Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa
File: f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa (raw, json)
Hash identifier: 3avjWNPHdY3LdtmK9NKTecxZefLzOzBJ5rxQkPHDEXw=
Subject key identifier: E2:39:6E:80:D4:7E:9C:B3:07:4F:6B:63:E9:5C:63:11:22:72:9E:62
Certificate issuer: /CN=28ab384d-3018-413f-b253-d2f3ef552ffa
Certificate serial: 010D0C9F4328584975445AF2A78856A830EAF180
Authority key identifier: 6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 399253
IP address blocks: 209.209.126.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:5a:f2:a7:88:56:a8:30:ea:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab384d-3018-413f-b253-d2f3ef552ffa
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=501f5ca6-72d0-4414-b646-30f53d1d481c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:5f:5b:56:e5:e1:c6:df:3d:4c:8b:4e:63:
03:13:c3:a0:17:c7:91:cf:a8:48:3d:d5:75:f3:75:
e4:17:9f:e1:4f:4a:1c:e7:f3:96:9a:41:ab:e8:51:
02:6c:54:ee:48:74:06:5c:5c:2a:8e:d9:3d:1b:bc:
7a:da:b4:3b:88:28:35:05:7e:ba:4e:fb:74:d4:2b:
d7:e5:9e:96:3a:55:13:e0:ef:44:97:da:72:76:2e:
a5:6e:c5:36:94:98:6e:b4:42:09:32:86:bd:39:53:
ce:30:34:56:66:5b:71:cb:4e:b1:b1:ef:64:5a:bf:
b4:d2:2e:17:01:75:02:5f:ff:7a:e9:44:b7:fc:1a:
d0:64:59:2d:c0:92:38:7d:37:5c:9b:49:69:f3:4f:
84:47:f6:69:7f:25:0b:15:05:88:70:78:76:de:0b:
61:56:32:da:64:e9:0e:f6:92:5c:7a:7a:60:61:16:
59:a8:f4:9b:27:de:93:ba:64:e7:20:fa:e2:d8:b4:
6b:89:3b:fb:fb:f2:dc:d5:a0:55:eb:3c:fd:57:b1:
e5:6c:6b:67:05:f7:32:64:9e:a8:67:79:a9:33:02:
6d:3c:2f:51:f4:86:06:2a:ee:4b:fd:7e:31:3e:e8:
39:d8:a2:46:1d:94:ff:c7:c0:22:5d:33:fa:81:f9:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:6E:80:D4:7E:9C:B3:07:4F:6B:63:E9:5C:63:11:22:72:9E:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl
X509v3 Authority Key Identifier:
keyid:6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:41:24:91:47:2b:2a:b6:06:b0:44:b9:13:8b:15:2f:1b:bc:
7a:96:13:7d:6c:27:a8:a3:4c:5b:e4:ee:bd:bd:df:26:19:f6:
24:36:48:70:74:8b:bc:b2:3d:c7:ed:f0:40:93:e9:fa:3e:01:
e3:07:7a:49:bb:c6:59:5a:0b:7d:71:0c:79:43:df:7d:a1:d6:
be:db:2d:88:c4:d4:b8:b1:80:51:6b:c4:79:71:03:ea:1c:f8:
45:1a:7f:c7:53:f5:3c:55:fd:9c:53:8b:e3:db:45:cf:5c:87:
d3:fa:05:95:cd:af:0e:7e:20:e8:3a:ba:3f:7c:05:e2:0c:fa:
94:0a:00:4f:34:6b:a5:cc:03:fb:bc:66:da:93:c6:c5:00:60:
8f:36:09:48:a8:fa:2c:65:cc:e4:54:2f:9b:79:fc:d4:52:eb:
2b:0d:06:81:2e:cf:bf:37:f4:5d:9c:f0:48:32:c0:71:d7:a9:
3b:bc:d7:a9:4c:71:d0:77:ab:7d:a9:54:e9:ad:38:3e:b5:21:
8a:7b:e6:72:f3:58:47:a7:47:25:99:22:44:80:13:d1:bd:78:
df:65:0e:05:a0:0c:67:c0:42:b9:d4:69:1e:c7:6e:7b:92:f1:
d2:c8:11:c5:e1:de:fb:79:ea:82:59:9d:4f:e2:38:bf:2c:d1:
53:54:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:47 2025 by rpki-client on console.sobornost.net