Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa
File: dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa (raw, json)
Hash identifier: 90WMWsiM8eqnPEQLcwYUBmF/j+0ODgxxyVyjqF/kClY=
Subject key identifier: A1:AB:F3:A4:2B:4E:D4:7D:C1:E5:E5:07:95:5B:A6:10:40:3F:83:F4
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581A1668C36641F43D92000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.201.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:a1:66:8c:36:64:1f:43:d9:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=bde74aba-18be-4c96-a88b-53ab4db6b047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:98:86:45:9e:ad:cb:19:b2:fa:49:80:f0:
b8:b8:7f:c5:a8:56:6a:6d:64:38:96:21:ee:a6:76:
a2:1b:25:05:e6:b0:39:ac:e7:de:30:ec:17:d6:85:
ff:c5:40:03:f0:32:a9:18:37:4c:ac:ce:46:7b:9a:
5c:34:47:68:16:d5:5c:1f:89:82:c2:a0:4f:95:f6:
ef:08:ae:79:57:de:bb:ad:93:b2:c4:6d:53:4f:96:
bb:fa:2f:80:4f:80:9d:af:b2:ce:1b:1a:da:41:7a:
54:b4:ca:4e:d5:fa:51:b1:da:79:a3:eb:a4:33:78:
6a:72:66:f4:ee:d7:2c:6b:a9:a2:4e:fc:7e:7d:43:
3a:f7:30:27:90:de:02:8b:bd:a3:a3:31:36:d8:13:
5f:63:df:9c:08:ad:48:fc:50:41:c3:cb:e9:ce:d5:
2c:e2:b3:4a:33:87:a0:73:d0:e9:d8:9c:3d:8e:58:
13:ac:2a:6f:ff:18:b0:80:9c:8a:ff:32:64:81:ab:
ad:12:56:41:9e:6e:94:05:33:12:d5:fd:ae:04:c0:
ea:5b:df:50:27:51:1f:2b:d9:fb:71:f1:22:99:a7:
0b:01:a1:7c:71:7e:c5:b2:87:3d:30:32:f9:b1:fa:
94:b1:2d:82:5c:1f:37:c2:6c:e7:66:78:2e:7b:4a:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AB:F3:A4:2B:4E:D4:7D:C1:E5:E5:07:95:5B:A6:10:40:3F:83:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd1dba0e-f641-3e4b-a15f-856b852cf2ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:66:17:a6:5d:b6:40:6f:89:1a:0f:c9:f7:2f:d2:34:a9:8d:
15:05:cd:be:1f:01:7d:12:c8:e5:3c:ee:bf:6f:7c:85:04:d2:
48:d1:2e:e0:ba:b4:42:97:15:a8:0a:c4:c2:84:fd:71:de:32:
a0:7b:17:87:ef:03:fd:4a:ae:d0:4d:69:51:8c:d6:69:fd:1d:
16:d4:09:02:c1:96:47:d8:bc:f8:93:11:c5:ec:62:5a:39:59:
2c:c2:4b:c8:45:f4:b0:92:c2:3f:29:35:cb:21:8c:e5:be:b3:
1d:c1:24:5d:06:49:de:63:43:27:b0:e0:17:72:1b:b4:5b:62:
9c:74:51:2e:57:dc:8e:d8:94:e6:3e:f5:ab:75:93:3d:14:37:
47:fd:50:df:45:79:fe:d5:e9:8e:f4:3c:07:15:a1:65:58:bc:
a6:d1:a4:27:94:33:cc:d6:24:78:07:53:b6:2d:62:46:48:7c:
12:1a:6f:e8:28:1a:d9:88:64:18:1f:bd:a9:c6:cd:e0:03:04:
84:26:e6:96:23:0b:41:7b:36:61:d3:cd:43:52:48:73:53:78:
6e:ca:98:a0:23:94:ae:61:d8:f5:55:b6:bc:43:02:c2:04:d2:
ac:5a:c5:86:f0:fe:36:ee:d4:0a:fb:5b:b5:95:0e:ba:0c:ef:
8d:8c:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:58 2025 by rpki-client on console.sobornost.net