Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa
File: 7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa (raw, json)
Hash identifier: emoMNEbrZrXaDqlqiB8nxjc6ZAXa+QM9ywYhL9ExwYI=
Subject key identifier: C6:E2:D8:A2:6A:E4:EB:95:32:41:4E:8A:64:30:42:5A:DA:E7:41:4A
Certificate issuer: /CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
Certificate serial: 010D0C9F43285848CC7B89037B941FB5D5C20EC0
Authority key identifier: 78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 27520
IP address blocks: 23.189.8.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:89:03:7b:94:1f:b5:d5:c2:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=64e02613-88fb-4650-b50a-9549beef37c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:87:91:9f:e2:be:85:7e:89:e2:de:e5:80:
e9:16:ce:ec:00:76:16:fd:a9:4d:70:df:79:b9:5a:
12:24:9b:a5:6e:03:ba:b1:26:e0:ea:26:0a:88:6c:
10:46:92:6c:24:e1:69:43:22:20:51:48:05:d3:e5:
95:43:d7:8e:5e:7f:5e:0e:7b:f6:0d:32:28:c5:24:
6c:3e:85:4e:8c:ae:ec:48:4c:5b:59:3d:27:6b:24:
35:08:cb:0f:1c:c1:5a:5e:fe:bb:97:fe:ab:b9:a6:
75:e4:b0:b5:bb:68:5d:24:e8:77:76:72:40:5b:85:
e5:70:65:e5:72:53:51:0b:4d:50:a5:0a:58:fd:f1:
38:8e:4d:9b:06:e3:92:ef:c3:99:8d:59:28:d3:14:
93:13:4c:23:57:67:be:88:0e:69:54:07:67:aa:c4:
77:1e:94:22:66:d4:e0:87:3e:d0:bd:fc:8b:ed:25:
d1:c8:da:fa:c4:11:d8:f9:82:f5:77:49:b1:ea:2b:
90:56:90:53:22:a2:31:ae:65:39:54:4f:b2:7c:d9:
1a:b3:0a:4a:31:fe:19:5b:ac:80:24:f7:e3:24:dc:
14:b2:6f:96:4d:ed:78:4a:da:6c:0c:46:68:3a:6b:
5e:dd:08:dd:e8:9a:b8:92:6e:ed:53:cc:27:31:69:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E2:D8:A2:6A:E4:EB:95:32:41:4E:8A:64:30:42:5A:DA:E7:41:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.crl
X509v3 Authority Key Identifier:
keyid:78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:3b:b9:43:e2:9e:ac:7a:c8:9f:25:f1:f3:df:dd:33:86:01:
cc:0b:56:26:63:1b:3e:9a:a1:07:90:48:e7:c6:55:0e:b7:14:
ee:fc:dc:72:7c:84:16:be:4b:cc:a1:e9:ca:61:66:ef:c3:d3:
4e:a2:dd:5b:78:b4:29:9e:c8:2e:4a:a8:9f:a4:e3:b5:e1:f2:
6c:66:fc:88:e8:46:90:f6:b2:d4:f7:7e:4d:86:47:ba:86:e0:
b2:26:94:45:c0:39:fd:1c:d4:d2:8a:b1:c7:f1:a4:d6:74:74:
ac:ab:46:62:03:47:df:53:56:af:f4:bc:46:2e:21:f6:3b:8c:
9d:85:03:5c:c7:b3:61:c1:b3:8e:59:db:20:7a:0c:4a:56:a0:
fa:28:42:2c:4a:78:bb:32:82:26:0a:58:71:50:0a:d3:2c:55:
94:fd:ea:b8:4b:bd:73:bf:2d:13:2f:16:99:1d:d5:b3:36:68:
cf:4d:20:88:7a:d7:da:d2:0d:f5:b9:38:6d:0b:d1:44:df:35:
88:9e:90:5f:bf:54:75:d3:76:63:eb:27:6b:4b:16:92:a4:63:
5c:2a:45:6e:8a:9d:b0:b1:05:3e:d7:ad:7a:f0:08:ff:78:47:
d4:07:df:50:b7:43:11:a0:0b:f7:98:f3:72:49:63:c3:2e:73:
60:d3:df:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:54 2025 by rpki-client on console.sobornost.net