Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e70a830f-5023-33c1-8c1b-f2e58d834a72.roa
File: e70a830f-5023-33c1-8c1b-f2e58d834a72.roa (raw, json)
Hash identifier: 55/awgU868cAX3xs32LsauzFmMaQSr54ditjiVnL7/Y=
Subject key identifier: E1:76:97:5C:44:40:CB:32:CC:D1:ED:9C:D7:5E:40:10:31:6E:BD:4D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5811230C7144C4CBF231280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e70a830f-5023-33c1-8c1b-f2e58d834a72.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.220.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:12:30:c7:14:4c:4c:bf:23:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=039bdbbc-a009-4cbf-a6f0-910db80e4057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:1c:67:44:44:8e:2b:67:fc:33:3b:bf:d1:
d5:5b:c0:35:fd:0d:0f:f9:ed:89:94:0f:2e:1b:bc:
57:a3:4e:e9:77:7c:a5:c4:75:03:63:c7:98:15:b1:
2a:1b:fc:1a:0c:b3:76:62:2b:cc:09:9d:ea:88:0f:
d8:11:c1:be:b3:bf:17:5f:af:a6:18:16:3d:f3:dd:
48:50:64:d5:96:44:18:76:f9:65:36:8f:ef:2f:fc:
e6:cb:6a:21:18:86:33:b2:fe:47:04:b3:6b:a3:eb:
1b:3c:74:80:01:96:45:1d:31:2f:38:f3:23:0e:72:
75:2d:9e:38:22:aa:bd:ca:0a:98:8c:16:07:96:49:
5a:30:19:5f:26:66:02:f4:38:40:2e:9c:89:f0:03:
a4:ac:51:0c:cd:0a:a3:21:62:75:8e:59:65:b3:15:
2a:64:76:27:a0:1c:60:7e:17:25:fc:3a:6c:22:c2:
4f:4a:64:06:30:11:80:3e:7a:40:49:63:7e:67:12:
96:c9:a1:23:60:54:5a:bf:22:04:bd:70:b5:7e:1b:
5c:22:26:b7:a1:9c:e9:cb:2a:f5:d8:b7:c5:b9:ef:
a6:62:b1:01:30:2c:29:2f:a4:a3:da:38:d4:e3:11:
45:d5:39:93:d0:da:32:e7:29:e1:b0:02:1f:ee:d5:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:76:97:5C:44:40:CB:32:CC:D1:ED:9C:D7:5E:40:10:31:6E:BD:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e70a830f-5023-33c1-8c1b-f2e58d834a72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:c7:40:0c:1c:6f:f4:b3:f7:e4:8a:f7:f6:4a:1b:48:ff:9f:
f2:e7:79:90:2e:ca:8d:83:f1:5a:52:6b:d2:cc:ce:42:3c:7b:
69:a8:6f:56:32:61:5e:45:3d:22:e7:60:03:f1:93:e8:d6:be:
23:f6:40:8e:8b:70:a4:63:b2:d4:f6:78:1a:bd:e6:95:86:82:
16:d6:bc:28:31:fd:5a:09:a4:64:91:ad:2c:21:87:91:f1:0b:
ef:24:c1:32:04:48:ee:af:62:42:e6:9e:c1:05:a1:6b:b2:33:
8a:90:84:e8:8e:8e:fb:5a:1f:39:73:84:20:ba:6a:07:ad:40:
67:47:b1:08:08:7d:5a:a8:87:5f:20:24:c4:b5:65:ef:35:97:
9b:86:cf:2a:3a:03:25:ab:e8:d5:31:5e:c8:2e:23:7b:30:5b:
48:42:7f:de:f1:a8:d2:fe:aa:6d:ab:03:00:0b:0e:fd:72:56:
15:19:0f:b0:4a:f8:44:5d:a3:c7:7e:b9:76:80:09:56:d6:bc:
62:60:70:55:f5:5e:ce:1d:01:1d:af:e0:90:d9:13:a9:3f:b3:
66:98:5f:1a:d8:3a:b8:ea:43:e9:59:14:d0:e4:12:50:ca:3a:
85:16:18:84:74:29:d8:85:ae:e7:20:7c:db:45:77:fb:7a:9f:
04:05:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:59 2025 by rpki-client on console.sobornost.net