Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
File: a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa (raw, json)
Hash identifier: ErtEmtrXZXIXGtnAKZn7A4hS6BNtqq1fpgO+7xdk5IQ=
Subject key identifier: B3:5E:7E:73:A4:C6:5D:5C:51:B9:EB:96:A3:A8:F1:9A:68:C1:B7:98
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849028F7D0B2A039FED0DC72500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
Signing time: Wed 26 Feb 2025 10:54:33 +0000
ROA not before: Wed 26 Feb 2025 10:54:33 +0000
ROA not after: Tue 27 May 2025 09:54:33 +0000
asID: 30036
IP address blocks: 104.201.108.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:8f:7d:0b:2a:03:9f:ed:0d:c7:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 10:54:33 2025 GMT
Not After : May 27 09:54:33 2025 GMT
Subject: CN=a2c03a0a-c778-428e-a319-1ef188d1dcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:37:4e:95:e9:d6:34:cc:33:24:f5:ed:c0:
c1:41:96:b0:3f:d8:27:ef:f9:fd:67:ec:1b:22:3d:
16:0d:0d:2b:f6:55:3d:3f:b5:fa:24:30:a3:bf:85:
38:29:03:14:fa:b2:04:d8:1e:a1:65:96:88:d9:d3:
36:cc:d4:6e:e7:47:cb:56:f1:c3:21:e5:52:3f:a0:
04:9f:03:bb:da:ab:0c:99:03:22:b0:50:2b:54:d0:
a3:59:3d:3d:f6:92:84:8d:c2:3f:81:56:67:c3:45:
bf:a4:cc:5d:15:f2:65:61:54:30:d1:da:44:a7:a1:
22:0b:02:d4:a0:42:7a:51:9f:cf:41:e1:ac:f5:83:
18:9a:cb:23:96:d8:68:d0:a6:9f:de:16:a8:15:e3:
4e:ed:4d:66:26:19:39:7c:c8:76:91:41:2f:a9:82:
90:42:75:91:52:60:b3:b6:79:6a:bc:17:b5:ab:f4:
24:59:3e:41:c0:be:2d:1e:d1:b1:6f:15:d1:23:17:
03:88:c8:b5:cf:fe:ec:fb:2c:db:c3:71:0d:a2:85:
7f:69:2a:71:ae:15:7e:2d:e0:5d:55:32:fb:c0:e8:
02:fc:ac:65:33:a9:3c:f8:5b:6b:da:11:6d:0d:e7:
04:30:0b:f4:42:f0:2b:d3:a1:a9:e9:8e:b9:fe:1f:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5E:7E:73:A4:C6:5D:5C:51:B9:EB:96:A3:A8:F1:9A:68:C1:B7:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f5:17:b7:92:42:9d:0c:4b:10:fd:c7:93:db:0c:a1:c4:d9:
1a:cd:87:0b:e1:28:4f:8d:23:5e:29:e8:c9:a2:2e:e8:26:64:
d6:b8:82:1b:68:8a:9a:0a:00:ba:0c:9a:6f:b8:fb:b6:0e:fc:
ff:04:26:6b:4d:08:7e:54:1a:1d:91:0d:5e:ac:d0:8f:33:0f:
fc:22:36:2f:15:d1:13:a2:fc:bd:52:39:6a:ca:80:05:04:9f:
3f:ac:90:cb:5d:64:b4:b1:98:8f:6c:d3:51:3a:46:a9:b6:21:
e1:1b:1d:ed:f9:7c:e7:ed:0e:f7:86:2d:90:c7:1d:0f:6b:84:
04:39:85:2a:3b:be:fc:d3:af:8c:f2:e9:67:4e:65:2b:11:77:
29:ee:2f:3d:f1:f7:93:61:19:dd:3d:14:5c:58:d3:85:29:f1:
7f:21:79:6d:10:d7:65:94:64:42:0e:c3:72:e1:05:5e:28:ca:
47:93:96:8f:a1:da:2b:bf:f9:86:42:c9:20:9e:e6:94:2f:f2:
e2:f0:cd:eb:50:26:28:7a:e4:f9:6d:68:77:c1:22:2f:e9:9d:
9c:56:ee:5b:b8:ab:ef:32:28:9a:f5:48:f4:b6:09:fb:f3:34:
d3:ab:62:f8:75:cf:51:74:ff:0a:c0:01:8a:9f:1c:0e:b9:1e:
47:82:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:52 2025 by rpki-client on console.sobornost.net