Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa
File: ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa (raw, json)
Hash identifier: VokLf5eon5hHgKrmpN2W1GOyzu1JXsniyeAhsSlB0Bk=
Subject key identifier: 02:92:2C:55:2D:43:EE:2E:4B:5C:14:24:10:9F:79:AB:DB:93:EA:72
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21128BDDCF1D63807C21180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 216.236.85.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:28:bd:dc:f1:d6:38:07:c2:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=a3f35246-900f-491a-be0f-08ba38270b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:f9:f3:41:dd:be:11:31:89:fd:f0:7b:22:
c7:ff:e8:31:f3:a8:69:d6:4e:31:9a:51:70:40:75:
28:6c:4a:a6:ca:13:6f:90:6a:26:e4:eb:a9:49:70:
24:08:31:50:09:c7:6f:61:6c:9d:9e:5d:35:2a:12:
52:96:e0:64:9a:91:80:b0:01:e5:ec:7d:31:ee:58:
be:5e:4b:4d:bf:39:72:9b:80:2e:99:28:b3:35:f6:
78:53:e1:73:b2:0f:46:00:bf:dd:6b:1b:48:20:06:
c2:2e:38:9a:1a:7a:9a:53:4d:4c:94:be:1b:5d:61:
2c:bf:44:9d:ec:c8:44:dc:82:9f:01:d2:d4:0a:d6:
56:fe:01:49:ca:b0:4b:48:4b:f7:7a:4c:fe:c8:d3:
de:de:b5:1b:e2:47:c7:94:1c:64:d9:10:71:fd:26:
e5:1a:d1:34:65:06:e8:3f:3a:c1:60:c3:66:cc:aa:
f5:74:8c:81:42:f7:5f:46:03:0a:9a:c2:15:bc:86:
17:47:c4:cf:cc:6b:ab:43:a9:d2:11:4e:32:0e:5d:
f3:ca:2f:26:46:8b:5b:41:a1:72:5c:14:63:4b:a7:
85:59:ce:92:94:72:ce:13:fd:84:2a:8e:2d:e4:10:
99:89:ca:97:d8:1c:44:4c:c1:2c:23:fb:45:f7:1e:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:92:2C:55:2D:43:EE:2E:4B:5C:14:24:10:9F:79:AB:DB:93:EA:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.236.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:f1:3a:d1:96:52:51:c6:ed:50:c3:9b:db:47:01:da:eb:6e:
03:c6:0c:38:dc:7c:8c:0f:7f:29:1d:78:fa:62:80:30:3e:b3:
25:51:0e:1f:be:88:f9:74:ff:af:6c:5f:19:a2:c7:46:81:41:
34:c0:d3:3a:55:82:78:f3:42:45:b7:17:f9:4c:d5:ad:4c:ec:
44:a6:0e:f0:66:07:12:38:fd:85:22:c3:aa:bb:a3:a5:68:0f:
1a:a3:65:60:03:55:a9:51:f9:ed:82:d9:e7:72:13:10:77:e3:
82:95:a0:6c:d1:04:bc:59:e0:7a:6e:47:8c:55:ad:9e:bc:0a:
72:a3:01:fc:92:cb:fc:26:60:6f:67:97:94:19:56:37:cc:a2:
de:ff:70:b4:04:be:00:f0:c9:83:bf:cc:32:c5:29:0f:c6:5c:
2a:bf:c0:2f:64:72:c5:ef:92:c6:17:da:33:a1:7c:d2:95:50:
4c:5f:f6:62:f6:d3:c1:9b:ac:ed:07:1d:7a:cb:b2:14:7b:88:
a6:0e:d7:81:a3:eb:f6:93:3f:ac:b6:d0:a9:ab:ca:6e:3d:e2:
84:0b:2b:f1:56:77:c0:44:58:e8:ca:be:1c:68:92:e9:0d:dd:
a4:02:0b:80:49:4c:a4:dc:69:8f:5b:d4:70:ee:24:66:42:ad:
ed:df:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:10 2025 by rpki-client on console.sobornost.net