Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621f4149-05d2-3d54-b133-5ee3245b6dc0.roa
File: 621f4149-05d2-3d54-b133-5ee3245b6dc0.roa (raw, json)
Hash identifier: dg6EkKdIykRaC8Q8a71BfG0HB+pVd09yN8i1P3m1Jh8=
Subject key identifier: 74:30:14:0A:85:12:FB:2A:86:56:F5:4C:27:C3:8F:57:06:67:E1:B5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581CDF8B3361E1C6E223B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621f4149-05d2-3d54-b133-5ee3245b6dc0.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 162.72.20.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:cd:f8:b3:36:1e:1c:6e:22:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=373a3de3-57bb-46e4-9e9c-55d7c37ab549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:ba:51:b3:18:11:f4:22:8e:3f:d1:84:b7:
d0:27:b2:21:17:5f:e3:c3:76:ab:95:6a:16:55:0e:
35:b1:a6:39:79:17:91:af:28:dd:ed:b4:df:d3:0e:
87:fa:ce:a1:f4:89:e7:91:20:97:ac:f6:e7:5d:dd:
f8:b6:8b:f4:f4:3c:af:48:6b:9d:da:d8:93:ef:54:
59:3b:af:d8:4b:60:e8:f0:85:f2:85:3c:33:7e:a6:
0e:44:4d:17:6a:bc:9e:4d:bf:bc:c9:03:94:4b:d6:
6e:56:a8:9a:8f:cc:ee:69:0a:93:9e:1a:6a:a1:28:
24:8f:84:52:95:3b:24:a4:3d:a9:67:64:2e:b7:04:
0d:97:ff:1f:db:77:15:f3:00:50:5d:9d:a2:7a:5f:
83:e3:c1:3f:ed:b4:32:28:58:47:f8:d6:bd:67:37:
18:a0:0c:0a:cf:8f:c8:f1:db:de:dd:35:80:98:5d:
b6:0f:ee:ed:90:13:89:ef:5f:9d:99:88:40:d1:75:
98:3d:9e:e8:88:85:17:2b:d3:0a:e1:d2:70:7c:bf:
7f:65:88:83:00:28:e6:7e:9c:07:f8:3b:f1:5e:66:
64:fa:39:0c:a9:4e:36:34:1a:2f:a0:01:f8:37:3b:
fd:73:dc:3b:23:47:f3:df:db:56:d6:2e:7c:e6:99:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:30:14:0A:85:12:FB:2A:86:56:F5:4C:27:C3:8F:57:06:67:E1:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621f4149-05d2-3d54-b133-5ee3245b6dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c8:fa:c2:63:0a:d2:22:d0:c2:17:76:b2:2f:59:2f:d1:d5:
87:c3:cf:0f:6e:f0:96:ea:22:76:ac:c6:d3:59:4f:a5:e6:26:
29:77:b6:5a:99:91:c7:cb:d4:5a:21:eb:bb:b9:c3:24:38:52:
89:ea:94:61:34:e1:eb:8a:49:c7:1d:c6:f6:0c:c5:43:d4:49:
90:f2:40:58:40:e3:e2:a0:e6:f9:c1:a4:4b:65:be:fd:66:af:
5d:e1:64:f5:8f:96:a6:8d:0b:f3:f9:60:c4:73:56:76:4e:ab:
91:a5:dd:be:69:32:45:8d:92:a7:a3:52:2d:5a:83:22:b7:35:
77:ec:49:2d:5c:27:c0:13:c5:2d:c9:51:e5:90:65:da:a7:ba:
a6:ad:4c:df:62:4d:a2:0d:18:e6:12:35:c5:2a:dd:15:c7:28:
c3:44:54:b7:f8:4b:70:c2:80:16:3e:c5:1d:f1:ba:01:cb:6b:
8e:ec:da:1d:1f:a1:93:ea:4b:f3:7c:7c:59:e8:86:c0:42:cd:
e0:be:d6:6d:ed:c5:aa:ca:4f:a9:bc:3e:fb:35:40:34:93:80:
ef:95:93:23:a6:f6:b9:16:1c:cf:ae:32:f0:b0:7d:5b:cb:4e:
32:3e:cf:ee:95:5a:f7:b9:16:1c:66:93:be:6b:a4:1b:8e:de:
e2:38:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:44 2025 by rpki-client on console.sobornost.net