Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa
File: 5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa (raw, json)
Hash identifier: pqXK2fetr0EoZRyXg9Vc0JFJo0JVtP33PKJ8eOrcDYg=
Subject key identifier: B6:0B:62:C8:C6:AD:8E:CF:00:A2:A8:DE:A3:EC:5F:92:4B:B5:74:53
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581DD2105B7E8F16CFFC4F0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.66.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:dd:21:05:b7:e8:f1:6c:ff:c4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=365aba09-f5da-4126-8a82-f3dc24a0288c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:48:79:9b:ba:a1:01:94:ef:a9:41:a5:03:
d5:85:8d:be:36:57:b6:e7:bd:3b:1c:5f:05:7c:f2:
92:2a:24:4c:28:51:ea:38:96:13:a4:c2:a7:35:23:
9a:88:4d:ba:3e:23:03:59:0c:56:88:c6:8b:a6:36:
38:78:73:9a:5e:52:83:1b:9e:7d:50:9c:dc:49:27:
39:fe:87:c2:4b:24:51:3c:51:27:26:aa:f6:4b:31:
6d:33:93:5f:e8:e7:cf:fe:80:4a:1e:20:47:9c:fa:
ea:20:e8:41:25:51:b6:6a:34:8c:23:6d:6b:33:53:
22:6b:b6:93:51:10:ca:7b:51:12:77:f8:01:73:6f:
c8:57:35:d5:d2:d8:03:a2:bb:d9:0d:db:4b:76:0c:
8d:72:7d:5d:b9:9d:cd:ce:b5:47:27:e9:75:c1:ba:
fa:b7:54:23:0c:e4:f9:67:6a:b3:60:fd:46:d3:17:
ec:bb:4a:42:73:80:28:26:34:fb:ba:ac:fd:40:90:
32:83:ab:30:9c:64:34:e7:57:0b:32:a7:40:41:1d:
92:f9:0a:d3:8c:89:da:0c:ad:26:b4:7d:e1:dc:e1:
cf:11:d3:8b:03:83:df:e3:97:6d:80:60:bc:05:e2:
c1:58:d9:11:bb:21:81:ce:23:91:e1:9d:e6:19:3e:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0B:62:C8:C6:AD:8E:CF:00:A2:A8:DE:A3:EC:5F:92:4B:B5:74:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:32:b7:0a:fc:db:66:c3:d3:d5:b1:c9:cf:92:86:71:88:4f:
7c:5f:70:f9:22:6e:a3:2a:fe:46:9d:b4:f2:10:3e:02:bd:77:
4a:4e:bc:e4:ea:45:19:2b:70:42:ee:79:b4:27:a8:0a:21:db:
ed:3c:47:e6:b1:06:ec:bf:55:96:a8:89:f1:2d:36:47:7f:f6:
42:bb:a4:a9:ca:2b:f3:1f:ef:e9:ba:cf:79:3c:de:63:10:9e:
39:20:ca:9f:a4:22:15:79:f6:51:d5:07:50:9c:3e:12:ca:8d:
63:c1:9e:22:7b:c3:b8:85:cd:72:c0:49:e6:0a:f4:8e:4e:f2:
0b:cf:d4:e3:f7:17:7b:e1:87:85:92:7a:61:b7:32:fb:a2:f7:
ee:1c:fd:d4:f8:91:e1:5c:ab:1e:d2:bc:62:c7:96:98:4a:6a:
2c:c6:bf:d5:86:b7:0e:8a:42:9a:2e:56:0c:bf:05:19:7a:93:
72:9c:3a:2c:3a:76:37:dd:63:88:17:b8:cb:da:5e:81:82:49:
64:5e:31:25:9d:a6:7c:09:24:7c:ed:9f:17:06:9b:c1:72:2a:
ed:dd:39:46:a8:27:d1:00:80:6c:8e:49:4c:9e:2b:22:59:89:
98:aa:0f:03:ca:d2:29:e6:36:88:08:b9:9e:25:df:07:16:2c:
eb:57:f2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:44 2025 by rpki-client on console.sobornost.net