Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa
File: 0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json)
Hash identifier: BLb/5Qi9/9RuvvpqHTIzTScSNGbKB8NYoWbuvP9Qij0=
Subject key identifier: 1A:23:99:49:9F:65:F8:90:07:08:99:1B:30:85:27:50:59:D0:13:E0
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F43285848B4C0D0DED0C1A023166DB180
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 4213
IP address blocks: 2607:f820::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d0:de:d0:c1:a0:23:16:6d:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=fe6daac2-45ad-4741-82ed-cfa962ecdd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:9c:b4:bc:87:bc:be:25:f1:6e:26:93:45:
9a:00:e8:42:81:b3:1a:cb:8f:1c:9c:d4:36:ec:cb:
11:20:d1:62:52:bd:dc:d7:34:80:32:22:df:72:df:
cc:9c:10:00:bb:32:f3:51:e1:6c:64:b5:a6:34:34:
27:25:f9:27:1b:8a:8e:2e:de:ff:8e:56:5a:89:00:
e0:70:51:b7:1b:be:c9:65:fe:7f:c5:f7:41:00:c7:
d3:55:d1:ec:a1:c2:04:d9:d0:d1:f8:e9:e5:3e:8c:
c1:d7:e5:13:2e:82:84:65:7d:07:73:b0:c4:9e:6c:
06:60:ac:b3:b0:53:67:40:78:a5:ef:6b:ad:93:ac:
d3:32:ba:2f:b2:2a:8a:bb:bb:58:e8:a3:0f:48:99:
ad:3e:62:5b:85:02:11:27:34:bc:12:a6:b6:05:e0:
8f:1b:de:49:33:02:17:4a:b7:c1:b7:f3:31:0d:84:
71:04:92:a9:88:a9:77:91:13:3a:10:56:01:e3:b9:
b7:5d:ff:3e:20:2b:e1:cd:44:81:db:38:a7:c6:05:
e8:59:83:46:a3:00:19:95:d5:be:1c:51:ca:68:aa:
b5:f9:19:e5:d5:ba:d1:f0:77:89:ed:f1:6f:f2:1c:
d2:48:f8:3e:71:b9:71:f2:bf:fb:f2:9c:79:3a:12:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:23:99:49:9F:65:F8:90:07:08:99:1B:30:85:27:50:59:D0:13:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f820::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a1:56:ae:8c:5e:9a:c4:17:ef:bc:1e:32:24:31:ce:ae:38:
44:48:19:d6:08:70:ea:12:36:f9:32:a3:bf:a2:72:e0:25:59:
45:37:a0:0c:20:76:7c:00:ef:45:a1:97:30:e0:ca:ac:62:0c:
60:f6:d5:91:7b:d2:b3:81:bc:34:82:9a:b9:60:e1:a1:a6:2b:
fb:4f:25:35:df:4e:ec:9e:0c:05:98:f7:54:d4:10:d0:86:8b:
6c:9e:0a:63:a7:49:bf:a8:91:b3:a7:e1:80:da:aa:62:aa:89:
4f:72:eb:89:61:bb:6c:d0:45:e1:9b:6d:24:d8:a3:51:c8:97:
54:51:5c:4b:93:e9:14:9d:b3:13:86:e1:aa:a7:50:41:bf:7f:
18:24:9c:39:7e:1a:be:1d:16:ee:49:bd:59:b6:ab:4d:7b:4b:
02:e6:04:84:24:df:b0:c2:2b:8b:89:b5:b2:63:06:02:13:85:
d4:98:bd:1e:3c:43:43:1d:5d:44:d3:0d:23:ea:91:97:37:29:
4e:cc:2f:f6:17:cd:a8:7f:55:c4:66:6b:4f:e8:c9:db:7a:e0:
ae:e5:31:ef:ee:87:73:6f:b7:8a:38:b5:df:53:c1:74:dc:c6:
6e:59:53:19:cf:e3:fa:cd:db:24:b6:ba:e8:f4:08:8c:67:94:
e1:10:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:17 2025 by rpki-client on console.sobornost.net