Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d9a1459-6f17-3e6b-be1d-222682e9bb67.roa
File: 6d9a1459-6f17-3e6b-be1d-222682e9bb67.roa (raw, json)
Hash identifier: xnQbt2y98Sr/avajWndxx7nnr8WyRPEkoFT+m/TEha4=
Subject key identifier: 50:44:82:55:CE:20:70:66:85:3A:1B:5E:21:77:85:27:20:C7:71:4D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819776F99BE5E169C15668
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d9a1459-6f17-3e6b-be1d-222682e9bb67.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.38.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:97:76:f9:9b:e5:e1:69:c1:56:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=3d43d43d-d68f-4df3-b77d-cde63c7c65fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:90:44:dd:78:f1:a5:66:87:94:88:20:61:
d4:ca:f0:46:88:bd:79:24:47:49:66:0f:08:43:04:
ce:e4:0c:1c:53:d6:58:c0:4f:6e:c7:43:23:44:0d:
26:a9:66:36:a0:d6:5c:f8:cb:b7:6e:d0:5b:ea:51:
c8:b1:ca:0c:d6:09:bc:de:e4:c9:e1:ca:61:e3:3d:
74:13:0a:63:f9:c1:22:6d:57:d7:76:df:0d:54:9f:
92:e5:04:1e:44:b1:c7:ad:a9:c3:e1:bc:c4:6c:9a:
60:0e:62:60:90:a3:76:1c:eb:8c:6e:93:ed:da:f1:
44:b9:19:0f:e6:28:9c:30:72:df:21:73:3a:a6:44:
b8:db:0d:30:4a:90:68:9f:67:fa:9e:72:f3:f0:10:
02:7b:c0:2d:a0:8e:d2:9f:f2:36:55:03:f7:d0:66:
6f:f5:ec:42:08:53:c4:de:da:05:54:24:ea:a0:97:
d8:fd:86:af:d4:b0:86:29:69:57:74:b5:26:1a:4e:
78:d3:04:e6:ff:17:e7:87:11:df:72:9c:1e:c8:8a:
b9:b4:f9:80:9e:03:63:4a:44:ea:fd:2c:f0:7e:86:
a1:d8:97:8c:19:78:a8:36:7b:4a:a7:50:f4:00:30:
90:30:92:14:7d:01:4f:fc:48:9a:2f:6a:16:d8:af:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:44:82:55:CE:20:70:66:85:3A:1B:5E:21:77:85:27:20:C7:71:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d9a1459-6f17-3e6b-be1d-222682e9bb67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:f4:71:63:1d:d0:5d:20:03:69:3e:78:26:09:56:32:12:6f:
18:75:67:59:86:7f:de:3b:39:3e:f8:5c:39:00:8b:e7:44:cd:
30:87:54:fb:b4:ac:9c:3e:1d:5a:f0:fe:ac:72:c9:4b:5e:86:
cd:64:c7:f3:62:dd:02:96:ec:8a:35:d5:07:c8:ec:cf:2c:2a:
e7:4d:17:1e:71:65:42:cf:31:e3:20:db:e5:13:ec:97:ad:90:
2f:82:3a:9e:1c:d7:ac:e9:17:d2:60:6b:7d:3e:db:ad:49:b1:
10:c6:89:39:a7:0b:04:33:2b:be:54:7b:19:ba:8d:7b:2b:b9:
ef:58:d1:15:71:72:38:6f:c0:bf:e8:cd:13:25:85:a2:27:c9:
94:75:94:c3:07:f5:29:22:18:dc:53:d6:fe:aa:91:48:24:b5:
eb:c8:ca:81:07:0b:2d:49:10:dc:a5:5f:60:70:b9:e2:3b:98:
ce:b7:ee:d5:21:d8:08:d7:bb:0a:32:36:18:ed:57:b1:0c:b4:
9c:75:b2:19:a7:9d:e4:4d:97:c8:1b:cd:2a:c7:86:ec:97:0f:
1d:25:fd:a4:e9:fa:13:ac:6c:7c:61:9f:0b:84:0c:2a:9c:11:
23:e7:1f:78:b5:8e:a4:25:ff:36:0c:e0:39:6f:fa:a3:48:96:
f2:b8:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:45 2025 by rpki-client on console.sobornost.net