Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1e5fa889-5751-3c0c-b6f3-59dfdda37a6c.roa
File: 1e5fa889-5751-3c0c-b6f3-59dfdda37a6c.roa (raw, json)
Hash identifier: okfR3Yf2u959KHMymL7eb+lmtmA+RdXkxqpCLQ0yr98=
Subject key identifier: 66:81:1C:CE:5D:74:6A:13:DB:C3:E3:F2:FD:6F:8A:7D:55:18:26:0B
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584976A98E48E9545C7582F26350
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1e5fa889-5751-3c0c-b6f3-59dfdda37a6c.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 13768
IP address blocks: 64.226.252.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:8e:48:e9:54:5c:75:82:f2:63:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=a18e958d-7825-4a16-bf71-12fefcce5972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:1e:95:44:25:a6:86:59:25:0a:d0:c8:51:
7b:d2:2a:b5:2e:76:42:1b:ad:01:e4:af:f0:7b:88:
47:29:db:a3:b7:e8:30:77:c6:97:9a:39:a0:11:9e:
cf:df:00:0c:3a:f0:60:52:7d:bd:69:a4:ad:e8:0e:
e9:9e:3a:fe:8e:0d:6e:b9:e2:7b:ff:ff:11:4f:64:
f2:f8:e3:a5:93:6a:e6:b6:f1:ce:b9:93:57:e0:3b:
39:23:95:2a:e9:04:f8:c2:f4:53:56:19:14:bf:86:
08:17:86:86:57:f8:80:9d:21:14:4c:b4:b4:46:ed:
61:00:9e:5f:67:be:c4:00:78:64:7f:e6:d4:ed:01:
a2:91:b3:9e:00:3a:65:61:8f:bc:28:e6:64:a0:7e:
e0:54:d4:01:95:1b:c9:f8:70:5b:b4:89:5a:77:50:
ca:23:e5:14:17:89:73:a8:01:bc:08:b0:95:c8:b9:
b5:46:27:8f:a5:9d:2e:eb:55:22:97:b7:0b:8c:3d:
24:af:1d:b0:a4:07:b7:25:e0:64:13:95:31:bf:33:
0c:29:79:cb:0b:dd:e3:18:f3:ee:5a:63:e6:62:46:
06:2c:19:2f:6b:d6:e3:91:6a:a7:77:cc:51:e2:2c:
7d:14:46:7c:2b:79:35:d8:01:9a:e6:00:f4:e9:e5:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:1C:CE:5D:74:6A:13:DB:C3:E3:F2:FD:6F:8A:7D:55:18:26:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1e5fa889-5751-3c0c-b6f3-59dfdda37a6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.226.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ea:2e:cb:6c:dc:a5:27:4a:e2:36:ff:25:c8:47:2f:83:f5:
39:42:3b:9c:25:11:2a:7a:e7:f4:b2:f5:df:d8:0d:75:ff:8d:
47:a7:ac:89:c1:4a:86:f0:1a:d9:9a:47:9f:2c:ff:67:3b:cc:
66:a4:e5:57:de:b3:8f:66:32:32:77:ac:4f:be:5d:ef:62:3a:
ce:90:1d:d0:36:2f:92:07:c4:8c:70:76:ae:12:78:83:63:6e:
10:3d:9f:31:39:74:92:86:59:c0:f3:c0:96:ee:bd:fc:e3:37:
81:80:3d:b5:a0:84:8b:6a:37:14:27:4d:3b:07:9c:33:70:a5:
1d:f0:38:ba:6e:b8:32:a9:9b:31:2d:24:c9:a3:7c:85:09:41:
e0:07:0f:ee:77:ba:86:b9:73:13:07:fa:d6:c6:d7:ad:e9:2f:
00:1a:41:05:d6:ee:1f:b2:a9:76:ee:d6:27:b0:b0:ba:bc:be:
a1:a1:dd:17:58:92:e9:e3:b7:d6:e7:18:1f:f1:ec:1c:32:9a:
6e:f6:d3:a5:8f:cb:db:28:ed:28:90:3e:35:e5:13:ee:78:ab:
96:8e:c7:e6:55:cb:7d:3f:6e:35:c6:27:6e:7a:22:be:15:ee:
0e:f5:f0:fd:db:8b:c8:a1:cf:43:ae:01:2c:fa:a4:a0:54:5d:
ab:34:8e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net