Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa
File: 68f42845-cc20-3621-b523-10070dd8ca9f.roa (raw, json)
Hash identifier: YKhLrk1+4OH6OQ0JkUHb9OZFHJlCEhWbcshZrhfxHuc=
Subject key identifier: 14:44:B0:85:E1:F1:DB:61:C1:41:7F:3F:90:A9:C0:28:F5:83:BE:D1
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581D5958617BA7980777C20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.19.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:d5:95:86:17:ba:79:80:77:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=835fec0c-93b7-474c-b7d9-bcebb4db0515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:a1:75:25:9f:06:4a:73:4c:54:a5:f4:dd:
c3:26:91:ef:46:1a:ec:ef:b3:fa:6d:43:df:fc:10:
55:82:5b:59:41:0d:68:c5:17:3f:ea:26:5d:35:ce:
a1:12:5f:df:fc:9e:fa:ed:3a:6a:89:b1:cb:fc:94:
af:43:a7:68:c9:70:93:8c:1a:ad:fb:7b:e3:e6:18:
96:e5:2a:1e:91:95:6b:ac:60:ab:d2:93:e4:27:15:
bf:19:aa:13:66:a0:50:82:47:4a:5c:a7:6a:27:14:
51:01:5f:e4:9b:66:8d:0e:74:5a:72:19:a5:03:e2:
36:ae:71:ee:6f:90:a5:c5:2e:ea:39:b3:b2:4e:67:
f9:3a:51:74:86:0b:8e:07:84:02:b7:88:6d:d1:2c:
b2:9f:b3:9b:c2:6e:3c:2d:c5:7f:cf:65:e3:c5:05:
9d:9b:13:f3:1d:d1:36:92:3e:0d:46:a5:e0:9d:b5:
bd:87:3c:ab:22:c7:29:3c:7b:3c:5b:f0:65:ba:de:
42:4e:b9:62:4d:51:f3:94:88:5c:cd:46:4d:78:85:
f9:7c:f3:2c:e9:fe:4d:14:59:a2:f9:36:3f:47:13:
02:2d:79:39:70:4b:a7:43:7a:34:ca:74:2b:eb:92:
54:66:14:a8:d8:70:90:98:ff:0a:5e:56:ed:73:09:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:B0:85:E1:F1:DB:61:C1:41:7F:3F:90:A9:C0:28:F5:83:BE:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:4d:6c:da:e3:7b:93:7f:34:16:3f:9c:a8:ce:e8:e3:fe:29:
fc:ac:f6:12:a9:fb:ac:71:df:0f:3b:44:d7:b1:01:a5:09:d2:
34:70:75:f0:35:cd:70:1d:35:09:d0:3f:62:a2:9c:a8:37:3d:
a6:c0:2f:a7:db:c0:a0:b4:06:a2:33:1c:86:d4:b4:97:de:0c:
f6:2e:e9:b7:c6:7b:c9:65:24:5e:4b:71:60:db:0e:68:67:92:
1b:e2:3e:5d:76:78:8f:e7:f1:84:d7:99:9b:85:e6:a6:1c:8b:
b8:07:a7:72:ad:f6:5b:68:3c:2d:0f:6e:7d:8e:c0:57:db:6d:
8d:20:6f:a7:69:1c:12:cf:10:97:05:3d:7f:97:fc:d1:71:20:
18:ec:f6:bf:04:4a:1f:6b:8d:d0:a2:02:ad:a3:68:48:8d:dd:
27:97:7a:82:2b:ac:20:29:a5:21:84:4a:81:da:74:45:83:19:
7a:17:e4:93:65:19:ef:82:8e:f2:71:55:70:a5:9a:4d:4e:3a:
bf:af:0b:9c:55:a0:93:3c:7f:cd:2d:d9:fc:53:45:49:a5:7d:
6b:34:98:1f:c3:48:ce:18:53:9e:3d:b9:1b:97:70:67:fb:b5:
34:ba:0a:f6:a0:7d:a7:59:25:21:54:0e:a5:1e:75:f5:81:80:
81:0c:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:45 2025 by rpki-client on console.sobornost.net