Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa
File: c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa (raw, json)
Hash identifier: lcZqD4pFvGA1tmS/bAWn2Rl68p13DFvUIWva4nVOqK8=
Subject key identifier: F7:10:D3:AB:D8:0B:7C:4E:4B:9E:02:5C:14:41:AB:81:44:72:E9:87
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5816A09D64757B87EA55720
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.129.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6a:09:d6:47:57:b8:7e:a5:57:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=99dcf9d7-b60e-4247-acbc-21a90f68c28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:cc:67:df:94:3c:2a:47:cb:05:9c:d6:62:
86:63:f1:74:ed:7a:c1:c7:75:58:37:40:d6:66:90:
ac:63:18:44:49:91:b0:24:e6:58:e3:df:03:a0:00:
db:42:1b:13:e8:41:bf:8c:73:8c:f1:0d:fd:29:c9:
70:07:59:a2:a1:38:33:2f:9b:16:ee:74:f8:33:aa:
42:6b:d2:cc:23:e5:06:e4:89:5f:19:cb:ab:c7:74:
57:1e:c2:3d:78:d9:08:4a:d6:b7:96:ef:46:a7:e8:
d9:77:09:0a:7d:68:57:72:51:f2:25:d7:64:e9:a4:
85:f7:19:0e:2e:3b:d5:9f:8b:33:e5:b9:57:f5:7e:
47:02:d8:ff:06:9f:80:94:7e:75:12:c7:2b:e3:81:
d5:04:1c:18:02:ad:08:b1:a6:76:d9:2c:3c:dc:84:
17:49:6d:d2:c7:57:af:da:7d:12:40:cd:cb:74:2c:
05:7a:ce:91:79:21:96:80:da:fc:d8:57:02:48:b0:
d1:89:62:3f:80:3b:cf:62:f7:d7:22:d0:6c:4c:c5:
4f:5d:6f:2b:a5:12:c9:de:85:fa:a5:bd:21:e2:80:
62:51:fd:b2:5b:64:1c:2e:08:42:aa:04:fa:42:4e:
2c:d3:e2:52:b3:43:83:f1:ba:5c:0c:40:cc:82:b3:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:10:D3:AB:D8:0B:7C:4E:4B:9E:02:5C:14:41:AB:81:44:72:E9:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:7b:4e:88:6c:96:73:52:ec:e1:58:8c:a0:97:a7:a9:f6:87:
ef:42:a1:66:e6:43:93:30:6b:e9:d7:a5:84:0f:d9:4b:e8:ff:
b0:5b:4b:2e:57:af:1d:5d:0d:f7:53:e4:fd:74:c6:cf:80:fc:
72:56:96:04:dd:46:8f:89:fa:1a:ff:e8:cb:3b:c1:95:ae:81:
18:cc:7b:cf:aa:5a:25:b6:0b:d8:9e:a5:d9:3e:e8:6e:40:24:
87:ba:56:18:c0:02:5a:b1:58:53:2a:a8:7f:9f:21:ad:f5:94:
5e:ff:c8:3d:fc:4d:94:f6:39:59:e6:7c:d2:59:28:64:c4:99:
57:36:9a:36:97:a8:81:2b:31:20:30:5a:72:da:7c:e3:9c:a3:
d8:f8:56:6e:c8:d3:dd:7c:1b:38:01:37:9a:21:21:3c:42:d2:
b8:96:06:2b:16:32:03:3b:7b:aa:05:48:a5:70:e1:f8:69:e8:
e5:eb:a3:42:72:6f:8b:4b:5a:e4:38:dc:62:b8:82:5b:27:ba:
c8:00:cc:68:22:30:2a:a5:83:b0:6a:0a:c7:34:c7:3a:81:b5:
63:02:49:98:da:13:0e:67:46:77:ef:a9:c3:2a:ed:5d:2e:31:
66:ca:c5:21:5e:4b:92:5e:c4:1a:90:c6:80:ed:9c:aa:a6:72:
bb:29:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:57 2025 by rpki-client on console.sobornost.net