Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa
File: 0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa (raw, json)
Hash identifier: XhwytWtOY10+8lvN2H3sCcRPvmfiBaJ9hbNkZrGKUwA=
Subject key identifier: 1A:9C:B7:AF:0B:CD:7F:F0:28:F2:43:BC:F2:40:7C:06:D6:E9:CD:98
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584960541B020C50713979F47570
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa
Signing time: Tue 01 Apr 2025 01:00:47 +0000
ROA not before: Tue 01 Apr 2025 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:00:47 +0000
asID: 212238
IP address blocks: 173.239.200.0/25 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:54:1b:02:0c:50:71:39:79:f4:75:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Apr 1 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=2b0bc66a-4490-4cbe-8f73-25ac10b09290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:77:55:a7:50:09:cd:be:22:2d:a7:da:5e:
39:b6:84:49:73:3d:d8:f1:06:d2:a4:08:ed:f1:ba:
34:30:cd:2b:b1:00:04:fd:7a:10:a5:6d:44:fb:aa:
a9:e7:86:39:42:cc:35:f3:37:70:3e:e2:91:5f:08:
01:bd:44:b0:f1:08:ca:1c:92:73:af:ab:4b:48:f3:
27:a3:01:2d:c1:db:87:ed:b7:9f:bd:9b:69:98:5c:
22:95:1b:27:69:63:3a:9c:7a:59:78:99:46:80:72:
19:86:63:85:1d:e9:42:c2:7b:73:79:4d:83:9b:94:
6d:7a:11:7b:e4:bd:01:05:de:6a:a3:d0:ea:9b:07:
00:f5:7b:70:1a:f7:09:b0:e1:9b:f7:67:c3:f3:01:
4e:58:08:0c:da:e4:28:5a:d2:c6:99:ec:be:85:26:
6b:f4:a1:fd:ae:9f:bf:fd:2d:70:e9:eb:21:31:9e:
44:0c:53:a7:4b:54:f3:c8:9f:5b:fc:53:0b:be:ed:
05:30:23:c1:8f:68:f5:a2:da:79:5a:63:ce:02:d2:
40:89:b5:07:83:29:5f:e9:9d:36:34:21:44:d1:cb:
b4:73:58:85:92:33:77:41:c6:89:fe:5d:cd:90:25:
e5:6f:b1:e8:25:2c:9d:62:93:6c:39:5a:58:8e:69:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:B7:AF:0B:CD:7F:F0:28:F2:43:BC:F2:40:7C:06:D6:E9:CD:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.200.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:8b:aa:45:65:59:60:22:f5:e8:f4:21:78:87:20:77:5c:df:
01:28:4e:ad:02:90:e6:6b:8c:e0:21:8a:9b:88:32:fd:91:bc:
a4:ba:89:31:75:0f:9f:76:7a:20:30:b9:d2:2d:7c:eb:7a:3d:
5a:ba:39:54:72:c1:a8:2c:4b:70:81:14:0d:3b:fd:89:c9:32:
47:97:d1:8b:34:26:46:b7:7f:f7:2d:1a:27:4c:56:19:1f:43:
ce:fb:91:32:5e:95:a9:c8:00:9b:76:52:57:48:dc:07:e3:0a:
8f:d1:0d:15:a0:f1:4a:16:86:ee:6c:a8:fb:35:21:a6:03:e5:
ea:be:e7:76:88:b2:2a:71:16:a7:7d:f1:b7:ad:20:53:16:2b:
5e:12:04:f4:ca:86:e9:ab:3a:25:8e:06:81:34:02:34:33:ed:
de:8c:98:f5:1f:f9:7d:9f:97:f2:c0:bc:f3:da:22:6c:36:94:
4a:11:f9:91:68:3d:f6:23:16:47:10:f5:49:cb:d7:9b:a7:13:
f8:54:6d:e7:be:1f:2d:7e:61:a1:8c:90:b2:98:5f:6e:14:1c:
dc:e4:67:dc:61:43:fa:04:07:b8:ff:0d:8a:dd:24:ac:78:fb:
13:c8:cb:06:aa:90:ec:fa:24:c7:a1:57:80:a9:e3:2a:27:cb:
25:ea:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:54 2025 by rpki-client on console.sobornost.net