Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/89e202b3-a92e-42b7-b9f0-0bde9ae6393c/d4274c98-df53-3033-84bf-8212371db017.roa
File: d4274c98-df53-3033-84bf-8212371db017.roa (raw, json)
Hash identifier: lqHDxH7PfOhXLLpT+lvINhIffAEkYbTTpg6dAcy85+E=
Subject key identifier: 28:66:4B:DE:F4:29:03:81:C1:EE:FD:01:02:17:E3:58:25:79:FA:EE
Certificate issuer: /CN=89e202b3-a92e-42b7-b9f0-0bde9ae6393c
Certificate serial: 010D0C9F43285849552953B431619561981D3580
Authority key identifier: 26:A6:12:C0:1A:1D:F9:7C:EE:0F:D5:EC:21:45:D1:72:B4:1F:C5:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/89e202b3-a92e-42b7-b9f0-0bde9ae6393c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/89e202b3-a92e-42b7-b9f0-0bde9ae6393c/d4274c98-df53-3033-84bf-8212371db017.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 19358
IP address blocks: 162.120.78.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:53:b4:31:61:95:61:98:1d:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e202b3-a92e-42b7-b9f0-0bde9ae6393c
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=e73b426c-042e-40ba-a0ca-9c28b6fa2517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:2a:71:92:97:c3:82:3b:8e:11:b5:7a:14:
6f:fc:66:cd:c4:14:4d:3a:b4:7d:79:ab:a2:d0:05:
83:6d:3e:77:4b:66:07:2e:01:ac:6a:e3:3c:1f:6e:
62:47:dc:75:cc:39:5c:1c:8e:9f:80:7e:a4:8a:46:
26:d0:29:4a:42:c4:6e:12:39:de:d5:bd:bf:bc:91:
47:70:f9:d8:b2:38:7e:49:5d:13:fe:4a:5c:b7:a7:
8e:93:c2:60:38:88:54:57:f0:4d:ba:23:69:9f:00:
93:af:84:98:f9:11:47:d8:62:16:e2:1b:98:dd:d8:
4c:f2:77:37:1d:ab:bd:f8:e5:93:f4:59:f0:c0:65:
8c:98:2e:38:b5:28:1b:89:66:aa:1e:7f:7d:71:25:
5c:c9:13:00:3e:2b:ef:51:34:36:7f:15:25:a8:cf:
6e:94:29:13:a5:89:81:87:9a:37:0f:02:35:9d:77:
b8:80:7f:02:8d:90:9c:3d:28:ec:19:3c:10:51:ed:
f2:85:b3:e6:cd:45:d0:51:a2:01:e6:6b:8e:73:b0:
99:8d:46:9e:0f:41:e8:37:2e:1c:95:91:81:7b:08:
1a:17:47:d7:2c:9f:78:b7:8f:f9:16:50:10:47:7d:
28:f6:c5:af:7b:b9:88:3c:74:4d:17:42:e1:e7:6b:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:66:4B:DE:F4:29:03:81:C1:EE:FD:01:02:17:E3:58:25:79:FA:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/89e202b3-a92e-42b7-b9f0-0bde9ae6393c/d4274c98-df53-3033-84bf-8212371db017.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/89e202b3-a92e-42b7-b9f0-0bde9ae6393c/89e202b3-a92e-42b7-b9f0-0bde9ae6393c.crl
X509v3 Authority Key Identifier:
keyid:26:A6:12:C0:1A:1D:F9:7C:EE:0F:D5:EC:21:45:D1:72:B4:1F:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/89e202b3-a92e-42b7-b9f0-0bde9ae6393c.cer
sbgp-ipAddrBlock: critical
IPv4:
162.120.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:20:5f:f4:b9:cd:e4:6e:22:6c:b2:69:99:90:e8:3b:9d:0f:
c9:3c:c3:58:18:e6:30:a5:4b:fd:1e:1d:a7:6d:1a:9e:9d:f0:
2d:0b:12:06:54:a9:96:40:73:77:60:54:56:3c:51:d5:85:f8:
04:e8:97:f4:1b:06:dc:68:7d:a9:45:b9:dc:48:bb:37:ae:30:
d2:97:7e:f6:b0:40:0b:3e:6c:c7:33:9b:29:20:c6:58:43:e5:
73:6c:6a:68:b9:4b:60:f0:70:ed:2d:1d:6b:f9:fa:f6:ef:4b:
aa:3c:47:bc:95:2f:bf:80:cc:6b:e0:3f:57:1a:31:c5:fb:08:
51:4e:41:54:e1:27:ab:cb:e5:3d:eb:ad:23:6f:d5:f0:47:cf:
4e:80:33:c7:a9:8c:8f:ba:97:18:7c:b9:a4:46:d2:2a:b3:ef:
40:da:ec:3d:ab:32:b5:c0:61:75:17:7a:9c:21:c0:a5:ca:a6:
9a:4b:37:16:89:c5:9d:e8:b2:1e:25:ad:42:5b:27:72:bd:7d:
75:87:93:45:31:80:a0:f9:49:32:ec:43:1f:97:d4:4c:75:91:
76:b1:ed:d1:7d:92:2c:d1:d8:a5:b4:46:aa:a9:dc:be:4e:2a:
3d:60:34:ae:ea:b3:4c:2e:95:53:c3:96:9e:ce:26:85:3e:f2:
19:84:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:17 2025 by rpki-client on console.sobornost.net