Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa
File: 86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa (raw, json)
Hash identifier: N1CSNGmhwnRi5YLR/VZYU+7uWPuGXiZ6L4ReQy7VXfo=
Subject key identifier: 7D:AB:54:23:33:8C:CC:96:93:A1:6F:72:59:5D:A1:BE:70:9B:D2:74
Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
Certificate serial: 010D0C9F432858491AA6D125D328774CE4B94F40
Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 40569
IP address blocks: 2602:f981::/40 maxlen: 40
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:d1:25:d3:28:77:4c:e4:b9:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=6a1b762c-c534-4b6b-aea3-971551d591a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:1e:cd:6c:24:a7:98:4c:fc:95:f4:4f:3b:
32:c6:67:2b:31:49:7d:9d:02:e9:5b:e7:da:e5:35:
99:b5:fd:fa:ce:bd:57:67:ec:aa:6c:c8:c6:bc:92:
c4:23:53:b3:ba:f4:0f:a0:ab:2f:0e:75:b8:36:d8:
be:9a:3f:bf:51:c9:63:83:71:a3:c2:05:5e:11:cf:
35:bc:d2:28:bb:fb:b7:95:80:3a:46:ef:06:d7:97:
7b:97:0c:4e:ac:c2:2f:62:2b:9b:4c:c1:34:cf:cb:
f1:bc:83:4f:36:44:16:c3:40:bc:7e:1a:35:6b:6c:
ca:3a:1b:c5:8c:c5:6d:22:c7:87:3d:55:2e:16:ac:
78:10:c1:4e:90:7e:6d:80:5e:44:19:eb:aa:a1:8d:
9d:31:68:90:d9:62:ee:67:09:c0:ab:31:7b:c0:ce:
da:3c:59:e0:5f:95:0f:40:9a:d1:85:63:ee:af:ea:
4f:6c:10:0e:31:ff:a5:1c:1f:1b:93:cf:46:67:04:
7e:34:e0:e4:5e:5f:0a:0d:4f:24:20:50:32:11:9d:
3b:aa:08:15:da:29:97:6d:59:ac:c7:ef:4c:5a:62:
f9:a3:d9:a4:79:b2:a8:e8:cf:c8:6d:f2:00:43:c5:
ba:24:46:ee:38:50:7a:3c:a7:63:7a:71:63:fa:97:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AB:54:23:33:8C:CC:96:93:A1:6F:72:59:5D:A1:BE:70:9B:D2:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl
X509v3 Authority Key Identifier:
keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f981::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:4f:ee:42:8e:03:16:c2:3f:78:5c:97:35:30:44:da:47:b6:
be:b3:c2:ba:30:ab:ef:38:d6:1e:1a:d2:b3:c9:27:07:a4:c9:
9a:70:3c:38:d7:bc:65:d5:32:24:67:50:21:d8:42:45:ce:36:
31:da:ab:8a:19:a4:b5:6c:b1:d6:7a:80:ea:04:c1:e0:f9:25:
de:28:88:4a:68:d2:a6:44:81:58:50:ae:8b:60:f8:c2:40:ce:
c9:27:26:6a:db:49:d4:6c:fe:d2:6b:ea:dc:cb:b7:18:00:57:
ea:17:e0:0b:a3:9f:c2:24:99:f6:f4:f9:9e:48:01:12:57:04:
23:14:44:69:39:96:4f:26:d2:ae:71:40:ca:75:c5:15:c1:bf:
a7:f4:7c:c0:da:05:08:dd:a2:e0:63:8d:5f:2f:ff:38:4f:51:
16:04:0b:a2:2f:d6:06:d5:43:ce:01:d9:16:34:57:a7:cb:d3:
7c:c2:a8:29:76:36:e1:ac:33:28:bb:5f:b1:59:8b:3b:f9:6a:
78:66:3b:63:9e:0d:15:46:19:2d:9a:d7:c6:d9:13:b5:a7:8a:
b6:59:e3:2e:61:38:4c:c6:22:62:fd:ba:e0:9e:7b:a2:35:5f:
17:bf:48:50:c5:db:b9:47:3f:80:49:fd:80:b8:df:5f:45:e4:
ba:cf:b1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:26 2025 by rpki-client on console.sobornost.net