Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa
File: 2303d566-c21f-3244-8d4c-6d8d314c79c7.roa (raw, json)
Hash identifier: cKBI677/Jyq3MMl7ipd+WTQqXIbgeICet0rFUD+kSq4=
Subject key identifier: 33:69:92:4C:80:60:22:5C:D8:76:12:FA:BC:0A:53:03:56:E2:8F:F6
Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial: 010D0C9F432858495529535CECF9E534AF678900
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 46962
IP address blocks: 66.118.224.0/22 maxlen: 24
104.255.180.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:53:5c:ec:f9:e5:34:af:67:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=72bab0d7-0310-44c6-bd73-f575211a5667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:69:db:f0:09:1d:65:cb:30:e6:c3:50:fb:
28:f5:1d:b4:ff:40:e1:0d:c8:22:ff:1b:d3:a2:fb:
2b:12:c5:eb:00:86:11:75:ad:3b:aa:a1:4d:2a:b8:
ed:2f:49:cc:6a:57:75:19:23:4f:9b:f9:c3:65:d9:
36:6d:ea:73:84:4c:98:31:e1:ca:a6:3f:c5:3c:9f:
bc:1f:f6:1a:89:a6:04:6c:23:9a:a2:fe:95:3e:50:
28:93:69:51:4a:36:34:fa:f9:cc:dc:b0:fe:f3:1b:
9e:20:96:95:e2:01:54:82:d4:6d:55:f9:09:e4:c1:
91:f5:37:c5:d1:ee:0c:83:2c:71:14:72:7e:53:1d:
16:1a:be:44:fe:d2:c5:7a:08:d7:55:e4:2b:b4:33:
bf:d1:02:e9:d2:ec:71:d1:ea:fe:40:37:63:df:39:
78:ae:63:8f:f0:02:3b:17:c8:a7:1b:68:9b:af:c8:
5b:78:ba:6b:9f:9e:81:d8:a0:97:7e:65:6d:6f:fd:
a3:43:eb:58:0d:a7:a9:9f:a6:bf:66:9f:68:98:b0:
75:33:9c:39:bc:4c:af:df:82:21:2a:b0:91:3f:2e:
2f:dc:c2:83:72:17:17:f7:f0:7a:b7:50:b5:cd:47:
23:22:66:b5:a4:30:39:1e:23:1c:5f:85:7d:0d:0b:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:92:4C:80:60:22:5C:D8:76:12:FA:BC:0A:53:03:56:E2:8F:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl
X509v3 Authority Key Identifier:
keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.224.0/22
104.255.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4d:84:6a:3c:ce:f3:38:11:04:c1:0a:a5:1e:08:d8:60:a3:
02:44:8b:4c:1e:aa:f7:b7:86:e1:2a:ee:bf:84:b2:79:e6:1a:
a2:db:78:e5:44:b9:d8:de:97:0d:bb:da:3a:a9:e8:50:e9:e2:
f4:24:28:17:50:25:6e:b7:88:ec:99:14:d3:e3:d9:dd:cf:05:
42:96:3a:0b:bb:18:0f:c1:ab:e0:a5:45:35:b8:fd:69:6d:9d:
17:38:85:3c:15:34:76:c9:2b:f5:60:ed:6d:c8:4d:14:05:1d:
8b:c8:ac:fc:7f:c1:a9:0d:f2:ad:7d:d3:a3:03:c0:ca:cf:42:
c3:41:0e:e1:a8:84:36:9c:d9:cd:56:64:26:04:44:cb:bd:fe:
0c:c8:4c:b2:7b:20:09:9c:e2:12:e9:f2:f9:1a:f7:40:4a:bf:
6e:67:86:08:b8:66:46:3e:6e:b6:7a:f9:4b:17:ef:0b:a7:ba:
2d:3d:35:67:b5:27:7a:81:6c:13:5b:00:82:86:b7:ea:8b:16:
d8:ee:5b:ee:7c:46:dc:0e:20:8b:e2:1d:6a:7b:c9:6c:da:8f:
de:7b:fe:9a:0b:61:cf:db:83:b7:8e:73:9b:98:1d:84:e0:15:
84:d7:bc:e9:1f:6d:81:9d:a9:96:08:73:25:90:61:d1:3b:cd:
69:e7:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:38 2025 by rpki-client on console.sobornost.net