Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/40ce2477-9538-3ba0-b98b-1f859a82666f.roa
File: 40ce2477-9538-3ba0-b98b-1f859a82666f.roa (raw, json)
Hash identifier: 5G9Jk29i+hE27M2G0tQMd1UvNdvzrzc0Pk16npQMzM4=
Subject key identifier: D6:6F:6E:F8:D7:01:DE:76:4A:E0:0E:48:53:02:11:34:8A:3A:1B:DA
Certificate issuer: /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial: 010D0C9F432858495ABECD27829ABBA80537DB80
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/40ce2477-9538-3ba0-b98b-1f859a82666f.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 7195
IP address blocks: 2607:b3c0::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:cd:27:82:9a:bb:a8:05:37:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=a3998f52-600f-4d33-ab28-82ca97037577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:7e:f4:3f:9e:a4:62:d4:b9:9f:3d:96:30:
9a:28:fb:ad:04:fe:88:c2:ea:27:97:0c:74:98:8d:
17:01:93:e5:bd:24:c4:36:17:c1:c8:5a:6b:85:99:
9c:74:3c:2a:7c:7d:92:0e:f5:82:d8:47:7d:1a:8b:
dd:29:ac:07:be:bf:82:67:e1:c3:d3:c3:5c:03:7b:
89:ee:53:8f:d4:35:4a:5d:f3:02:f7:6f:65:25:8b:
93:a5:6a:0a:a7:73:ab:43:32:df:34:5f:30:74:7b:
49:4a:b1:56:66:eb:d9:04:6f:87:86:94:da:be:8d:
14:47:ac:5b:48:88:b4:bf:b1:ad:c4:69:d7:e5:bb:
29:fc:23:df:2c:df:78:a5:05:81:87:26:08:2d:cb:
81:fa:a2:f6:f0:9d:9c:bb:df:f7:5c:ad:3a:a9:01:
ab:e1:d9:5b:1a:72:c3:98:08:df:43:ad:12:77:e4:
e5:b9:82:51:82:63:4e:e4:df:35:11:ef:8a:84:ca:
39:ab:36:98:ec:71:7e:1a:19:c0:9b:5b:f7:6f:d2:
23:4b:7b:f9:22:c5:48:47:28:79:88:4d:60:b9:15:
67:49:77:2b:c8:c7:54:b7:0e:ef:28:d3:59:67:98:
68:a2:ab:80:14:97:92:ab:2c:c9:87:a9:6d:24:74:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6F:6E:F8:D7:01:DE:76:4A:E0:0E:48:53:02:11:34:8A:3A:1B:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/40ce2477-9538-3ba0-b98b-1f859a82666f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
X509v3 Authority Key Identifier:
keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:b3c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:6d:18:9b:54:ce:52:48:8b:e2:ca:4b:8e:61:59:79:85:61:
23:72:8f:7a:ce:2c:be:21:7a:9d:a7:4f:74:8d:54:c3:3a:2f:
47:c4:7a:0e:55:a2:2e:c5:6f:86:38:98:f8:e3:7d:22:65:43:
1d:99:58:9c:73:31:7d:e7:da:fd:23:8d:6b:22:20:10:a8:80:
76:cc:1b:0a:c4:48:37:80:85:ce:dc:6f:15:d7:f0:03:35:a2:
b1:b2:5b:91:1a:5c:70:3b:b6:43:65:ed:22:d2:54:14:ba:99:
c4:64:a1:97:dd:1c:81:e3:56:52:43:83:c0:88:b7:0e:8c:f0:
02:53:d6:1e:3d:dc:32:4f:5f:74:ac:7e:4f:dc:39:7d:79:3c:
c9:b1:fc:5d:81:ff:fc:dd:19:23:3b:a1:75:83:5c:b4:71:b1:
95:7c:71:b2:48:0b:01:7c:e2:4f:d3:16:08:d6:30:8f:7c:2f:
72:37:b4:24:9b:92:1f:28:43:db:4a:0c:bf:0e:14:41:27:d4:
c2:a7:38:21:c3:84:0f:24:af:1b:a5:2b:1e:47:42:e6:e2:90:
b3:00:e9:56:cb:01:a0:67:bc:7c:10:28:62:4c:53:4b:36:53:
d7:bd:1b:c9:93:2a:f0:42:08:b3:e3:18:0b:22:0e:b9:0e:14:
35:33:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net