Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa
File: 2744b9df-6b90-37a0-ad0e-89af24e611e0.roa (raw, json)
Hash identifier: +wKPQAX8/1C1njKHc/Pd3SJS4uMSlBhJf9aUcvto3Ok=
Subject key identifier: BA:E5:08:86:A9:A3:EE:23:A7:B5:BF:F4:38:A2:F5:8E:8E:86:05:61
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F432858493C09313F3A58E25C451F9E80
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 4213
IP address blocks: 209.11.249.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:31:3f:3a:58:e2:5c:45:1f:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=b811532d-e73f-4f34-9325-9125fa4724a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:1e:02:d0:f3:85:a5:9b:05:c6:a2:a0:d3:
8f:6f:e4:78:aa:78:9d:d7:60:8c:6a:17:a1:90:7e:
80:f2:be:c8:2f:de:df:d2:05:33:7e:db:9c:a8:b5:
3d:44:ac:23:8d:e7:71:dd:ed:3c:15:c9:32:cb:27:
9a:16:a5:be:97:2a:e7:e2:8b:1e:71:e4:e3:cd:ea:
54:ec:a0:3c:68:8e:39:ef:5b:9b:71:d6:ed:9a:4d:
21:40:4a:a6:90:2c:26:19:e3:6c:d9:c6:0e:44:6a:
10:00:49:49:cd:56:b7:05:43:89:3b:78:40:d8:b9:
2b:63:4a:f0:cb:41:1d:b5:32:4a:7d:ea:ed:05:27:
fd:45:9a:bb:6f:83:06:d8:c7:fe:21:38:ed:0c:f8:
1c:4a:98:cf:de:80:42:71:5c:d5:5a:14:d2:14:74:
bc:77:68:c9:19:76:11:72:af:52:58:38:1c:37:04:
dc:d6:d0:22:4e:82:14:a7:cc:c9:e9:3a:5a:70:c2:
3f:c0:e6:6b:92:bd:0b:3c:96:04:61:25:57:89:d3:
79:84:c0:7e:51:22:5c:a8:57:6d:c6:d3:9d:2f:bd:
73:57:e8:1b:34:1d:7a:64:7e:5e:11:33:89:a2:aa:
3f:ee:85:83:d0:92:30:66:70:a3:21:39:6c:42:1b:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:08:86:A9:A3:EE:23:A7:B5:BF:F4:38:A2:F5:8E:8E:86:05:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
209.11.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:fe:d6:91:5e:e7:00:f1:3f:82:33:04:45:7e:27:ca:fb:ef:
ad:fb:2e:43:cb:6f:02:f8:7a:0c:70:9a:9d:61:71:d5:49:e3:
29:44:30:32:38:f1:75:ae:88:8d:1e:b2:72:87:e7:a0:ff:d7:
33:f7:52:46:e2:46:bc:c3:8d:aa:87:0a:91:ea:e9:65:d6:a2:
ac:b7:3b:75:84:6b:78:93:58:d4:80:8d:5b:24:69:b2:34:75:
15:97:1b:48:e4:a7:5d:bc:a4:03:52:7b:9b:75:ea:bd:98:6d:
62:55:8d:45:d1:82:ab:05:b4:e3:d3:13:04:29:b3:7a:b1:38:
e5:d9:97:9b:ac:d7:f9:a8:c3:09:06:8a:4b:ea:71:5a:9f:b2:
ba:1b:99:65:8d:fb:eb:76:96:69:40:78:44:df:0f:44:5e:3a:
28:4a:25:22:f7:d9:da:62:fb:0a:19:e8:0f:1b:c8:8b:bc:e7:
61:a9:ee:00:3b:ca:b3:17:e2:df:cd:68:58:5e:c8:6f:1b:8a:
5a:f5:73:93:10:3a:d4:32:9b:c7:18:e3:7d:4e:f3:e6:a4:78:
e7:1c:81:e9:4a:14:bb:b6:15:f8:cd:8e:ec:68:fc:b5:50:61:
cd:f4:03:3e:95:1b:dd:a8:da:9e:34:b0:09:64:53:3f:9e:d7:
cd:a8:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:26 2025 by rpki-client on console.sobornost.net