Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa
File: b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa (raw, json)
Hash identifier: dgTM1C/AaePR+XvsMEY3Tn2yRLwbbGWmqSoomtrxx8M=
Subject key identifier: B6:69:5E:85:7C:F7:22:35:25:63:CA:1D:15:F8:CA:FF:5A:44:F8:4D
Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial: 010D0C9F4328584913AC1F436399D77217038A80
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 40501
IP address blocks: 216.235.94.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1f:43:63:99:d7:72:17:03:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=ebfa08dc-05d2-47e3-8401-c125f78f6c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:d3:da:c1:14:04:0c:65:0a:71:95:69:e5:
c0:9f:a9:3d:81:01:54:e9:aa:60:ca:80:0b:6e:2d:
5f:c2:e5:76:fe:a8:92:7c:17:d0:45:9b:b0:c8:5a:
f1:e8:87:b0:d2:66:70:1d:2c:40:f7:14:a2:44:ea:
4a:0c:54:2c:f9:ef:f6:5f:91:18:18:9e:8e:96:93:
a1:71:10:b5:45:92:0c:e9:a5:90:ba:bf:01:85:6d:
8c:ec:cd:20:64:f3:ba:cb:b7:2f:27:09:a1:db:f1:
d7:21:9f:48:16:1d:e6:8a:54:2f:f2:24:30:38:7a:
24:e7:2f:f1:6e:b5:2f:ce:e2:a8:90:e9:1f:a7:fa:
fb:45:7d:32:cb:1f:8c:56:00:4f:81:1b:78:b1:bf:
05:8d:58:5f:62:c4:1e:4c:93:fe:4b:18:fb:a5:0b:
29:51:24:06:d2:0a:d4:b3:1e:24:d4:d5:da:37:d6:
d7:d2:a0:b3:5b:6c:36:db:ef:aa:c2:a9:d9:91:fe:
18:1f:31:d2:71:0b:37:3a:d3:50:6f:14:28:f4:d8:
0f:19:cc:05:4e:7c:c7:97:24:b0:0f:7a:dc:c8:bb:
0b:40:9a:e4:f6:34:24:f4:ee:8d:e7:44:3e:67:de:
0a:9e:1e:f9:6d:a3:6e:96:b2:13:1c:9d:35:b3:b4:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:5E:85:7C:F7:22:35:25:63:CA:1D:15:F8:CA:FF:5A:44:F8:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
X509v3 Authority Key Identifier:
keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:ea:4e:e7:c1:a3:db:e4:6c:f2:29:60:fa:05:06:15:4e:e6:
46:2a:ee:cf:89:3d:71:ee:fc:3f:1a:3d:d7:58:27:69:4d:e2:
bb:f1:2d:f1:19:ac:78:9d:9f:23:ea:56:b8:6c:8f:ba:33:ae:
ef:66:af:2a:b4:36:63:a7:ac:6e:a2:07:f1:8b:bf:a1:63:37:
e3:36:fd:9e:9d:0d:10:b5:76:c3:e2:03:d6:f5:8b:53:a3:80:
f6:5a:88:7b:c7:5c:9b:c6:8f:b4:0d:45:96:f4:34:b7:c8:13:
f9:46:35:d6:b0:a5:9d:5d:bb:25:83:52:50:3a:57:c1:3c:38:
7d:f9:d3:5a:7c:62:be:45:e3:b0:f3:52:a5:67:a5:04:c9:d3:
c1:e1:7f:fe:a8:cd:8b:48:5a:c4:b8:1f:4a:fb:5d:99:e5:51:
a2:71:50:35:b2:35:b5:59:19:43:e6:22:76:31:ae:06:8b:36:
d8:c2:ed:3e:d2:83:e4:cb:28:57:45:e7:ae:85:e3:37:51:90:
3f:f8:11:d5:6d:90:5e:71:7b:3e:d2:41:3c:ee:40:55:ca:87:
58:7a:29:53:2c:19:7d:82:08:42:01:06:22:90:3b:ec:f8:9e:
92:e2:d9:65:21:0c:33:44:5d:d7:d1:ab:56:b2:7c:85:63:f0:
c3:42:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:01 2025 by rpki-client on console.sobornost.net