Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa
File: 56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa (raw, json)
Hash identifier: 3rGhNGfw928rzf/EUdlaVIJRJ1KiEZmiw1krlj0V4TI=
Subject key identifier: 35:C3:4C:37:04:F1:6D:31:32:C7:5B:B4:5D:B0:8D:E6:66:32:DD:51
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584960541AEFA143AF471C196B40
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa
Signing time: Tue 01 Apr 2025 01:00:47 +0000
ROA not before: Tue 01 Apr 2025 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:00:47 +0000
asID: 212238
IP address blocks: 98.159.40.128/25 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:54:1a:ef:a1:43:af:47:1c:19:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Apr 1 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=3cf306ad-18c3-4303-9b24-1bd70403a2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:53:c2:d0:34:04:e1:26:bd:0f:de:98:60:
c7:29:3a:ee:5b:65:0b:b7:c2:10:be:d9:de:58:3f:
6f:3e:6f:1e:dd:bc:e7:7c:71:7d:9b:77:68:52:b6:
ef:50:50:60:e4:9a:ff:ae:00:a3:fa:3e:72:0e:54:
6d:b3:ae:5f:5a:9a:e3:91:fe:60:bf:4f:da:25:0e:
67:94:cb:4d:60:9e:f4:18:a2:a0:a5:c2:b3:4a:bd:
e0:cc:bd:62:6f:62:49:1b:16:20:dd:78:1f:57:b9:
29:02:66:3b:f6:bf:62:4b:f6:02:24:c3:ce:f7:80:
4e:dd:0f:f9:65:91:e0:93:b2:aa:b1:b5:92:b8:6a:
97:d8:4f:a3:14:b9:72:6f:80:6f:e9:13:7a:a5:9b:
0a:f1:1e:00:11:2e:ca:e5:70:a2:2c:82:aa:8b:16:
99:7f:4a:b0:3b:b9:b8:6c:59:f4:35:ee:68:6f:df:
7e:77:e3:55:bc:72:71:d2:e1:6b:ad:0c:af:bc:bd:
6f:fa:71:55:d2:81:b0:82:2e:ab:b6:df:d1:da:d9:
20:d3:ae:2a:5b:5e:e7:29:00:32:6e:62:51:ad:7d:
d8:16:38:a3:54:79:2b:74:e4:ad:48:30:68:15:62:
0f:4d:2a:37:ed:82:95:95:b2:31:79:f8:e3:8f:7d:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:4C:37:04:F1:6D:31:32:C7:5B:B4:5D:B0:8D:E6:66:32:DD:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/56e2cb4f-937e-3ff1-9b01-9ee61f14e1ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.40.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:ba:5a:23:32:87:7e:4a:26:45:5f:02:f2:3f:56:c0:d9:d6:
ec:88:93:01:4e:92:85:ed:a2:01:93:be:36:04:b8:7e:89:ee:
cb:2f:a3:c6:91:ea:a6:aa:6f:0d:46:76:f0:34:69:f3:82:33:
c4:50:db:45:31:c8:f0:de:a4:ae:5a:2b:3c:f4:f1:e8:83:60:
50:d7:2f:39:33:47:69:30:4d:d4:b7:8c:6c:63:a8:ea:fc:1c:
fb:65:38:4d:92:11:78:74:b6:f0:81:be:7c:19:c3:19:c0:3f:
85:35:39:60:89:3a:1e:04:74:0c:bc:82:c0:65:34:7d:29:d9:
cd:ba:67:33:71:72:03:b6:c0:36:20:34:18:1d:a3:73:d0:b4:
03:36:f2:90:6f:3c:d4:02:55:c9:fc:50:b3:f4:0e:31:09:a7:
0e:dc:b7:d6:5d:45:ef:82:7c:64:68:b8:32:46:70:22:44:c1:
5e:6f:70:0e:bc:11:13:f4:7d:68:c3:96:1a:0d:26:74:d7:0c:
98:ee:e5:7a:e7:38:de:e2:b6:77:67:33:c0:b0:66:26:57:b0:
b8:90:24:f9:6f:6d:bc:95:d9:3a:0d:fa:14:27:18:e8:2e:c7:
c5:84:96:ef:12:8e:fc:61:15:a9:9a:09:10:6e:07:93:cc:e0:
ed:e4:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:54 2025 by rpki-client on console.sobornost.net