Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa
File: 118e4c67-8a95-310c-95a1-5985a2e83596.roa (raw, json)
Hash identifier: ZLIzQ362QBh4ZkmJEbFqWUmCljh2NjAtYBkCVkYvMNQ=
Subject key identifier: 7A:5B:2F:D2:73:27:06:6D:D9:B3:AE:0D:1F:E2:A8:21:F1:C8:E0:2B
Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial: 010D0C9F4328584973DEE1FA731EFB5B77AB4C40
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa
Signing time: Tue 08 Apr 2025 01:00:47 +0000
ROA not before: Tue 08 Apr 2025 01:00:47 +0000
ROA not after: Mon 07 Jul 2025 01:00:47 +0000
asID: 40628
IP address blocks: 204.61.0.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:73:de:e1:fa:73:1e:fb:5b:77:ab:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Validity
Not Before: Apr 8 01:00:47 2025 GMT
Not After : Jul 7 01:00:47 2025 GMT
Subject: CN=47474177-1bd2-472f-b357-1368487eae1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8f:34:34:9d:dd:9c:9e:c5:2a:83:45:7a:3a:
fe:bc:b1:cf:c6:66:54:a6:b1:71:15:61:10:1c:7a:
4e:6c:dd:63:68:14:a4:4d:c5:18:5f:78:0e:28:80:
4e:e5:8b:1d:3c:ef:03:b5:56:2e:3a:b7:52:b7:26:
e2:62:ca:e0:93:0e:da:19:c5:b7:f8:18:70:00:03:
96:b4:6c:59:82:8c:34:c6:06:33:2a:a4:1a:86:bf:
0e:44:10:eb:b8:71:0b:91:c9:41:ee:62:ef:e0:c0:
50:68:fe:de:a8:03:6a:c7:eb:2d:28:d2:28:70:b3:
03:ce:9d:a0:ca:92:f7:72:64:22:90:a8:73:af:7c:
45:6f:36:bf:49:bc:bb:ee:ca:f4:b9:05:e3:4d:3e:
1e:3b:85:2d:59:43:1f:cd:da:37:8a:0d:97:d0:5e:
13:36:98:1d:07:12:2a:f9:6e:41:88:84:8d:4e:1b:
51:91:bd:8b:8a:01:3c:ea:5e:03:a2:d8:b5:31:77:
16:85:76:ee:f9:86:da:a7:08:d3:fd:93:ae:38:57:
36:b8:3b:f4:b1:bd:6c:b5:64:3a:1f:7e:a7:c4:ff:
5f:68:ce:65:82:e7:4b:ff:b6:64:91:0b:71:42:0e:
03:70:6e:51:1c:39:5e:b2:b2:10:e1:c5:01:ae:37:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:2F:D2:73:27:06:6D:D9:B3:AE:0D:1F:E2:A8:21:F1:C8:E0:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
X509v3 Authority Key Identifier:
keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.61.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:24:70:a2:30:8d:c7:de:5d:83:d0:82:e3:35:a9:8d:fe:67:
10:2d:ae:68:53:c9:5f:f2:3d:bc:f1:28:62:bb:f2:df:dc:7c:
80:85:c6:3c:96:fa:7b:20:a1:a3:1a:6b:75:57:e3:e6:39:64:
ab:5b:f6:e0:fd:43:80:c4:a6:7b:15:4e:45:81:ee:bb:ec:5a:
9f:d8:a0:46:c5:9a:56:47:df:f5:29:4b:34:04:b1:fd:92:fd:
e6:3d:e1:f0:59:97:f2:5e:10:4b:57:c1:13:d0:86:9b:a8:e1:
ed:10:b6:9d:2b:06:d1:99:f4:5a:e1:80:81:0f:30:be:b7:b2:
39:75:f3:bc:0a:9f:dd:94:40:9f:6b:f5:b9:64:a6:50:07:f2:
36:48:8a:c7:e6:bd:3d:52:29:d9:c1:aa:e4:f7:3b:87:77:16:
fd:45:cb:11:c2:d6:47:60:06:1a:8a:d4:d9:e9:db:cd:c3:fd:
79:bc:c3:c8:66:49:bd:d6:36:f0:73:c5:15:c6:5f:b7:bc:e8:
60:03:cd:30:b2:79:85:fa:68:ef:13:22:e1:22:5e:f9:e4:e8:
56:67:75:bc:7e:df:89:47:fe:b8:c2:2f:32:72:3f:09:58:61:
ac:a2:ec:e3:85:bf:57:56:3f:7b:93:e7:28:0d:fc:a2:b3:1f:
f0:a4:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net