Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff4690b0-26ac-35e4-a177-f503692f6599.roa
File: ff4690b0-26ac-35e4-a177-f503692f6599.roa (raw, json)
Hash identifier: RS43M2t05f+Ah2A+WsslZUd8kgRJ2X2lSAVCvN/jmJw=
Subject key identifier: EC:56:ED:28:9C:DE:30:84:86:5A:B7:99:44:92:CE:64:A8:C3:7F:00
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285849151162C86BD6AD0919D20580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff4690b0-26ac-35e4-a177-f503692f6599.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.222.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:62:c8:6b:d6:ad:09:19:d2:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=7c64c103-8963-4645-8175-22262cd6b086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:b1:38:8c:05:a4:fe:45:44:7f:be:1d:7f:
0f:49:d7:98:c2:37:8d:c5:6b:f9:79:86:66:93:3b:
bb:e7:47:22:3c:c4:15:dd:82:5b:c6:33:c2:3e:33:
d2:39:1a:8d:05:03:93:5f:b5:36:96:4d:63:8c:38:
2d:db:81:13:5f:2e:f1:2b:66:03:aa:f7:82:e3:cb:
69:dd:8c:ed:3e:43:f8:8e:41:50:21:b2:ae:50:68:
1d:8b:31:97:29:2d:ce:b3:68:b7:9c:d6:fa:7e:10:
76:fa:ec:ae:7e:d5:95:be:4e:f0:30:37:c5:cc:b1:
d6:92:02:eb:4f:ce:02:93:b4:ae:4b:e5:d1:c2:33:
b4:89:13:4f:2e:5b:78:66:99:9a:21:9d:31:2e:7d:
f4:ef:8a:6d:56:e4:2a:fa:a9:75:0f:25:47:5b:25:
13:87:3c:f7:3c:d5:d4:8e:61:6c:ba:58:ab:b2:3a:
eb:75:3c:87:4f:19:ab:04:ad:66:20:d8:ac:38:c7:
e3:2c:26:4d:1c:c1:ad:45:84:48:f0:8b:a9:96:73:
26:51:cc:4f:d9:78:4e:30:7b:45:47:8b:1d:43:39:
1e:c0:75:90:1d:d6:48:7a:79:87:e7:90:f6:e2:a1:
59:d5:6a:5e:9b:a8:f5:ea:dd:cb:32:70:66:ff:86:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:ED:28:9C:DE:30:84:86:5A:B7:99:44:92:CE:64:A8:C3:7F:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff4690b0-26ac-35e4-a177-f503692f6599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:22:48:e8:ab:e5:cc:17:71:eb:d5:dd:69:3c:d0:a7:1c:c7:
18:56:bb:3e:ad:55:9a:42:9b:2f:a2:cc:ed:c1:44:20:69:f5:
b1:a9:1b:10:8f:f3:d2:69:3b:a5:e6:0f:39:cd:d1:54:50:d0:
cc:fb:98:1b:a2:53:32:48:27:4c:5c:cc:a4:9f:72:44:a2:c6:
2d:a6:42:73:e8:81:67:02:83:74:6c:79:02:37:6b:dc:c8:0d:
9c:88:84:b2:5e:04:d4:8f:dd:59:f1:46:80:7e:2f:40:0b:b3:
b5:ce:a5:3d:ef:b0:d8:5c:29:5b:1b:8e:2c:28:23:bd:5d:ee:
75:a9:af:2a:98:66:1a:38:86:87:f7:53:32:05:96:a4:cb:3a:
e6:ec:8a:a2:52:f2:95:85:07:08:fa:63:d9:8c:55:cd:97:e1:
db:f5:2e:5e:73:32:53:60:24:b9:4d:48:20:b1:ca:fd:8b:60:
ba:96:ea:e0:4d:92:9f:e2:31:b1:6d:8d:a8:08:7d:62:26:75:
a1:82:80:a3:b9:3a:24:73:c6:da:27:07:c2:61:a0:0f:c3:89:
28:05:00:55:e9:25:04:a5:be:bd:ce:91:f4:1e:42:d2:ee:48:
64:fd:3d:22:43:e2:43:6d:ea:35:2c:e4:ba:a4:fa:76:39:c5:
ab:33:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:01 2025 by rpki-client on console.sobornost.net