Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/21f0f6ab-188b-3ff1-afc3-8d5f8e8c96e5.roa
File: 21f0f6ab-188b-3ff1-afc3-8d5f8e8c96e5.roa (raw, json)
Hash identifier: 7zbXhWJZ8SQ0MyuHpS2SSByavNKxm4meFSoUnwmAe3Q=
Subject key identifier: BC:E8:7C:53:EE:AB:90:71:88:35:E5:43:73:10:B2:3B:BE:0C:52:69
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584981D45CDF9F1305E0CEF7DB60
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/21f0f6ab-188b-3ff1-afc3-8d5f8e8c96e5.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 13768
IP address blocks: 65.39.216.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5c:df:9f:13:05:e0:ce:f7:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=2a307c32-c77c-41cc-947d-b125df409033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:59:8f:39:5f:51:4f:3a:96:f5:54:6d:55:
46:44:43:74:fe:35:08:6e:3a:6a:ba:b9:c9:e1:57:
b0:d4:81:b7:8c:23:71:7b:ed:db:ba:a9:3f:6e:ae:
02:38:1e:71:6d:fa:15:b1:d9:da:25:0a:4f:e3:e1:
6f:39:1c:c9:6b:15:c5:8b:64:01:1c:f7:1e:5c:bb:
ab:32:44:7d:80:c7:2f:d0:ff:29:af:4e:05:48:c8:
40:db:13:49:c3:6b:17:07:3a:f3:e8:22:65:52:4a:
50:ae:bf:d6:70:66:ce:ca:b9:8d:d9:84:5f:fb:a8:
d8:0a:27:34:e0:50:ca:a9:7b:aa:ed:87:eb:b5:20:
cd:3e:83:c2:82:c2:7b:3b:47:02:4a:6a:eb:57:44:
ae:82:7d:b1:71:33:81:0f:dc:29:a1:4b:32:02:8f:
38:79:54:f0:dc:7d:9b:2e:12:6c:bb:be:33:48:33:
2e:4e:43:4e:c0:0c:63:d0:f9:3c:93:71:19:98:6d:
f3:66:4e:a9:b4:38:a4:64:b5:40:cc:61:bd:90:ce:
f3:bb:6f:7c:59:52:e3:ab:41:bd:82:c4:f3:d5:f2:
50:4d:5f:ae:d1:2d:c3:00:c3:cc:85:bb:5d:97:b7:
00:79:48:3f:97:9a:74:6f:5e:79:e1:0c:08:09:1e:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E8:7C:53:EE:AB:90:71:88:35:E5:43:73:10:B2:3B:BE:0C:52:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/21f0f6ab-188b-3ff1-afc3-8d5f8e8c96e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:36:c3:76:4c:6a:8b:44:ef:05:db:8d:7d:e3:ec:3a:ba:63:
e1:a5:ca:1c:51:a4:27:18:5c:e7:75:a6:43:a8:27:19:51:2f:
c3:b1:c7:fd:ed:a7:cf:7c:58:32:c3:24:e0:0c:d3:4d:31:18:
65:4b:61:d6:22:4b:8b:6f:3b:e0:78:a8:04:7b:2c:9b:9e:05:
f7:02:56:de:17:83:73:9b:bd:4c:e5:6e:89:a2:d4:c5:09:b6:
80:9f:a5:b7:f4:26:a5:5a:bf:17:17:ac:b2:90:8a:05:47:ff:
fb:79:e9:2c:9a:f8:3c:1d:dc:61:2f:54:7b:7b:3e:78:d3:c6:
04:54:fa:ba:5d:36:6f:43:cf:63:a0:10:2c:65:d7:75:58:f7:
56:72:23:e7:67:e1:ae:34:b1:de:f2:2b:f0:3f:8f:03:d8:1e:
16:15:79:11:cc:e5:6c:34:48:1a:a6:71:88:8d:bb:d0:ef:7f:
33:c8:06:e5:21:46:ab:6b:bd:45:38:27:bb:e6:86:33:ba:f2:
5f:9c:b2:03:83:ae:35:bb:63:e3:83:2f:43:a1:33:7f:57:82:
ea:26:e5:8c:18:e1:af:1e:9e:26:7e:2e:8e:d6:68:ef:e1:c0:
5d:dd:80:a5:84:75:6b:b8:3c:76:9a:05:25:4b:b9:8e:e7:11:
90:2a:a7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net