Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/843b55a9-0923-3508-b15a-0c873d3a63ff.roa
File: 843b55a9-0923-3508-b15a-0c873d3a63ff.roa (raw, json)
Hash identifier: RKchHlHu1wJ9fVa/lhma0KMxBZ2DhccNldyid7WVWms=
Subject key identifier: 5D:CC:3B:BB:BC:28:54:84:48:0F:D8:05:26:06:D5:62:B2:22:E1:65
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584981D45C9D79D09B7840EEDD98
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/843b55a9-0923-3508-b15a-0c873d3a63ff.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 13768
IP address blocks: 65.39.252.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5c:9d:79:d0:9b:78:40:ee:dd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=1975dca9-0c9d-4e25-a6f4-b973861b387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:dc:31:0e:57:de:ba:b3:9f:b5:2d:7f:af:
ea:86:3b:3a:86:17:3f:f2:7b:15:80:c3:8b:1c:61:
b3:7d:03:1e:34:94:2b:fe:ab:43:e2:0a:5b:6c:fe:
52:5b:93:b8:02:5a:7d:f2:4c:33:98:1d:70:dd:66:
39:18:ca:e3:3a:53:ed:f9:3a:db:1d:5a:fd:31:0d:
d2:e0:eb:43:00:ef:b9:61:b0:d6:c3:99:75:6f:b4:
5a:58:25:fc:10:dc:27:4b:4e:a9:55:7d:21:70:ec:
6c:ff:63:01:cf:39:e3:cf:06:2a:75:a1:bb:8d:b3:
26:3d:a1:f1:64:1f:45:76:26:2e:38:95:6c:7c:91:
ee:31:ea:3d:5d:4d:bc:d4:a8:45:6c:6c:90:a8:df:
db:10:7f:41:71:8c:c8:2d:54:c1:31:0d:f4:2f:52:
e8:c2:c6:4d:cf:41:dd:16:ac:26:eb:ef:b2:26:48:
15:aa:cf:03:9f:d9:c2:58:b3:60:7d:58:0c:73:d7:
44:6a:4b:0a:91:34:6e:dd:ae:ca:2a:98:b2:36:b6:
eb:95:0c:ca:4f:a5:73:4b:86:3b:a2:cc:df:0d:c2:
c7:00:e8:dd:c5:cb:87:b9:1b:b8:9f:c4:88:1e:85:
ac:30:29:80:06:57:b1:45:92:2e:a0:06:29:31:a8:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CC:3B:BB:BC:28:54:84:48:0F:D8:05:26:06:D5:62:B2:22:E1:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/843b55a9-0923-3508-b15a-0c873d3a63ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:06:07:96:7d:4b:1c:f2:1f:1d:ba:03:65:15:c9:f9:45:f0:
36:0f:f7:19:38:f8:6e:37:a4:1b:aa:47:3b:64:f0:de:2a:d2:
98:b3:ae:e1:f7:76:ec:44:7c:df:3e:84:a5:94:db:d4:a0:76:
de:e4:2e:56:bc:f7:d3:fc:d7:f6:a5:7a:cd:e4:3c:b6:42:ef:
6b:d7:e3:78:34:b8:be:30:52:c1:b0:77:23:75:1a:c1:8b:c1:
e0:bb:ea:85:81:53:80:6b:f7:06:20:30:c3:84:8f:d2:00:bc:
a6:d4:69:72:3f:29:c6:0e:67:db:8a:e8:ff:9b:b7:b2:7e:3e:
88:6b:79:2c:51:64:fe:33:ec:46:42:07:b7:7d:ef:5f:7d:2b:
64:1e:a5:e5:e0:38:17:b9:58:03:58:28:6f:5d:08:f2:5f:11:
a1:51:07:50:b6:aa:05:8b:86:aa:4c:fd:0a:79:e6:78:97:35:
6d:3a:68:03:24:a7:c6:5e:f7:a1:2a:b5:c2:12:f5:19:e6:b6:
6b:79:0f:79:da:aa:0d:c7:cb:39:d7:2c:65:e0:88:45:bb:52:
63:ac:96:2c:23:00:3b:11:ba:6b:2c:d9:0b:d4:bd:45:03:a8:
57:7f:26:91:ef:d3:24:37:d9:b6:f9:d0:c2:47:b0:eb:3c:fa:
2d:12:14:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net