Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8c33010-0aec-3900-8d8a-ad9737f31540.roa
File: e8c33010-0aec-3900-8d8a-ad9737f31540.roa (raw, json)
Hash identifier: SRwelXHKbieIXSNXLcvFR5HMhM0X++Eu8aTVRE7dcUM=
Subject key identifier: B9:17:95:3A:52:5D:8A:D7:C3:4D:60:98:21:B6:63:05:3A:69:78:73
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810CA2DAA8D5739705CE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8c33010-0aec-3900-8d8a-ad9737f31540.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.41.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:0c:a2:da:a8:d5:73:97:05:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=8e1795bb-7b13-4af4-8056-4d1e34fd1683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2e:b7:e2:ac:25:40:d1:68:04:3a:32:e2:8a:
11:02:78:50:8e:15:91:a3:cc:2d:b6:92:38:19:b0:
5e:f3:2c:f0:03:57:b8:d6:0c:c7:dc:41:c3:d3:fd:
0b:9d:ef:05:fd:a4:22:b2:10:f0:cf:80:26:b4:6e:
ff:17:1a:0a:20:11:5f:d2:20:df:80:aa:46:17:0f:
bc:c7:10:70:27:40:40:d6:16:ce:9f:c1:64:8f:89:
3b:77:83:29:06:48:21:a4:e3:7f:63:df:6a:b4:40:
9a:65:40:8e:f8:db:87:25:48:d4:fb:29:04:91:46:
9f:ef:99:15:51:2d:d8:b0:18:9e:fe:39:67:4a:0f:
d9:a2:47:98:94:50:d2:62:ba:b3:bb:08:87:2a:99:
85:48:6e:34:2d:c7:33:d0:54:b4:87:82:3f:93:6e:
6e:35:2d:f8:fc:fc:ed:c6:d1:e6:2f:f9:cd:34:3f:
39:b0:0f:d4:d0:b0:c8:e0:7a:50:02:dd:35:0b:c5:
9e:50:78:5a:5f:21:00:92:84:63:e1:b3:ef:a5:9e:
8e:4f:f5:7c:58:54:ea:cb:f4:06:45:69:79:55:fd:
6b:ab:52:43:a5:69:ef:75:c1:bf:7c:54:ab:07:47:
71:1f:e8:2e:1d:96:0a:88:22:fa:66:0b:56:7b:15:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:95:3A:52:5D:8A:D7:C3:4D:60:98:21:B6:63:05:3A:69:78:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8c33010-0aec-3900-8d8a-ad9737f31540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:2c:27:2f:ea:3b:60:1e:60:2a:17:00:6d:93:51:4f:2d:79:
81:a1:33:45:e9:7e:f4:86:37:35:12:4b:66:0e:ca:68:fc:e2:
52:ef:80:0a:6d:84:73:82:89:84:69:01:6b:29:08:1e:23:7c:
5a:e2:43:1e:2c:5b:20:1b:18:27:20:b3:e3:38:42:32:0d:05:
71:1c:ba:fe:7a:da:8e:13:e5:04:15:66:19:ae:07:d1:9f:3f:
66:f7:f2:2f:99:53:30:71:26:7d:7d:45:e4:34:ce:b3:ff:08:
d2:9a:3b:dd:44:2c:3c:4d:c3:38:3e:9f:5c:30:f4:50:b6:e8:
d5:eb:b0:94:4b:64:fb:f3:7f:a6:44:70:20:d1:7a:39:9c:ae:
12:ef:a5:72:23:c8:0b:fa:28:04:b9:74:11:2b:e5:de:8c:28:
fa:fe:c7:db:5e:b3:70:ae:47:ef:6c:08:11:16:8f:5f:1d:93:
15:de:d0:bc:7f:97:36:e7:17:ff:55:0c:15:b0:72:d0:ec:59:
66:55:bc:a8:cb:27:00:7b:f7:a2:2c:b1:a6:7c:eb:f3:a4:6b:
41:48:79:d6:19:07:fd:89:55:98:fb:a9:23:c3:73:48:bd:a3:
93:b0:e1:df:5c:f4:85:1b:e1:13:14:22:d0:42:cf:14:cd:2a:
ba:d3:4a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:59 2025 by rpki-client on console.sobornost.net