Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa
File: 9a8d255d-f1df-38c9-9a43-23ba403e4905.roa (raw, json)
Hash identifier: mB2Tp8BT/1hGbYuSeWIwaIcdgISUajomjfd/QfvocQ8=
Subject key identifier: F0:6C:35:DD:0E:D8:ED:0C:4A:E6:A5:6A:52:D5:52:7B:DD:C9:27:98
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584957F4081C3BD2DA25ED01C280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 3223
IP address blocks: 104.250.185.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:08:1c:3b:d2:da:25:ed:01:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=8a1d3d87-d8b0-4691-9724-8a9b1741303d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:f3:f7:05:36:46:70:a5:6a:5e:8d:4e:be:
35:a9:2b:5b:62:40:60:51:92:f8:f7:aa:8d:26:7b:
f5:e9:e2:6e:4d:53:ae:cd:2a:8f:e8:ba:e1:e7:84:
c0:7f:f2:70:fa:ff:12:ea:86:4f:e4:79:d6:09:39:
61:37:f6:5d:9c:52:47:87:67:f0:7d:ca:23:b3:91:
14:5c:27:ed:05:08:a1:e0:e2:17:7f:76:d7:0b:f2:
15:3d:c6:48:19:c4:53:27:5c:98:b9:8b:fe:e5:22:
5c:80:ed:fe:ef:1e:90:09:6e:04:11:ba:18:82:94:
2b:84:28:51:de:d1:0e:32:c8:31:36:2a:c8:a4:53:
32:a6:67:11:2d:3f:fd:8a:f2:94:a9:a4:60:8e:00:
17:2e:b8:be:9b:cc:2c:e3:87:5b:a9:18:8f:73:d8:
89:41:1c:47:08:da:90:90:c3:9c:f8:d4:b0:09:76:
5a:dd:dd:7f:51:94:94:56:bd:b5:80:32:88:76:a8:
fc:62:05:56:c6:e2:97:2b:76:f0:3d:21:08:56:a0:
a8:85:77:e3:69:71:c5:de:bc:20:71:5d:b9:32:49:
eb:00:b3:9f:d4:f8:9b:09:d1:3a:b3:f1:1e:13:03:
af:c1:b4:36:96:85:22:d2:88:0b:a4:48:4a:d1:e1:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:35:DD:0E:D8:ED:0C:4A:E6:A5:6A:52:D5:52:7B:DD:C9:27:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:00:6a:30:17:96:90:7f:38:df:37:a5:c1:6d:4d:09:0a:0a:
f1:9b:fc:d1:19:97:40:16:24:48:6b:2c:7a:ca:b1:a5:58:52:
65:28:3c:2f:6b:98:b9:c0:00:c2:b0:09:e1:3f:58:83:6a:94:
ab:62:a2:97:2f:31:b1:59:fc:ca:ae:16:c4:c2:f5:93:c7:bb:
a2:d6:78:bb:22:01:31:85:4b:1e:04:3b:0f:82:ca:c8:9b:da:
2b:01:0f:1d:3a:d0:80:ca:d9:4b:63:bf:6a:18:b6:90:72:85:
f9:7f:33:f1:fc:fd:f6:5c:80:d9:1a:d8:e3:5e:7e:d5:9a:5d:
ed:85:a5:19:d3:67:24:0e:19:93:e7:16:77:af:a5:6b:33:37:
27:ad:b3:c3:c7:e6:61:2c:de:31:08:56:4c:0d:91:d0:ac:2c:
22:39:09:94:ac:59:df:03:53:e0:bb:ca:91:a1:a3:b0:25:c9:
53:89:0e:76:30:3e:c6:a2:9b:1c:15:9a:d9:1d:73:aa:9f:cf:
16:e6:20:fa:16:03:94:43:53:51:0b:f7:bd:f9:c2:bb:00:9b:
96:a7:b6:e0:45:0f:f4:c4:b6:2c:1b:be:52:4b:8e:95:33:54:
0d:ee:dc:59:e0:72:ab:02:d8:bb:2a:88:09:b5:3d:e5:16:1b:
1e:f4:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:23 2025 by rpki-client on console.sobornost.net