:4e:
37:83:84:b3:03:34:79:9d:b6:d3:f9:37:b7:22:7d:45:02:38:
a9:bf:2c:90:2a:69:24:47:3c:e1:31:7b:5f:7c:91:ec:c3:f9:
7e:43:cc:7f:bd:78:70:90:94:8c:bb:04:08:20:8b:8b:d1:87:
e2:0f:f2:71:4f:0b:b8:65:74:2e:62:c9:9c:79:9b:e8:0d:26:
61:a2:1a:d8:2a:84:6b:d3:9c:85:2b:e7:37:35:9b:b6:33:95:
25:f4:e1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:37 2025 by rpki-client on console.sobornost.net