Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
File: b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa (raw, json)
Hash identifier: 2I1+BqySVfjjhRdn6iTQm4X+VoCL9U14/IJVFEyfsZw=
Subject key identifier: B5:81:2F:17:67:F7:EC:E5:5B:D0:DC:FE:58:DF:06:D1:B6:9C:3F:18
Certificate issuer: /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial: 010D0C9F4328584949FE8764D05C6B54010A1F00
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 46489
IP address blocks: 52.129.128.0/17 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:87:64:d0:5c:6b:54:01:0a:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=25a7be8f-849d-4d05-9b6c-54bcd716864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:72:e4:0a:a0:5d:7e:b8:a2:c1:a9:41:dd:
f1:da:43:9e:c6:d0:7a:15:26:c0:fb:88:4d:ec:91:
60:d5:a2:20:08:f5:de:bb:c4:cf:2d:8a:b6:5b:31:
48:2e:57:83:e4:72:ff:0e:fd:98:85:30:f8:b9:d6:
ba:31:51:bc:0a:4f:5a:1e:27:f5:d2:07:1c:1c:51:
5e:c6:0c:c8:35:dc:86:31:a5:b5:bc:09:13:15:52:
a2:4d:9d:24:c7:13:41:c8:8e:f8:2c:a6:a7:49:84:
c4:4d:fc:3e:44:1f:0d:64:57:db:9c:b6:b5:38:f6:
2c:6e:a6:55:31:79:63:d4:12:4d:ab:a8:10:17:34:
16:26:8c:30:31:53:17:1a:8a:29:1f:dd:8a:52:9b:
ae:3f:94:7b:ba:cb:35:27:b1:da:c6:15:a2:9b:db:
40:62:fe:0c:bd:74:a4:6b:91:54:09:4b:3a:49:b4:
ad:92:91:10:d6:97:ee:fc:39:b8:d9:02:dc:72:41:
bf:a5:c7:a5:b4:b1:1e:b1:6c:37:de:4b:86:4f:cd:
4a:6f:c9:71:db:2a:bc:71:2c:dd:b0:99:6f:65:3d:
9a:35:fa:41:e0:5d:3b:81:5d:bd:c3:9f:85:e7:00:
dd:63:6f:c1:89:09:99:a5:50:2e:d4:de:12:13:eb:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:2F:17:67:F7:EC:E5:5B:D0:DC:FE:58:DF:06:D1:B6:9C:3F:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
X509v3 Authority Key Identifier:
keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:de:d0:8b:66:a7:e6:40:ca:04:9c:25:eb:17:16:af:53:49:
21:25:3b:c0:f0:f1:b0:b1:55:34:9d:7a:90:fc:e0:e7:1e:4e:
fc:cb:69:48:e0:ca:9e:07:88:f4:fa:ca:ab:4a:52:63:1d:84:
3e:4b:33:99:f2:87:f6:35:e8:81:be:d0:41:68:40:b5:43:08:
27:51:d6:a1:d4:62:2a:95:34:eb:1d:f5:d3:88:d2:ec:f1:54:
ab:38:f2:bb:56:79:dc:37:cd:53:7d:b3:2e:d9:fe:ed:b6:95:
2e:bb:6b:c3:95:eb:7e:e7:3f:30:ee:62:88:87:0c:39:84:aa:
b8:57:8e:6a:73:4c:2a:18:3a:7b:d6:d5:ea:38:a5:52:6f:da:
50:41:55:af:4c:e3:58:93:63:c3:fd:ef:ab:6d:3b:2c:bf:2b:
0f:53:c8:db:0d:51:6a:55:1b:9e:5b:fc:64:be:dc:53:b0:43:
ee:7e:b6:73:e6:34:b8:1c:0f:fc:e1:72:4f:34:46:7e:36:5a:
6b:00:b0:49:0a:ec:8d:bf:0a:2a:86:f1:e6:a3:47:55:b4:31:
79:ac:4b:47:0c:8d:f4:16:1c:08:b5:56:d0:af:c8:ed:dc:14:
8d:5a:5e:df:30:13:8a:22:8d:dd:d4:39:87:69:89:ea:92:13:
2d:1b:f3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:54 2025 by rpki-client on console.sobornost.net