Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f504332-53f7-383e-a90d-50204e1c8037.roa
File: 7f504332-53f7-383e-a90d-50204e1c8037.roa (raw, json)
Hash identifier: 8guGehGaySa/Pls1lIPezYzvsjNcJ4y2PYRAEo9NO6E=
Subject key identifier: BE:76:AE:2E:12:6D:02:94:74:FE:0B:BC:0D:FD:59:66:7B:2C:9F:AA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58102DAE4E8692B2F3D4700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f504332-53f7-383e-a90d-50204e1c8037.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.19.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:02:da:e4:e8:69:2b:2f:3d:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=cd55bf65-9ebd-473a-98c4-976da6961db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:90:a0:a4:bc:28:8b:3d:8a:99:c8:23:39:
1d:25:4a:28:0c:af:66:8c:45:48:8c:0a:8c:d0:4d:
64:45:19:48:c3:b3:dd:dc:ae:12:86:64:86:24:f4:
97:86:84:3d:e7:0e:bd:1e:42:8a:42:e8:d8:ba:46:
20:fe:d6:fd:02:a6:f2:6e:f9:7f:9e:50:6a:c3:43:
9f:fa:f5:d1:01:11:d0:2d:14:78:96:1b:0f:b7:e5:
fa:ce:f1:6b:14:6a:82:1b:92:b8:23:d1:38:07:68:
be:70:67:1d:25:e1:eb:08:af:7f:ca:69:5c:b6:bc:
87:c1:4f:89:0c:9f:f8:21:4b:e9:85:5e:47:e9:cf:
60:56:2b:8d:d1:db:b5:90:3f:fd:ed:ab:01:76:82:
a0:7b:72:94:8b:4b:e1:cb:c4:cd:53:b5:ec:77:af:
31:8c:df:aa:ba:1c:1a:1a:0b:f9:4b:41:2e:a1:04:
be:3c:aa:56:ba:b8:92:cb:a3:bb:d5:ae:3a:37:c6:
fb:8c:df:5d:b8:e5:ae:c6:6f:b9:6f:ba:b7:c5:68:
3e:3d:55:d0:8f:83:f6:12:25:3f:80:db:84:0b:42:
10:1c:d3:ab:d9:ca:2c:71:64:d2:7c:b5:9c:ca:ee:
8b:55:6f:be:ac:a8:b2:3c:d9:5f:dd:68:09:e5:1c:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:AE:2E:12:6D:02:94:74:FE:0B:BC:0D:FD:59:66:7B:2C:9F:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f504332-53f7-383e-a90d-50204e1c8037.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:01:31:b1:20:63:0d:50:13:a6:da:3b:8b:e4:06:57:dd:5d:
41:5c:c5:3a:93:5e:2e:bf:aa:81:8d:9b:cb:0d:c9:6c:b1:9a:
c0:ed:f6:fa:9c:7d:dc:93:ad:6e:33:0c:d4:57:2e:2f:42:f3:
56:b7:f2:d5:55:21:24:b2:8a:08:02:ea:a9:51:29:5b:bc:6e:
a6:4c:c0:11:0e:af:2b:a3:68:cd:b7:47:1b:e2:05:26:74:2a:
b3:eb:9c:d6:ba:a1:39:23:3d:7b:a4:e8:cc:d3:b3:01:49:d7:
8d:f5:1a:9f:57:62:8d:1b:42:99:21:98:06:55:fa:1f:40:31:
3e:0a:6e:dc:51:82:a4:b8:04:28:13:45:4b:2f:76:cf:ee:59:
57:fa:6a:95:9d:b8:92:04:58:b1:9a:9d:63:53:c6:83:73:0e:
0b:83:55:01:30:ef:ca:2d:9e:d7:a9:8f:21:0e:46:fb:a2:fd:
63:29:e2:72:cb:07:3c:ee:c0:34:95:44:a9:be:06:6a:62:29:
fe:6d:64:ae:de:4b:87:23:d7:ed:f3:c3:30:21:a3:80:64:ec:
58:cc:2f:8e:7a:81:eb:b4:d6:c8:47:45:0c:0e:ed:97:5b:45:
af:d4:8f:af:61:a7:1a:55:de:87:f6:df:44:73:ba:e0:6a:18:
30:a0:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:47 2025 by rpki-client on console.sobornost.net