Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/0f94adce-ee08-3d1f-952e-320e490ab5fe.roa
File: 0f94adce-ee08-3d1f-952e-320e490ab5fe.roa (raw, json)
Hash identifier: 8IHIRvhaMDmgp+nEev8vXsdeJa1lk93ozRDkYRfhxvA=
Subject key identifier: 7F:FA:12:EB:20:94:77:32:41:52:B6:20:E3:2C:6E:42:3A:61:4E:E0
Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial: 010D0C9F432858495ABEC6FBDAAF19127B89FD80
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/0f94adce-ee08-3d1f-952e-320e490ab5fe.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 134176
IP address blocks: 64.113.11.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:c6:fb:da:af:19:12:7b:89:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=63c34d79-5d71-4b5e-9c71-657db8612648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:d6:3f:03:f0:34:fb:94:97:05:38:92:d4:
a5:00:46:1f:1e:7e:1e:df:1b:4b:51:d4:0a:19:c3:
bb:a8:4d:be:95:43:46:8c:04:e1:38:0e:fa:80:11:
11:d0:6b:5d:15:5b:29:5f:8d:7e:df:7b:f3:e4:37:
27:18:22:b7:31:f4:2f:eb:59:20:d8:fb:2f:58:02:
af:b2:5f:89:8f:77:52:f7:7f:61:19:fc:55:0a:f4:
88:a5:4e:bb:6e:9d:c8:8e:a1:23:be:4e:54:c8:ca:
c9:57:fa:05:70:d4:f3:09:f1:75:f3:9a:c5:3b:b3:
c0:ce:ca:17:67:ca:2b:ff:6f:3c:36:fe:b2:ec:7e:
0c:a0:74:35:7c:9a:fe:25:c9:29:2e:e1:c5:52:62:
36:09:fe:1a:89:f5:ae:52:d9:3f:73:82:43:73:b1:
ff:4d:30:55:49:b4:a2:df:d5:52:90:a3:c1:26:3d:
38:43:87:c3:0b:02:5a:c9:8b:4a:a2:a8:68:4d:ee:
70:1f:9f:26:80:9e:d7:b5:36:4e:b9:b7:46:35:1f:
0d:38:ca:57:10:55:94:59:e2:99:a9:89:53:58:76:
4b:59:7a:f9:f5:46:c4:bb:e9:15:2c:1a:74:87:eb:
7b:84:ec:42:4b:50:c9:bc:38:d1:64:58:d8:6e:5e:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:12:EB:20:94:77:32:41:52:B6:20:E3:2C:6E:42:3A:61:4E:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/0f94adce-ee08-3d1f-952e-320e490ab5fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
X509v3 Authority Key Identifier:
keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.113.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:76:17:a0:b8:ef:0e:fb:53:20:ba:2d:e4:09:c4:87:71:c2:
f2:57:dd:5f:df:b2:71:8d:e2:a2:0e:de:df:d7:6a:1a:86:93:
36:45:96:c3:81:3c:a0:08:fd:fe:19:04:bd:ff:68:b5:e6:95:
ea:77:41:46:b4:9f:4d:18:65:fb:a3:f1:7c:9a:82:e6:76:13:
52:99:fd:2a:1b:02:55:50:76:42:78:ef:37:a7:77:4a:56:e8:
81:32:4a:aa:ff:3c:f1:7b:0a:59:ef:42:1e:74:b1:9a:d9:34:
31:75:21:f7:d0:79:e2:fd:83:14:65:1a:e3:4d:b5:d4:63:6d:
7f:50:10:90:2c:66:f2:34:5d:0a:64:06:5a:7d:3f:8c:36:09:
e6:d5:1a:48:eb:74:54:25:81:e0:e8:27:5f:33:e3:d4:da:ff:
b0:39:62:2a:2b:37:ce:ac:f4:bd:c4:ac:bf:a5:e4:80:a6:c3:
97:c1:39:b5:18:ab:13:32:b0:c0:38:e5:7f:31:48:4f:d3:ae:
08:20:20:8e:bd:fa:19:06:ca:80:2f:30:cb:fa:a4:e7:31:d5:
83:52:0f:6e:54:57:6f:ff:d6:d3:3b:02:62:72:94:9e:ef:99:
fd:f5:80:3f:66:ca:24:96:12:48:46:fb:47:b8:c7:79:34:f3:
f2:a1:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:24 2025 by rpki-client on console.sobornost.net