Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/135efe5a-24d3-3630-8e3e-0603baf80319.roa
File: 135efe5a-24d3-3630-8e3e-0603baf80319.roa (raw, json)
Hash identifier: Dj6tXxRvsnZI5jaklhCyWOKYojqlHBC37waUIhwZIqs=
Subject key identifier: FE:3D:92:A8:23:B0:7B:91:DA:66:26:88:75:E5:04:6B:70:D6:73:76
Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial: 010D0C9F4328584973DEE22179D123271DD67140
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/135efe5a-24d3-3630-8e3e-0603baf80319.roa
Signing time: Tue 08 Apr 2025 01:00:47 +0000
ROA not before: Tue 08 Apr 2025 01:00:47 +0000
ROA not after: Mon 07 Jul 2025 01:00:47 +0000
asID: 40628
IP address blocks: 204.61.12.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:73:de:e2:21:79:d1:23:27:1d:d6:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Validity
Not Before: Apr 8 01:00:47 2025 GMT
Not After : Jul 7 01:00:47 2025 GMT
Subject: CN=5065147d-d605-4dad-8a00-260733d72bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:7b:9d:af:d7:84:d2:9d:83:e8:c1:be:6c:
21:fe:46:4e:ce:82:f2:d6:11:84:da:42:5c:3d:a7:
94:d5:bc:d5:70:9a:1d:05:ce:c9:9d:25:c1:2d:cf:
a8:95:c1:b0:9e:8d:07:54:5f:e7:00:63:45:04:a4:
0e:41:08:d5:b7:57:0b:21:ff:ba:07:a8:8f:80:99:
f9:20:bd:88:8c:05:77:25:45:1a:ec:b1:c6:ca:01:
89:f6:37:f7:73:e3:ae:79:c6:b4:ca:fb:7d:1b:e5:
cf:21:b6:22:cb:cb:54:f7:b1:ba:6b:79:89:78:3a:
43:e2:d6:01:dc:c1:ac:6a:7e:52:1e:7d:fa:cd:b7:
88:32:32:c3:47:27:20:d8:67:01:5b:95:5c:22:33:
fa:48:5a:76:87:d6:1c:38:5e:a8:88:e6:22:84:a1:
36:cb:3c:2d:f6:4d:5d:45:11:64:f2:fa:6e:a8:e8:
95:3a:c0:2f:dc:42:af:c2:78:65:7c:b0:29:a8:7b:
0d:2c:85:f5:41:75:12:cd:2d:54:35:99:03:ac:b2:
ca:80:4d:f9:18:42:d9:93:fe:56:ec:b2:0b:15:de:
86:23:1d:95:7e:78:ad:4e:dc:3e:10:94:45:06:50:
03:c0:65:1f:39:e7:7c:0b:3e:6a:64:92:91:cc:26:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:92:A8:23:B0:7B:91:DA:66:26:88:75:E5:04:6B:70:D6:73:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/135efe5a-24d3-3630-8e3e-0603baf80319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
X509v3 Authority Key Identifier:
keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.61.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:49:fb:4d:00:20:29:ce:2a:02:02:b7:4e:f2:84:ec:b8:e8:
62:72:1b:08:7b:c8:89:95:80:05:5a:fb:2a:df:bf:4d:c1:33:
92:2d:d4:83:ce:21:9d:ea:3c:a3:ac:5a:3d:d5:61:7d:07:ad:
93:d4:3c:e6:f6:fe:61:a5:70:18:82:43:fc:89:00:73:61:15:
89:fb:0e:e9:b5:4a:cb:1a:16:b7:8f:fd:88:4c:18:be:d7:aa:
31:c6:83:62:aa:a0:97:00:12:87:d8:a2:e9:17:82:09:c8:0d:
13:c2:e3:fa:f3:cd:05:50:c0:81:76:74:21:fd:cb:52:cb:4b:
81:51:3f:d9:2c:39:03:b3:ba:0b:86:46:e4:e8:cc:c8:f2:db:
f9:2e:6f:3c:c9:a0:0a:cf:c2:7b:c8:a1:c7:ee:f5:d0:bd:c4:
a3:ea:9a:9b:4b:c3:81:0a:0b:9c:7e:fe:24:3e:ac:12:43:e5:
1b:08:45:f6:16:3d:d4:99:6e:ac:8e:06:cd:86:51:bf:38:6e:
14:d2:15:32:61:77:b6:12:f4:c7:1e:e2:6b:26:80:1e:41:28:
c8:4e:1c:0b:93:76:d9:de:f0:b0:4f:00:08:c0:ac:e0:b3:d7:
de:05:d8:bc:0a:e0:6a:c2:e6:0e:c1:7f:ff:31:4b:d3:0a:0c:
0c:b9:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net