Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa
File: 8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa (raw, json)
Hash identifier: bJP9cGhiV10VDcc0xPM1qrUw/GfD8WGEN/Eng7RP9eA=
Subject key identifier: C9:38:4E:DE:E7:A3:5F:E3:DF:BE:68:40:8F:0E:FD:38:12:DA:80:21
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584981D45D40A6D44CCBCACD02B0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 13768
IP address blocks: 66.33.20.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5d:40:a6:d4:4c:cb:ca:cd:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=23b3532d-95c1-499f-baa8-cd4edb7d9f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:55:27:85:db:b2:44:e5:4c:c3:e0:61:05:33:
f9:1e:33:74:72:4d:e5:44:c6:c8:15:af:c3:46:3b:
9d:63:6b:cf:e9:63:d9:62:1b:67:57:9f:5b:e3:08:
95:a5:93:8a:de:6f:fc:d7:43:b5:4a:36:8d:df:1e:
ee:7d:1a:3a:98:07:58:40:e1:bd:0e:96:6e:b3:44:
b2:3f:9e:6d:cb:e5:bd:23:86:1f:69:6a:ed:3c:4e:
7a:00:1f:2a:85:95:af:ff:5b:ef:66:7b:53:58:44:
4f:07:53:00:73:ab:e9:2e:3f:56:be:08:ec:23:38:
fb:24:cc:05:0d:56:af:71:59:79:b3:91:da:5e:d1:
57:07:a9:62:76:7d:0c:af:ef:3e:a1:b9:56:26:10:
9f:86:52:b9:b7:22:b6:97:ac:0c:91:a8:5a:59:db:
12:ec:28:1c:97:25:b1:6a:d3:5e:19:c4:7e:0f:5c:
c2:92:50:07:6e:47:1d:ae:3e:73:f0:86:20:59:c3:
68:44:0c:88:2d:46:82:23:3a:97:03:ca:32:db:ab:
5d:d0:fa:5a:96:8c:ea:56:ca:2e:28:d9:29:3e:56:
50:c2:e7:4b:2a:81:89:3e:1b:cf:7f:25:ce:07:a8:
e9:89:83:da:7e:1a:8a:33:cb:c1:3e:f2:ab:8c:2c:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:4E:DE:E7:A3:5F:E3:DF:BE:68:40:8F:0E:FD:38:12:DA:80:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:2b:f0:44:4d:16:87:03:9d:a9:66:b5:4d:3d:38:40:13:14:
52:6e:a8:4d:bb:9d:21:48:3f:55:25:ee:da:6d:1d:0f:95:1a:
f9:c5:b0:21:f6:03:04:6e:92:e8:cf:11:6f:fa:91:d9:5f:54:
a8:8b:1c:5c:44:8c:c2:0d:ae:d9:ba:a2:80:03:50:de:42:9c:
81:c8:67:97:af:72:98:fd:12:a3:25:a7:9b:8c:71:2f:4e:5a:
a7:b1:e4:17:c9:b9:c4:d8:65:d1:41:a4:e4:d4:43:45:b3:1b:
13:38:e8:19:88:0a:f2:21:1d:61:2b:29:cc:6b:dc:58:96:57:
a9:88:74:6a:f7:ca:1c:a8:f3:37:25:6d:a5:aa:48:2b:01:49:
74:c5:7f:86:fa:dc:0a:e7:37:a5:e9:b5:bb:92:6e:36:fa:a6:
42:fe:b7:76:a1:87:c6:4a:ff:5e:92:5a:8d:22:d8:b1:62:f0:
61:c0:00:24:8f:92:84:d9:8d:21:ba:3d:55:e4:4d:d9:f8:00:
4c:77:db:87:28:bc:7c:10:14:08:17:68:20:a8:0d:8b:d3:00:
cb:d2:01:1a:ee:fc:ba:79:21:9a:44:48:6c:3c:94:db:dd:78:
5d:88:6f:75:74:56:02:06:5b:ec:e2:37:29:63:70:e0:f6:7d:
61:76:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net