Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02b7c8be-0f06-3a30-bc1b-0859ae83548a.roa
File: 02b7c8be-0f06-3a30-bc1b-0859ae83548a.roa (raw, json)
Hash identifier: nBwWqtLo7ZShLOrS3V6YhmGT3ai5HySzi9s9FnFaFdU=
Subject key identifier: F4:89:B4:7B:5C:F3:2C:D7:8B:63:98:F7:35:5F:87:05:48:24:7C:A2
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F432858495D8961BAA74FBA5A350DF598
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02b7c8be-0f06-3a30-bc1b-0859ae83548a.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 137409
IP address blocks: 2606:f189::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:61:ba:a7:4f:ba:5a:35:0d:f5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=e0fd9173-a2e3-4602-a1b8-14abfd07b3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:70:18:f2:2b:59:bf:c9:cd:17:41:8b:59:
bc:73:31:26:b8:9e:2f:13:aa:34:a7:0b:83:dd:ec:
34:ee:14:79:68:fa:d0:3a:ea:42:d3:fd:ec:ea:55:
9d:9b:bb:bb:1a:8b:ca:de:4a:8c:1e:af:e9:75:00:
f9:e6:07:b3:40:22:23:c8:50:ff:33:5e:80:1c:8c:
16:8c:35:1d:00:a5:04:c4:ad:ce:7f:03:3e:13:8b:
02:cb:37:f8:af:84:25:d3:69:8a:aa:af:19:07:a7:
de:c6:90:7e:d1:16:58:70:7a:29:ad:4b:00:63:d4:
40:36:a3:db:36:da:18:36:70:d8:02:b7:08:79:e8:
f7:50:a5:95:61:c0:50:0a:e5:04:b0:c7:92:d0:e1:
37:7d:0a:3e:60:40:1b:72:10:f5:45:53:4f:a9:1e:
37:65:5c:c2:b2:4b:85:4d:e9:2e:22:4d:27:bc:55:
14:3c:b9:0c:55:54:3d:1a:e8:98:58:f1:d7:94:23:
c5:cf:84:b3:29:96:23:07:23:0b:ff:63:61:87:f6:
01:d8:97:24:1c:86:43:a6:3d:6f:17:3a:61:43:ef:
93:88:8b:11:21:55:9f:c0:40:40:80:17:95:da:57:
cd:bc:b3:d2:92:5e:fe:e6:f8:a7:8d:ec:34:4d:cf:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:B4:7B:5C:F3:2C:D7:8B:63:98:F7:35:5F:87:05:48:24:7C:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02b7c8be-0f06-3a30-bc1b-0859ae83548a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f189::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:06:b5:27:30:4a:ee:fe:ea:0a:4a:60:a6:d7:76:8c:42:22:
7e:eb:e0:36:98:89:08:72:09:90:e9:dc:dc:d4:44:7e:bc:9d:
b1:1b:0c:b6:b4:4e:2a:ae:bd:34:ee:fe:f7:81:55:83:0d:e9:
93:8a:5f:72:73:71:22:55:22:d4:73:23:e9:a8:8d:e0:c2:bf:
dd:74:a5:77:00:11:99:e9:58:04:5b:bb:cc:a7:a6:df:3e:96:
c4:92:78:55:3e:14:85:3c:c4:7f:24:94:b7:3a:3d:7c:12:80:
6a:86:88:a4:06:7b:14:17:01:28:9d:c0:b8:e8:64:98:8d:db:
45:d5:5e:45:5e:f6:52:c2:32:66:35:1f:0f:dc:91:33:24:d8:
8b:2f:67:da:f1:29:b0:b7:6a:d4:01:cb:6c:a1:d2:93:ad:d2:
79:7e:ee:3d:e2:d5:3a:8c:a8:8a:41:14:26:fa:67:72:d4:8e:
be:56:8c:b1:49:19:45:f7:41:b2:64:90:ce:28:ee:50:5b:29:
5d:2d:dc:c0:aa:e4:4e:cb:ad:0e:75:63:3e:5d:04:44:97:d8:
82:ba:e3:57:4f:84:16:5a:7c:a9:b7:77:67:d9:0b:e6:59:14:
bb:58:f2:1e:10:76:9b:ad:9a:3f:08:c1:8f:94:b3:c2:52:0f:
69:c1:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:54 2025 by rpki-client on console.sobornost.net