Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa
File: cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa (raw, json)
Hash identifier: 8YusDpfNkr7d1I2hJqnuIh+H7p2d3RVg2uLNHTRJ7Ns=
Subject key identifier: C9:97:AA:D1:DE:51:23:B4:63:E4:DF:A7:01:A6:FC:A6:37:14:DB:EA
Certificate issuer: /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial: 010D0C9F432858495D896B17D7A9A977A34CEB00
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 46320
IP address blocks: 103.70.20.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:6b:17:d7:a9:a9:77:a3:4c:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=b7c9630f-01d3-44a8-acb4-6979d14b918a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:fd:94:9e:b2:10:af:e7:6a:84:25:6d:ce:
08:d0:79:f8:5d:96:b8:b3:88:c5:1f:8d:67:c3:91:
9f:f6:43:24:b8:3d:10:96:47:bb:c3:ff:34:77:1b:
e5:02:b2:2f:21:7c:10:e6:c6:7b:d2:67:1b:48:46:
dc:95:6f:b0:5f:1c:a4:35:12:4b:16:61:97:d8:63:
f2:5a:77:cb:9b:83:75:46:3e:b4:04:2c:87:9c:0b:
13:7b:6a:07:50:ff:cc:e8:98:01:8d:49:82:cc:18:
65:86:99:9c:49:2a:f7:e0:2a:66:d3:71:90:39:3c:
ca:b0:a1:83:50:f6:03:59:40:2b:f7:d8:69:d5:d7:
43:2f:da:4b:60:88:07:82:16:9a:ac:fa:47:9f:a2:
2d:1c:5f:f4:2e:75:2b:e6:af:a3:2f:0a:77:68:56:
93:57:13:c8:c6:9d:9a:b7:23:ae:8a:4a:d0:fa:6f:
00:6d:c5:5b:d7:cf:41:59:34:22:54:a8:86:c2:c2:
24:7f:fb:1a:e4:dc:e2:03:c9:72:a5:41:51:52:4f:
22:55:51:af:d0:07:fc:6c:66:fe:56:19:5e:2f:47:
8d:60:c1:d7:c3:c9:28:82:fd:91:2d:cf:8e:62:77:
17:83:45:65:ca:49:47:f7:e3:2f:9e:58:5f:29:18:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:AA:D1:DE:51:23:B4:63:E4:DF:A7:01:A6:FC:A6:37:14:DB:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
X509v3 Authority Key Identifier:
keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
sbgp-ipAddrBlock: critical
IPv4:
103.70.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:0e:8c:62:6d:46:ef:48:dd:e8:2f:9b:3d:d0:8b:a9:91:b4:
64:a7:ca:6a:5a:28:58:8b:21:17:d2:4a:e5:05:af:9c:0a:a8:
4e:a2:e9:0f:8a:dc:c4:49:b5:c3:62:04:e1:c8:54:33:d9:c1:
43:5d:76:cc:44:d4:b8:60:df:fa:3f:82:66:fb:a0:33:53:bc:
0d:70:ce:95:e2:55:4e:83:c6:74:fd:a4:fe:30:e5:e0:f3:ac:
fb:98:f6:81:3f:65:7f:5a:79:19:b0:4c:41:a3:5d:35:03:e0:
9c:b1:40:b4:41:71:cb:7c:e8:9b:4a:ce:d7:2d:1f:dc:db:8a:
9c:6d:8c:f4:d8:82:5d:e0:47:4c:ae:84:93:05:82:24:48:ce:
74:51:8c:51:af:87:b5:74:3c:f4:bf:a0:b1:4f:47:32:3c:25:
04:ee:e6:26:81:c4:e0:ac:89:13:2c:f0:d9:53:22:8c:98:3d:
6f:a7:4b:70:e9:3a:fb:a0:96:b5:c6:56:01:3d:b3:3e:66:9a:
b7:7d:fa:c3:2f:ac:08:d4:5f:62:50:44:a2:01:74:4a:1a:88:
63:1d:b2:94:e4:2d:4a:52:e8:72:4c:86:26:f0:6b:87:c8:77:
23:f1:97:3a:20:ab:7c:c9:bb:4f:96:18:b8:34:e4:5c:5d:60:
35:5f:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:01 2025 by rpki-client on console.sobornost.net