Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa
File: 1591f74c-28e6-3beb-a060-29508edef5ad.roa (raw, json)
Hash identifier: kDUYXS5Y3THdwAyGiW6clWuODqmKQxR7Jt1KTLRxKrs=
Subject key identifier: 3C:2F:AA:37:CE:D9:8E:41:21:FA:22:A5:7E:61:89:FF:DB:8C:1C:23
Certificate issuer: /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial: 010D0C9F43285848B1F6302D3B94CA79E4504E80
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 397423
IP address blocks: 23.173.152.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:30:2d:3b:94:ca:79:e4:50:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=b7d61a8c-9523-4b60-88f8-ef7be9215496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:f7:bc:90:b8:ad:6f:31:16:fd:ef:e5:c3:
05:99:d8:3f:48:d9:68:73:e3:29:d2:6a:20:3b:98:
30:cc:a7:f1:3d:dd:da:03:f5:cb:6b:56:57:ee:48:
cc:dd:13:ad:09:ef:61:cf:3c:2d:c5:31:b9:64:ec:
e1:91:a6:74:3f:9f:d4:cf:65:c8:48:f4:bb:8d:5e:
ff:83:31:78:f5:3f:c5:61:df:df:ec:fc:b9:cb:50:
1f:7e:8b:1b:0b:a8:11:58:38:a9:8d:07:50:47:ad:
d3:32:3d:a2:3a:c7:44:18:cf:5b:94:22:b2:0c:81:
46:94:55:29:e4:76:a2:51:36:05:76:a5:a1:0e:5f:
20:1c:6f:26:e3:bc:02:7e:3e:9e:51:03:63:0c:98:
ab:d4:62:41:55:ff:6f:51:d1:a1:79:11:9d:7c:cd:
67:07:4f:5c:5f:c9:6d:b1:1f:b2:3a:fe:9c:ce:b2:
21:29:6b:5e:28:90:3f:af:25:09:b5:9f:4f:4f:a9:
2e:d0:ea:93:2a:cf:29:45:33:d0:d8:05:4a:c8:94:
67:62:ef:ef:f7:35:d0:8b:de:9b:bf:6b:dd:30:35:
18:b9:a9:d0:a2:c5:d7:f7:04:dc:09:62:1d:5a:b7:
28:d1:fb:e0:ad:8e:ce:5f:07:c1:91:f4:c6:6c:cc:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:AA:37:CE:D9:8E:41:21:FA:22:A5:7E:61:89:FF:DB:8C:1C:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl
X509v3 Authority Key Identifier:
keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:00:2f:68:f8:b7:f2:30:ff:40:55:db:77:6d:6c:bc:fa:9f:
c1:da:2a:b5:08:09:4d:a4:5a:62:00:85:0b:c9:d4:c4:cc:3c:
f5:28:2f:d9:a5:e5:69:af:e7:82:61:dc:e7:d6:a0:22:97:8a:
b3:e6:83:c1:9f:cb:d9:06:d6:a6:9b:1d:cf:2a:15:5a:24:cd:
99:ce:92:2b:b1:59:f9:76:a1:35:8d:2a:fb:3a:4e:9a:55:30:
3c:bd:bc:99:d4:44:e2:53:90:86:0a:2a:81:62:cc:0d:21:a7:
ee:36:7a:98:84:05:5a:12:5c:e3:db:8e:33:0b:e3:93:3e:fa:
59:c0:81:b9:ae:69:07:ab:c4:02:77:b5:35:d4:0d:51:30:93:
f0:42:99:e9:95:fc:62:b6:e2:6b:9f:c5:28:46:21:31:14:84:
69:35:aa:bf:45:3c:d6:c1:31:77:8e:e2:7e:58:ab:27:d2:d5:
17:50:9f:bd:fd:ab:46:0d:32:e0:74:ed:16:cb:cf:54:f6:67:
3c:54:cf:9b:12:9c:5d:12:20:d3:c8:53:e7:8a:49:b5:a5:69:
bb:c3:80:32:b0:2a:0c:2b:d5:89:ba:8a:44:f1:7b:b5:da:51:
be:b5:ee:3d:ea:88:f7:9d:c1:a2:63:96:ad:6f:13:e8:31:8f:
6f:28:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:17 2025 by rpki-client on console.sobornost.net