Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa
File: ea2f508b-c908-363a-83c1-c21d843b61c0.roa (raw, json)
Hash identifier: 8ROvLPHc2K/eCpEmTFCrKBPNLIQYqEeruMqsHtKPxKY=
Subject key identifier: 3B:ED:4C:43:EF:BD:C6:1C:B7:45:4A:30:D9:22:2F:69:AB:E3:BA:F9
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858494733E4D8D55C0311AA523520
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 29802
IP address blocks: 23.92.64.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:e4:d8:d5:5c:03:11:aa:52:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=336ac432-aa1c-499a-bae3-fa07614e009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:4b:39:d8:bd:41:56:8f:35:d9:1d:93:0c:
60:c5:eb:e6:cb:00:25:ca:ad:77:dc:70:ea:95:fe:
3c:0e:da:5e:ea:c2:58:3c:5f:9e:3d:e5:ef:3a:7f:
00:5a:e1:c4:59:29:2c:b0:4f:31:50:1b:ab:d8:4a:
8a:f1:7f:57:f6:d9:e9:ae:94:80:c5:9c:a4:13:7f:
52:b9:2f:75:d7:84:62:65:2a:60:fc:cf:f3:78:e0:
15:fd:71:66:c3:e9:48:22:40:05:e0:3f:d2:16:75:
3c:4e:73:9d:d9:4b:10:79:91:7f:45:80:76:d7:5a:
23:e5:30:07:12:7e:5a:df:e4:d4:ab:50:44:f8:06:
95:e3:a3:7c:a7:bc:5c:40:10:4d:b0:aa:a8:83:ec:
10:4a:b6:f9:82:2e:0b:6e:77:be:41:f9:fa:0f:cc:
67:bc:df:09:f5:1e:97:df:a1:2d:39:9e:c7:c4:9a:
ea:d4:f3:1f:f8:fe:9c:52:db:02:bd:96:6b:25:d2:
c3:cb:15:dd:a4:fd:49:93:1a:1b:36:69:c0:a8:d8:
74:0b:cc:5e:fc:62:4d:fd:1e:bd:a5:2c:34:ba:35:
0c:d4:c6:40:6d:0a:6c:cd:05:2c:5d:16:a2:e7:a6:
02:67:17:5a:6f:63:ae:7e:42:98:04:8a:1e:e2:61:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:ED:4C:43:EF:BD:C6:1C:B7:45:4A:30:D9:22:2F:69:AB:E3:BA:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.92.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:a9:d3:8b:a8:59:a7:c9:52:65:93:04:a6:2c:da:37:e6:9e:
ae:ac:e5:46:86:d8:63:b7:56:d6:94:b5:b2:96:7d:93:bb:95:
a5:dd:db:b5:b1:a2:ee:bb:24:9f:48:20:a5:7d:d1:a9:59:e1:
48:65:41:6f:f9:10:0d:61:19:ec:b4:3f:80:d4:f7:2f:db:aa:
45:a7:c0:80:b1:68:81:9b:f0:6e:46:f8:21:54:b0:7e:2b:d8:
dc:b5:b5:7f:6c:d7:6d:68:61:6f:42:70:37:b9:5d:28:8a:6e:
01:99:41:d7:d8:c6:7b:ba:ca:09:47:f7:8e:43:e7:b0:d4:e9:
4b:f3:15:16:ba:d7:82:48:16:1e:f8:06:fa:66:f1:a6:a6:f0:
b2:91:df:70:86:8d:6c:7a:7c:a6:ba:66:51:21:1b:6d:c7:a3:
be:2c:9d:d7:16:ae:29:84:ec:18:97:a9:a9:68:57:e5:ab:e0:
ac:fa:27:ec:f4:85:d8:75:0a:e3:78:8a:52:44:c2:88:c8:39:
41:7e:fa:8d:b5:f2:85:d9:26:8a:47:c5:86:87:be:bd:e2:ab:
70:a3:c8:93:2d:1f:30:8c:ac:17:aa:2f:c2:bc:92:57:ca:d6:
58:33:ec:35:5a:37:2e:17:ee:b7:bd:7a:54:fe:8c:6c:3f:59:
4e:a3:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:28 2025 by rpki-client on console.sobornost.net