Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa
File: 8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa (raw, json)
Hash identifier: gDBQt1K3/OHbMcx+oF2lWzpFx87KJ2EJq1gcpja3BoM=
Subject key identifier: E0:A8:CD:1D:7F:1B:F0:3A:20:F0:74:B5:55:11:A7:AD:6D:90:04:9B
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584981D458A96409D2E917F2EDC0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 13768
IP address blocks: 65.39.192.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:58:a9:64:09:d2:e9:17:f2:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=4d0a8fc7-e64e-452f-b576-5e39070ac320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:a9:ae:57:29:cf:16:d5:71:b5:51:d5:e3:
18:d1:ce:ad:c3:9b:84:b9:39:25:42:6e:19:d5:bb:
5b:80:e6:39:32:ff:1c:b4:bf:fd:41:1a:af:49:a7:
ea:2c:0e:5c:3b:ff:ff:00:6b:39:93:ef:78:02:06:
c5:67:cc:9c:51:69:1e:6b:e6:86:1f:aa:c4:58:5f:
f4:99:be:7c:86:c2:52:03:c3:9e:9a:e5:5a:17:8f:
fb:15:b1:92:5e:06:8e:ae:81:a2:0e:c3:53:d8:af:
dd:64:7a:1a:0a:0e:78:b6:3b:7b:58:f8:49:35:e6:
6a:9c:2a:38:95:bf:34:a2:af:6d:00:94:0f:24:c3:
c2:51:dd:d3:8d:8f:59:45:72:64:6c:43:07:41:45:
1b:42:3d:cd:8c:24:ea:dd:4f:39:78:9e:0e:92:73:
33:97:a3:f5:5d:0c:23:8d:45:a3:c3:6a:d5:60:ef:
8d:ba:42:f7:3f:f3:e8:10:08:24:d1:03:c2:26:76:
10:f5:87:a1:f8:ca:c7:00:85:16:50:2f:af:ff:60:
39:5a:89:6b:8c:50:c9:2e:e8:f5:8e:d4:4d:e1:5b:
f2:55:dd:60:71:9a:1a:8a:f1:41:58:71:7e:fc:4b:
37:8b:04:84:a1:6b:af:40:14:05:62:2b:f2:85:0a:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A8:CD:1D:7F:1B:F0:3A:20:F0:74:B5:55:11:A7:AD:6D:90:04:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:4b:a7:04:39:86:a5:dc:c5:a3:55:bb:c1:d0:99:d0:1f:9b:
ac:cc:dd:4f:dd:15:a1:bd:a0:91:80:b8:57:fc:f1:68:8e:d3:
ac:ba:dd:5b:12:6f:b2:3e:2c:19:c4:bc:ef:50:48:60:b5:94:
e4:1a:17:43:ec:af:84:22:23:c0:45:b7:1e:f0:52:aa:f5:36:
c0:b4:a1:8a:29:1b:21:d8:e1:7c:37:30:94:b0:a9:1d:01:9b:
a1:71:2e:ab:f9:b9:e5:0c:ae:95:56:45:ba:aa:ad:bc:c0:94:
77:3a:aa:8e:27:0c:97:e9:d1:af:0e:31:00:21:8b:c7:97:a1:
68:0a:69:6b:19:83:29:2d:68:01:93:12:05:17:9d:13:83:e1:
cf:db:2c:ee:df:87:d7:fb:51:c6:c9:ed:dc:94:22:4c:cc:97:
7e:e0:5f:30:65:e8:3b:d7:38:64:9b:e8:4c:07:98:1d:32:ae:
ef:49:ac:75:dc:6a:6a:97:98:99:f7:dc:2a:04:f8:d2:74:69:
b1:92:65:45:da:ea:b5:64:8b:6f:65:89:bf:2a:c6:5c:0b:0f:
54:37:21:3e:9c:c5:c6:25:9d:07:48:d7:6d:5f:ee:6c:a6:d3:
1b:03:96:cb:55:0c:16:a9:2f:26:eb:0e:a1:50:45:88:07:4c:
69:34:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net