Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa
File: 5a906593-7518-3717-93a1-36f415626e0f.roa (raw, json)
Hash identifier: qXSVX5WUw/a5yq2ucoitNehNgMDM+YaT1Va2rerDNPA=
Subject key identifier: 54:71:EA:89:61:B3:2D:A3:30:E5:43:61:BA:21:20:D1:DF:87:A8:1A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581E095BE602EB583F90AC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.208.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:e0:95:be:60:2e:b5:83:f9:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=141e5a6e-ce65-4d60-a9c2-6bf30c32cef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f9:66:e0:8e:0b:94:95:90:44:c7:b8:96:41:
ff:42:5f:3d:04:81:92:ae:cf:21:36:58:3e:9d:2f:
b4:33:79:03:9e:96:c2:79:6c:b8:71:17:01:84:9c:
bc:be:86:6e:1c:f4:9c:01:d3:94:35:d4:e6:b7:6e:
22:61:1f:9b:27:2b:27:ec:6f:58:f8:c9:d1:52:10:
db:47:2d:1c:9d:64:dd:a3:ac:c4:31:45:30:35:5c:
c2:70:33:d9:39:a1:f2:2f:e6:59:c0:58:62:49:07:
c0:e2:eb:3d:08:de:d1:b1:0a:14:51:23:d5:13:c3:
ac:66:7d:45:45:48:5b:de:8d:45:ae:1c:98:d7:35:
43:39:1c:17:09:41:d5:fb:dd:b7:07:40:3f:f0:47:
06:db:b8:9c:a7:6c:cf:fa:9b:51:db:20:73:ae:69:
88:12:a2:03:93:a5:2a:c7:6b:4b:6c:98:83:2c:70:
03:1f:ff:a4:ac:68:f3:2f:05:7c:ab:01:74:e7:fa:
09:ab:d1:87:6f:b2:77:c3:a8:a9:03:35:f8:6d:7c:
06:23:30:77:99:83:f7:7e:c9:9a:30:8a:08:c3:98:
bb:9f:47:c4:ae:c4:23:55:85:b1:b7:e8:91:86:3a:
4a:38:32:9b:0f:35:65:a4:3a:5f:8a:23:b6:be:09:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:71:EA:89:61:B3:2D:A3:30:E5:43:61:BA:21:20:D1:DF:87:A8:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:84:2d:b0:2c:b1:d4:ea:4e:81:90:d4:df:83:f4:93:ce:a9:
44:3d:a9:1c:a9:cc:27:99:3a:97:90:d9:2a:1c:95:92:19:44:
40:19:0d:d1:41:2a:d9:e1:b3:23:4e:a7:d0:52:4b:51:08:b4:
ce:89:24:01:28:cb:0b:a3:ed:be:51:f4:a8:09:77:16:65:23:
a8:a9:59:f9:e3:97:5a:75:3d:80:52:27:dd:33:09:8e:e6:75:
c1:37:91:b4:bf:18:53:44:ba:21:81:2c:45:51:f2:68:69:51:
ae:fa:31:74:4a:45:e7:51:66:8e:9d:29:35:22:1a:0c:66:a7:
5e:ca:39:cb:ed:e9:c5:10:24:86:bd:c7:f2:32:92:5a:7b:f7:
f7:82:1a:0e:03:bf:fe:cb:b5:05:cd:e4:31:4e:03:01:32:44:
ee:0b:3c:e8:e3:e0:41:1f:fd:3d:79:00:0b:1f:c4:63:fa:da:
59:0e:85:f7:20:45:3d:4b:d2:99:e8:c4:a5:5e:d5:59:3e:36:
5f:df:5d:93:2c:e5:28:bf:62:2c:2a:72:ba:27:61:b9:54:b0:
77:fb:54:d4:15:8d:d7:d1:f4:50:59:5b:7e:65:4e:2c:9b:ac:
03:cb:a3:b5:16:52:9b:44:a8:e8:5d:91:78:dc:d4:1d:da:8d:
29:30:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:44 2025 by rpki-client on console.sobornost.net