Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/38304816-5eea-39ab-acb2-b677f9968138.roa
File: 38304816-5eea-39ab-acb2-b677f9968138.roa (raw, json)
Hash identifier: MXk2TIVAh66wMEc7ffGJQbhjF5/xAgv9W00mOGIflnE=
Subject key identifier: 43:A2:0F:55:B2:24:9F:57:EF:7C:BC:4F:5C:A9:CF:55:42:0E:EE:D0
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584976A98EC6B4907EE0F37E3F80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/38304816-5eea-39ab-acb2-b677f9968138.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 13768
IP address blocks: 64.226.0.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:8e:c6:b4:90:7e:e0:f3:7e:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=29d4707f-5f59-4f42-837e-90ef51fa1328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:67:d0:46:bf:37:16:2b:f0:b1:f4:31:f9:
47:4d:48:6d:13:13:d7:3b:82:2e:07:5e:15:85:86:
b0:48:f3:c2:26:73:30:f7:82:aa:58:2b:96:db:a7:
19:6e:86:33:bc:7a:54:d8:d6:6f:05:0d:f5:3e:5a:
1a:ef:73:3c:fc:77:d9:76:fa:e4:b8:c3:4a:cc:7f:
c7:b6:f0:05:17:a7:0b:62:e3:20:0f:06:47:f2:fb:
f1:90:02:0f:c2:95:a6:9c:86:5a:b0:0b:c8:2f:d8:
0b:eb:46:0c:ec:e1:80:b4:da:f2:56:70:ab:70:69:
75:b2:70:aa:69:af:67:7d:1b:74:61:96:4e:4b:fc:
9e:0a:36:76:3a:dc:51:b2:11:a8:ad:3a:ed:e0:3a:
75:02:b0:e7:04:28:14:81:30:1f:e1:bd:0d:6a:d2:
8d:70:45:41:bd:49:4e:28:f3:38:bd:c6:7e:0c:60:
4f:ba:98:2a:06:e7:24:45:75:48:51:09:c9:10:56:
26:5f:79:49:aa:63:e8:02:82:e1:7a:01:78:61:eb:
69:22:31:09:5f:97:d5:db:b0:3c:0e:22:a3:85:c6:
76:bb:d4:e0:48:40:c7:18:91:3f:f9:3c:a7:25:e8:
73:82:4b:7b:c3:49:7f:6f:b9:72:8a:af:ed:55:6c:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:0F:55:B2:24:9F:57:EF:7C:BC:4F:5C:A9:CF:55:42:0E:EE:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/38304816-5eea-39ab-acb2-b677f9968138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.226.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:79:cb:57:f1:9a:54:9e:2f:99:2e:50:70:ba:6e:21:2f:8d:
a2:ff:4e:ea:56:0e:08:c2:ea:34:23:b8:69:c7:80:86:b5:4b:
58:45:99:33:21:ac:30:38:82:d2:04:04:6c:78:89:60:2f:b4:
06:2e:2a:d2:15:61:a2:ac:aa:e3:b7:f8:8d:e7:3a:0f:8c:fe:
ba:87:9a:5b:8d:f4:2a:17:c6:42:f2:2d:a5:be:3c:32:55:29:
7f:8a:dc:0a:42:63:4a:09:f8:a0:ea:63:d1:36:29:10:8c:eb:
fd:54:ea:56:6c:c7:3f:c8:bb:52:0c:0c:3a:06:7c:f0:76:b5:
39:83:45:71:de:21:35:d3:2c:95:3d:19:8d:ff:1d:f2:b6:42:
22:53:a2:d8:ca:3d:6b:a4:5f:95:e1:c2:7b:b5:3a:27:08:7e:
a4:4f:f4:ae:b7:7d:11:a6:4f:86:82:2a:54:1a:8a:97:8b:f6:
83:d0:39:31:0b:b4:b4:fd:5a:ef:05:04:d4:84:cc:2e:6d:c8:
2c:4e:91:a3:72:9b:95:ff:ec:00:5d:10:1e:31:9c:96:b4:7d:
86:7f:97:94:0b:fe:10:5a:87:e0:b9:d3:fb:e0:f3:5c:93:d9:
4c:30:f8:9e:96:d7:2f:28:91:b6:7b:45:67:33:72:a0:92:c1:
42:1d:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net