Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa
File: c49b3b11-b5be-3457-9944-344841e05c2c.roa (raw, json)
Hash identifier: lsrRSFQyXI5Sr+kekXFua66ZC4plJl1jSPh3sGAWETY=
Subject key identifier: 99:FE:73:B0:C5:36:EB:86:7D:C1:03:57:1A:25:16:13:A1:B1:92:55
Certificate issuer: /CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d
Certificate serial: 010D0C9F43285848CDE112DBAD6DD2839F4E3F20
Authority key identifier: A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 396465
IP address blocks: 134.71.255.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:12:db:ad:6d:d2:83:9f:4e:3f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=df5933c1-e765-44d1-a6aa-26a227ea1c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:15:42:04:38:36:c6:40:97:76:79:3e:89:3a:
f0:b5:00:88:40:19:d1:38:a9:0c:d0:4a:0b:5f:f7:
fb:3d:25:bd:99:3e:c1:33:71:3f:c8:f7:4c:2d:d0:
78:46:13:95:b9:22:f3:e1:c7:cd:ae:4d:0f:42:ac:
83:72:d5:a1:0e:ca:e2:e9:3b:03:0b:ce:6c:e6:b1:
61:83:2b:80:04:d5:51:14:93:24:96:ba:e9:12:0b:
25:28:5c:9f:d6:71:e6:d6:07:46:c1:7a:f3:31:48:
1d:29:40:d5:8e:e4:cd:05:34:38:0a:14:30:4e:2d:
31:4a:e0:5d:5d:5c:eb:97:71:4f:75:56:e5:c3:f8:
36:cf:f8:7d:22:14:b5:e2:8e:4a:73:59:49:6b:38:
02:43:ec:2f:cd:59:04:11:b8:6e:b6:d1:1e:b8:5b:
86:2a:cc:be:99:d0:fb:dd:44:02:ca:07:4f:16:7c:
3e:19:ee:e8:4d:56:bc:ca:01:5a:45:81:2a:25:c2:
38:43:9a:86:78:84:a3:13:14:b5:d3:6b:3e:3b:11:
ff:75:41:4a:15:b5:4f:4e:f6:b7:38:4e:4a:2f:8c:
0f:3e:9c:de:6d:5c:9f:dc:3b:db:4f:4b:ae:ae:87:
fc:5e:6f:20:f5:00:ee:3a:6a:6c:90:76:5d:12:ab:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:73:B0:C5:36:EB:86:7D:C1:03:57:1A:25:16:13:A1:B1:92:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl
X509v3 Authority Key Identifier:
keyid:A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer
sbgp-ipAddrBlock: critical
IPv4:
134.71.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:1e:a2:1a:18:10:58:55:b7:b0:a5:b2:3a:82:bb:10:c2:bb:
b7:ed:35:f6:fa:13:22:b3:f7:19:22:6f:e8:6e:0b:5f:f4:4b:
95:df:ca:9a:b9:3e:14:30:f5:37:04:ac:ba:3e:12:da:f6:d7:
05:f2:73:1f:4b:1b:fb:a5:ae:c5:6d:8b:a2:6a:0f:e7:ba:86:
27:3a:f5:7d:db:13:3a:52:2d:6a:bb:b1:a8:59:ce:6a:3a:b8:
5a:43:4a:c0:43:ad:89:96:a3:12:41:e2:4f:53:ce:4a:91:ba:
f3:88:a3:34:7e:5f:3a:eb:d2:e0:2f:cd:d8:0d:6c:88:d9:d7:
8f:9c:9b:97:79:e4:1b:a1:a1:2a:b5:a3:54:3b:bf:6a:ff:84:
f4:79:a9:61:a1:30:a3:4c:0e:74:f2:97:26:11:fe:6c:a8:f2:
f0:c8:b8:3e:33:08:c3:18:67:37:0f:f9:6c:b1:57:5b:6b:24:
95:3e:4b:8d:7d:f7:71:f0:66:d2:00:2b:21:ed:75:d3:2e:e8:
b9:c4:b3:93:ae:8e:12:5f:c3:a8:58:e6:74:96:5a:1b:b4:99:
0a:ef:38:93:02:4d:af:4d:a7:ba:a1:f3:78:ea:b6:3e:85:ef:
0d:19:be:a0:59:47:6b:5f:b7:9f:63:ba:5f:e3:73:1c:6d:03:
83:e9:74:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:54 2025 by rpki-client on console.sobornost.net