Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa
File: 6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa (raw, json)
Hash identifier: 0GB6EkIXuuReyvT6veNAeGfNnIucAaNhkmrCub1qOsQ=
Subject key identifier: 17:22:84:D1:7B:21:80:EE:11:AA:A1:BB:34:63:C2:08:D6:6A:C4:37
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581A0850730F6B3BA23C7C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.170.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:a0:85:07:30:f6:b3:ba:23:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=677a9443-f42c-4641-9eab-4c3858a46a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:c3:16:32:d2:b3:32:e7:4d:4b:2e:09:26:
cd:51:6e:74:68:d2:cc:bf:54:ce:d5:7b:84:67:0d:
98:e7:26:73:f8:8c:3e:8d:72:06:e5:2d:7c:bd:3e:
61:17:4c:6d:4f:eb:3b:db:c3:d3:53:62:71:a8:dd:
41:a4:d5:ed:a3:b8:cb:31:fe:ef:f0:7e:53:82:09:
7d:42:b6:e3:4a:19:e3:cd:93:21:69:09:be:c1:0d:
e5:6b:4f:b7:43:90:67:2a:3d:1a:80:c1:6d:ba:06:
80:c9:49:e4:79:47:dc:4f:00:ab:4a:65:07:d6:73:
53:26:c2:d6:4e:ed:9d:62:ee:56:c2:6a:25:45:18:
a8:7d:f5:bf:d5:e9:b1:73:f5:34:66:f1:00:6d:9f:
09:c3:51:a9:c1:ea:0f:4a:05:22:ae:e0:13:55:68:
23:66:2d:4c:28:05:11:31:c0:1f:43:fe:01:76:97:
b7:67:fb:cf:d7:04:c4:01:91:cf:3e:a4:38:55:74:
46:40:31:b3:18:ee:68:33:44:71:96:f5:b9:0e:64:
bd:a8:92:8d:01:87:fa:2a:46:ac:c1:3b:d5:f0:48:
fc:dc:11:90:02:68:81:ad:5a:c2:41:98:74:55:f9:
c2:27:2e:e9:30:b3:9b:78:0d:b8:87:51:75:9d:2c:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:84:D1:7B:21:80:EE:11:AA:A1:BB:34:63:C2:08:D6:6A:C4:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:57:c5:36:e5:4d:4e:3b:90:4b:05:f2:31:49:fb:fe:e9:18:
81:48:72:08:4c:50:1f:da:37:cf:83:7a:89:2b:d2:cd:8e:a4:
9a:82:59:9c:1e:95:52:f6:4a:68:51:b2:7c:39:5c:45:eb:ae:
ac:4f:b0:c4:0c:91:db:bc:71:fe:33:f3:88:be:6c:c0:f0:60:
c4:55:d7:6b:79:41:7b:36:70:39:89:01:f7:02:f0:fe:89:a5:
7d:8a:7f:02:85:ae:8b:fb:8f:d1:11:a5:66:b6:40:fb:91:30:
76:73:de:dd:b2:9b:ea:8e:be:12:8e:50:e0:ad:78:2c:11:60:
58:af:5a:a9:1a:24:b3:2d:71:bd:f4:ac:11:8d:dd:15:77:1d:
b1:eb:27:89:05:b4:7e:e7:97:44:42:27:ea:af:6c:37:6f:7a:
71:5f:f3:52:b2:c9:77:45:c1:ee:e9:60:db:90:59:cb:5a:84:
8d:92:29:ce:41:d9:79:37:7c:54:82:a0:61:87:ae:57:28:80:
37:dd:75:6c:26:11:90:87:6d:eb:dc:01:f7:74:7c:c9:84:67:
a2:ca:11:5a:1f:0f:15:ad:e2:83:80:00:97:d6:8c:cc:97:83:
cb:54:1d:7e:e1:b9:78:99:65:50:bb:d0:d3:ca:96:68:09:70:
0d:d4:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:46 2025 by rpki-client on console.sobornost.net