Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/8f09f090-b8d4-3923-a80d-9ac4054485a2.roa
File: 8f09f090-b8d4-3923-a80d-9ac4054485a2.roa (raw, json)
Hash identifier: o+zj8zH2S+ra42d3hFhtVezmxMgsUUqfH7npQHRUBe4=
Subject key identifier: 31:E7:CC:8D:77:91:B2:DF:A6:A0:5D:9B:30:7F:12:15:0F:06:F7:6A
Certificate issuer: /CN=fc97c6c8-f2ac-45fa-98f5-9b826f811056
Certificate serial: 010D0C9F432858497279A9F3F0075AAED014A300
Authority key identifier: AC:0F:16:D1:14:55:88:95:2D:D3:D3:C9:19:AD:8E:5B:EB:6B:7B:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/8f09f090-b8d4-3923-a80d-9ac4054485a2.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 6621
IP address blocks: 162.223.127.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:a9:f3:f0:07:5a:ae:d0:14:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc97c6c8-f2ac-45fa-98f5-9b826f811056
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=7b3d4731-b704-4221-bfe3-b92186ffaf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6e:3b:57:55:3b:1f:82:6a:c7:b6:79:3e:9b:
80:cb:20:f1:08:92:06:12:5f:e0:a5:bf:f5:a8:29:
ca:9e:5b:f5:07:99:ac:d9:12:d9:aa:80:aa:f3:62:
c6:c1:3d:e0:4c:67:a5:a6:66:37:c6:f3:f2:6f:4d:
82:e6:ae:01:86:23:d4:8a:51:91:3a:3e:7c:f9:a8:
cc:ed:9e:96:19:96:81:f4:a9:aa:eb:06:1f:a9:8d:
0d:b1:d8:b6:17:03:8b:4f:7f:a6:04:4d:4a:24:b2:
6e:07:b1:35:0a:22:a9:ac:f3:33:43:05:43:f0:6b:
19:74:03:af:44:66:47:76:0d:91:b6:e9:8d:25:f3:
0c:72:6b:fa:c5:a1:d5:78:d6:17:82:25:a0:32:41:
31:96:9b:6f:35:a9:17:22:9e:36:19:0d:89:47:58:
f3:d0:39:b9:61:08:e3:33:63:6c:5e:c6:37:73:a8:
09:0f:ea:41:39:7a:e6:03:43:67:54:5d:33:77:ee:
6b:b8:62:48:6d:03:07:16:ca:b5:e8:d5:79:63:fc:
5b:a1:80:82:3f:f4:33:99:4f:83:fa:d2:eb:f6:71:
8e:92:04:56:ba:70:6a:38:a9:7f:24:d3:2d:a4:f8:
cc:82:a9:3e:97:57:68:a6:1a:22:85:45:e8:bf:8f:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:CC:8D:77:91:B2:DF:A6:A0:5D:9B:30:7F:12:15:0F:06:F7:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/8f09f090-b8d4-3923-a80d-9ac4054485a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/fc97c6c8-f2ac-45fa-98f5-9b826f811056.crl
X509v3 Authority Key Identifier:
keyid:AC:0F:16:D1:14:55:88:95:2D:D3:D3:C9:19:AD:8E:5B:EB:6B:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056.cer
sbgp-ipAddrBlock: critical
IPv4:
162.223.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:4a:b7:ef:f1:86:23:10:a7:88:ff:86:11:ab:eb:42:16:e7:
a3:bb:72:7d:b6:57:ff:81:04:22:25:d7:bb:fc:90:09:d1:6e:
72:92:b0:dd:f1:37:e3:d5:ac:47:f1:e9:7f:7d:1b:3a:bd:45:
12:c8:de:8b:ba:42:0d:42:77:f0:ac:17:c1:42:24:3a:26:d8:
88:17:ed:88:3f:30:01:8a:ab:b7:55:ba:af:aa:42:56:9a:13:
eb:b7:d4:8a:a2:50:d0:5d:15:8b:92:e2:8a:85:09:43:8e:5a:
d3:1a:6f:6b:5e:f9:b9:7f:e3:60:ee:af:3d:ae:35:79:4f:3c:
81:98:2d:b5:7a:0c:70:57:b7:da:25:16:ac:a9:26:59:f3:12:
41:6d:d0:2c:d3:f1:77:2e:2d:22:eb:ae:36:c2:6a:4c:f9:8e:
af:fb:4b:e0:f5:ba:00:cd:80:53:90:89:de:b1:72:5c:ff:9a:
ff:21:46:a9:49:d4:8f:96:a7:51:d5:b8:3e:07:0a:b5:15:be:
5d:ea:79:dd:41:76:d4:fa:9f:79:ee:5c:0b:86:0f:36:fa:1a:
c2:f7:f9:c9:f7:86:39:f0:b8:06:f5:9b:a7:bf:f7:28:53:69:
9d:b0:d7:38:b2:c0:4d:92:6e:a5:06:2c:9a:79:2e:a7:20:2d:
9a:28:c2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:38 2025 by rpki-client on console.sobornost.net