Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa
File: 5af69910-53d7-36e0-bea9-9105b0772848.roa (raw, json)
Hash identifier: 9BaS2KKoCf5SpCF5W9M8gQRemH9UyH+B7sUa3vzZaRE=
Subject key identifier: 92:8D:1E:02:E0:24:A5:6D:B7:EE:E7:95:E9:DF:EB:68:89:3A:04:F8
Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial: 010D0C9F432858497114323032B060E7653CA700
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 53727
IP address blocks: 2602:f982:10::/44 maxlen: 44
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:32:30:32:b0:60:e7:65:3c:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=96b3688f-2a45-4d67-ab13-e05f84de11b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:7d:36:74:fc:7d:37:48:38:de:ad:20:83:
3b:da:3c:32:c2:b3:13:1f:6b:e8:9d:f3:7a:c8:c5:
0d:29:1d:63:be:b5:e3:de:a4:53:ad:00:4b:62:a6:
d7:89:ca:ea:20:c0:41:4e:e4:75:5b:45:79:6c:9b:
07:54:06:a6:1b:1e:3a:ee:dc:2f:ea:e1:95:9e:1d:
0d:d8:16:da:24:a0:af:7a:d1:49:01:3f:66:71:a9:
88:b7:ac:21:b9:9d:c7:92:34:d2:7e:cd:f6:b5:cc:
40:e9:b0:72:46:95:8d:23:3a:d8:fa:59:56:c1:61:
05:70:04:c5:f0:07:fd:ac:cb:c7:04:e4:a6:bd:df:
57:c3:3d:be:b1:a3:5c:ad:90:b3:a0:0d:c8:12:17:
27:3f:b0:58:25:63:5e:30:0c:f4:8c:ad:dd:fa:94:
a9:9c:9d:e9:12:1e:47:b8:e8:c6:6f:ce:44:1c:ff:
07:ea:7b:7a:fd:57:81:19:36:39:77:c8:0f:9f:b8:
25:51:71:a1:82:81:9e:49:37:89:69:aa:54:79:73:
d0:3a:76:d4:3d:ca:ee:32:d6:88:52:58:65:ad:18:
c2:f9:05:41:c5:5e:c1:d8:20:15:a6:bc:21:5e:9a:
22:0a:d1:66:d8:8f:86:68:5c:d5:9c:49:42:55:f5:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8D:1E:02:E0:24:A5:6D:B7:EE:E7:95:E9:DF:EB:68:89:3A:04:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
X509v3 Authority Key Identifier:
keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f982:10::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:e4:08:05:89:60:bb:19:76:ad:21:69:ec:39:8a:b2:ab:d4:
19:8b:b8:9d:99:29:3a:57:49:72:56:b1:ee:47:93:4c:0c:b1:
24:1b:5c:d3:45:50:4c:1b:8f:f7:b0:f2:2c:e6:9d:60:4a:ab:
a5:15:fa:0f:7f:3f:23:a1:d7:9d:73:3e:9f:6b:8b:d9:d5:f3:
72:af:93:e9:63:e2:59:34:60:f5:37:04:bd:e9:9d:67:80:cf:
d8:07:3a:7b:49:a2:87:1f:00:80:8b:4a:99:64:1b:b5:cd:10:
2e:ee:e0:ca:cb:af:5e:1e:81:64:2f:c1:53:c0:b4:cc:1d:50:
12:73:ed:bc:f3:3c:e8:1a:68:62:f6:88:8c:8c:28:9a:f5:1c:
5c:29:fa:f0:04:28:07:57:39:58:13:e8:6a:f5:a6:7c:00:8b:
ad:f4:44:36:1e:ba:39:46:83:5f:0e:97:ba:f8:af:ad:81:b8:
5a:b5:1f:17:a8:ea:77:53:8d:57:18:53:63:3f:dc:2c:bf:5e:
fc:0b:2c:11:63:0f:e9:03:8b:3f:b6:89:63:f3:cb:8e:f2:59:
d0:7c:e7:6f:07:d2:c3:14:58:bf:00:d2:f3:70:84:75:d1:f5:
df:ea:f2:a6:7e:06:b3:18:b8:1c:a2:f2:31:89:ca:ae:e7:57:
b1:73:22:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:12 2025 by rpki-client on console.sobornost.net