Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa
File: 5b40db24-8ec4-3c0c-8532-bd6a84169001.roa (raw, json)
Hash identifier: rOAqyc/gTL7ZeBwWjJXv/Pz1x9iIr6O2a8LTwBW5Cjg=
Subject key identifier: 9C:62:27:5E:73:81:D0:E0:E9:78:F6:1F:14:B4:99:69:11:9C:FF:44
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581D9C9995E1F5A05522240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.158.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:d9:c9:99:5e:1f:5a:05:52:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=50be893c-59b3-4352-a57b-93e9e0f40b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:92:2c:0b:3f:1b:5c:f3:20:9c:b3:af:b9:
36:50:1e:15:81:46:17:87:b8:c2:29:e5:5b:57:03:
6e:7d:96:b3:fd:0a:85:ee:bc:8d:0e:65:1e:6a:e1:
42:c1:18:3b:bf:60:f9:7a:3b:6f:f5:33:6d:ad:9e:
70:ec:22:c8:0f:dc:43:b1:4a:3b:ba:b5:b8:71:e4:
e2:63:22:c0:3a:71:66:8b:99:30:d9:0b:bb:d1:0e:
fa:cb:fd:37:9d:2f:5c:79:87:ce:62:5a:c7:71:32:
d6:de:74:04:ab:85:fa:56:85:a3:ff:f0:c4:e2:d7:
5d:1d:d3:1e:05:8c:89:d4:48:a4:d3:9e:94:f4:ff:
c4:92:e8:6d:7b:96:c3:8e:41:bc:fe:5d:32:1d:c7:
21:8f:a5:85:2c:e1:94:81:74:34:b2:34:83:96:51:
43:bf:03:38:b4:dd:3c:52:e7:d6:6c:93:54:5a:93:
a4:9a:6e:05:59:73:21:94:8f:20:24:c5:53:f7:d8:
d0:95:c9:1a:eb:c0:84:73:d0:dc:8d:3d:02:ad:47:
58:e3:bc:60:e5:cd:a7:88:bd:b2:3b:a1:27:be:99:
1a:43:03:89:fa:78:bc:d5:e8:48:fb:71:b1:01:bc:
4d:9e:a6:41:cd:15:ac:e6:56:59:52:85:b4:aa:d6:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:62:27:5E:73:81:D0:E0:E9:78:F6:1F:14:B4:99:69:11:9C:FF:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:a9:f8:4a:2f:b5:34:c1:ab:af:3c:a9:a0:7a:4e:3e:90:31:
eb:c1:6a:26:0b:b8:79:9a:da:f2:5d:0d:f6:d1:b0:7b:66:0e:
ad:a0:0c:e5:eb:2a:0a:0e:20:9d:b3:91:cc:d8:a1:a2:6e:2f:
d1:ee:eb:e3:14:5d:d9:8f:09:f6:af:58:11:fe:b9:d3:b2:42:
75:8e:82:45:8b:f0:b7:a2:a8:d7:13:75:0d:09:ed:40:51:ad:
45:5b:f1:7c:19:25:79:43:a8:6e:52:e9:c5:62:95:ce:60:2b:
35:01:e5:3f:3d:0a:ee:71:e4:f2:6b:6a:9a:00:66:9e:d9:fc:
6e:ea:f3:49:33:02:95:41:5a:4a:18:17:c5:ea:98:c2:37:2a:
8b:d3:cb:2e:c8:02:cf:89:e8:f1:fe:e0:68:76:06:9b:3e:50:
57:4d:62:a2:46:ba:af:e3:4c:a3:45:82:55:48:c2:47:e0:8d:
86:74:d3:35:d1:7d:da:d9:00:d5:1e:68:2f:4d:d9:70:32:d1:
12:3d:f7:e0:d1:09:55:15:be:42:ca:a0:61:52:f9:51:2f:06:
ce:10:67:e3:e7:64:d8:d2:63:58:d4:30:df:77:79:b9:4f:f3:
ad:43:bf:06:a6:55:e2:b5:ff:83:6d:ff:01:31:f0:34:b0:f5:
e0:0c:d1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:44 2025 by rpki-client on console.sobornost.net