Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa
File: 07cd9fc5-1051-39bc-bd56-dadd655c312e.roa (raw, json)
Hash identifier: KhuIckRyb++Wkqb9MfgP9usx9U4+o+W8J8/RgaW/cxE=
Subject key identifier: B6:7B:5A:FD:70:8A:AC:03:01:6D:19:7B:5B:2E:91:03:A3:DC:93:C7
Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial: 010D0C9F43285848D6410B246C1F41714D9A28C0
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 400226
IP address blocks: 23.128.248.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:0b:24:6c:1f:41:71:4d:9a:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=695c3d21-b21c-48be-a2d5-b01213d4a6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:75:17:1d:93:8c:6a:33:fe:66:46:a0:60:
d3:2c:54:c6:57:95:3b:bc:d4:e3:48:20:c1:3d:6e:
d7:dc:f5:ce:54:7f:ff:7d:7d:57:32:59:b6:d4:14:
3c:e4:45:10:b6:55:8f:87:39:8d:05:75:68:46:67:
1a:d5:7d:bc:e5:5c:3f:0a:ea:35:24:30:9d:1c:f7:
af:c7:44:55:8a:65:e3:e2:6e:8c:6a:e9:5f:15:28:
24:61:b4:89:a1:6f:85:cf:07:27:76:4c:ed:b0:d2:
62:51:d4:0d:f8:b2:f0:02:de:4d:78:50:72:7a:3d:
6a:f6:07:da:87:0e:ac:ee:42:4a:23:9a:d8:90:93:
6f:37:25:9e:0c:62:dd:a8:89:e3:e1:d8:4d:f4:95:
f7:69:c0:b2:26:86:bf:d9:1e:ac:c1:03:52:3a:fe:
a2:bc:6f:46:23:46:d8:4b:df:d2:2b:89:40:96:b1:
24:f7:63:01:9b:5d:1d:51:7e:17:24:ec:28:0f:0d:
41:0d:84:d9:4c:29:df:d9:b8:ee:3b:f2:94:bc:c7:
22:4a:5c:31:dc:fc:f2:cd:bf:2e:45:78:97:d1:a8:
37:8f:6f:30:45:e3:c2:84:e8:c7:8f:3c:0c:b9:da:
ec:97:be:a1:bc:f7:1b:fd:f8:ef:7f:b5:ed:af:97:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:5A:FD:70:8A:AC:03:01:6D:19:7B:5B:2E:91:03:A3:DC:93:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
X509v3 Authority Key Identifier:
keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:1b:54:39:39:82:27:72:eb:a2:02:be:70:fc:89:93:f0:11:
26:82:7a:8e:b9:0d:cc:83:a1:79:03:06:60:d9:f0:d3:3d:b4:
50:de:02:0c:93:63:6f:26:5f:6d:01:fd:e0:a0:1d:2a:82:f4:
78:4b:9c:c4:e4:45:47:38:61:f2:2c:de:bb:68:52:73:f4:46:
54:08:dd:05:38:33:10:ce:bc:92:9d:59:c0:5c:05:8c:0e:fe:
13:f7:8c:eb:d2:ab:17:d9:64:dc:c1:da:ac:14:80:d0:90:6a:
05:e7:00:42:09:bb:fe:a1:bf:4d:4f:e5:be:5f:63:87:df:1d:
cf:59:98:6a:65:7b:17:f3:31:34:00:39:18:be:c4:42:f2:68:
4e:ac:09:5c:b1:cf:75:37:ff:02:5b:d6:cf:60:e1:59:11:6f:
57:ad:a7:43:e7:0f:30:cd:8f:46:82:82:3d:3a:22:bb:8e:76:
d7:43:e9:b4:a2:4b:ff:4c:b8:a2:09:53:05:b8:bc:cc:5b:66:
75:29:85:e0:f8:23:7b:3a:54:e9:5f:5e:75:dc:0a:2f:cc:e7:
6f:c4:f4:30:be:e2:8c:8d:f7:52:d2:a6:9f:5a:79:90:fc:51:
b9:69:0a:43:9a:8d:40:84:57:67:37:95:54:2c:9f:88:37:32:
6e:89:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:23 2025 by rpki-client on console.sobornost.net