Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa
File: be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa (raw, json)
Hash identifier: FlSrhB0SL5QLNz+HnSIEFMZZieaLYTGSgQqRAfdLGeU=
Subject key identifier: D6:46:49:6B:53:79:61:6A:48:AA:33:2B:74:71:87:83:E0:33:4B:C8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581FB1966967C1FF50AC440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.170.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:fb:19:66:96:7c:1f:f5:0a:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e65d3194-7a3d-4a6b-bb24-8826ad581549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:f2:2d:04:85:b6:d3:21:f7:f1:68:52:16:
62:81:30:5d:0f:55:d1:71:fb:4f:09:1d:75:b1:06:
46:0d:55:88:47:e9:cb:21:7c:81:6e:34:55:b5:83:
9f:11:63:74:d3:42:43:09:46:9c:b6:54:29:6c:b3:
2a:50:34:0e:32:e9:63:ac:ce:9f:90:80:6b:52:63:
01:b8:4e:e0:b0:d5:88:ab:dd:9a:67:5c:d2:3b:73:
00:78:c1:15:7f:55:f0:15:aa:ed:77:91:16:21:18:
f0:1b:1e:0a:ed:ca:93:d6:91:3b:51:c1:a3:2d:65:
1e:0f:8c:e7:11:1c:d1:7e:8e:2c:74:74:88:09:6f:
dd:2f:ff:e3:5f:b5:20:a8:40:dd:bd:c9:ba:99:64:
9f:fd:e1:c2:5e:7b:0b:55:60:73:b3:b5:b3:8d:ae:
b5:c9:85:38:14:e9:ee:40:0d:41:f6:d8:1a:75:92:
a2:37:e6:6e:36:7f:5e:94:e2:6c:81:66:d9:4c:39:
11:c4:10:d7:1f:b9:1e:09:45:29:0b:49:3b:01:af:
c4:ab:bd:d5:c5:d4:72:14:76:46:6f:e0:80:41:7d:
57:2c:96:05:29:01:42:bb:ba:bb:e1:68:da:40:da:
eb:40:23:77:38:b6:55:0f:3f:e6:f7:13:b2:44:c1:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:46:49:6B:53:79:61:6A:48:AA:33:2B:74:71:87:83:E0:33:4B:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:47:e4:79:6f:52:93:bf:f5:65:96:5a:47:a2:82:39:a4:5e:
fb:50:18:b7:ea:13:ef:55:10:68:5f:0d:41:19:67:29:c6:3b:
6c:7c:2c:2f:4c:23:46:75:08:e5:e9:1b:33:0f:ab:e6:dc:52:
2d:1b:bf:6a:b8:ca:3e:78:25:14:48:a4:ef:c3:f9:0d:53:98:
81:d7:49:9e:12:d4:13:9b:f6:96:91:d8:d7:3e:fc:d9:39:29:
cb:13:0f:e7:2c:bd:64:65:ad:e1:7c:c7:47:27:62:3a:0b:ff:
52:d6:67:6a:87:fb:69:eb:9b:34:88:aa:85:2e:45:ba:77:93:
80:79:b4:3e:07:e1:de:8d:56:57:2a:41:dc:99:ea:7f:89:53:
a0:b7:6e:75:d6:15:2f:95:37:c0:91:3c:9d:27:0b:96:96:c6:
6f:1d:1c:36:e3:00:62:ce:c8:17:85:d1:80:65:bb:b6:d8:76:
3a:33:56:99:bb:3a:44:8f:79:ff:1a:16:03:9c:2b:1b:ac:f8:
25:1c:06:a9:cc:20:ff:72:82:45:f7:63:fa:68:f7:af:15:80:
df:32:65:f4:ae:bd:e8:a1:48:27:14:84:14:63:25:17:40:15:
4c:cc:cd:6c:a9:4a:ff:40:53:ca:65:23:ab:fa:48:95:4d:09:
2e:17:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:56 2025 by rpki-client on console.sobornost.net