Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa
File: 49ed5a06-61cd-30da-8170-9d7403ef7745.roa (raw, json)
Hash identifier: miC/FF3+LkPXE+f+j5v/RrtZVaQzGIrN5wjpj8vWZCE=
Subject key identifier: 81:02:90:FC:6F:2E:35:A8:CD:40:14:1F:29:3B:ED:94:E2:B4:CF:76
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858496054168FA695633694938AC0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa
Signing time: Tue 01 Apr 2025 01:00:47 +0000
ROA not before: Tue 01 Apr 2025 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:00:47 +0000
asID: 22652
IP address blocks: 192.252.128.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:54:16:8f:a6:95:63:36:94:93:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Apr 1 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=a48e9faf-7d00-4e1a-8053-0bca905e199a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:b8:fa:c4:1a:4b:0e:aa:bf:98:04:41:b7:
44:a8:fa:9e:79:b9:06:48:21:0f:07:59:f2:27:43:
36:b0:4f:2d:19:02:55:72:f3:3a:8b:0b:58:84:e4:
44:93:b6:d2:4d:6c:03:11:e0:bb:0d:0c:9f:b3:9d:
eb:18:30:80:97:11:bd:5c:06:4d:9e:3f:55:c2:88:
84:9c:b9:0a:4e:8c:41:5f:5e:e0:ae:c3:25:f5:af:
ed:f4:17:23:28:6f:ac:a9:ca:0c:fd:01:0f:b4:62:
bf:a9:5d:f3:cb:e4:f8:f2:40:da:65:14:a4:49:d5:
e5:01:89:9b:92:82:28:e0:62:b9:8f:52:07:55:d3:
df:b0:58:5b:14:7f:4c:e3:72:9e:3f:60:8d:fc:c9:
af:66:5c:5b:76:d6:c8:06:e5:ac:af:bf:e9:19:44:
f3:e1:3d:a6:cc:f3:df:67:3a:f9:f5:3d:5f:c4:45:
a1:52:de:5b:89:f9:ea:17:91:4a:1b:0e:1f:9d:b9:
99:6a:71:10:67:10:e0:3f:9a:a2:78:b9:d8:0e:4f:
e7:92:f7:e2:c2:c8:fb:b5:cb:36:5e:a3:d0:bc:85:
2b:7b:18:79:9a:cc:7a:ee:29:f9:76:8f:e0:5c:b3:
69:17:53:09:01:7e:6f:23:b9:ac:18:c7:3d:d2:2c:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:02:90:FC:6F:2E:35:A8:CD:40:14:1F:29:3B:ED:94:E2:B4:CF:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
192.252.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:7f:50:f5:ab:b2:9c:0c:0a:d6:b6:24:f5:96:7e:eb:bf:01:
4b:c8:fe:01:a6:db:5a:27:89:5c:70:43:14:58:1c:67:3c:8d:
57:0f:c9:36:e2:7e:0e:40:c5:04:8f:72:d5:4a:e6:37:7f:25:
e3:f2:17:d9:17:b3:21:c8:89:34:3d:5e:77:d1:b0:78:bf:55:
61:85:92:fb:56:6b:a7:96:03:b3:25:a4:e2:21:41:0b:d1:2b:
35:b1:a8:f4:6f:25:4f:50:44:9f:00:cc:b6:a0:a5:97:cc:6d:
80:8a:9d:96:65:ae:98:9d:fb:69:43:78:b5:83:23:e1:f4:ed:
42:f1:14:46:a6:15:62:96:74:1f:25:fd:03:49:cb:c7:49:4d:
6c:72:e0:bb:da:80:d9:da:4c:d4:79:fa:cd:d4:b7:31:4f:c6:
7a:28:30:b7:6a:8b:cb:a8:cf:b2:1f:6c:d2:dd:f0:15:7c:86:
e8:21:46:ad:98:fc:b3:c0:83:28:3b:da:56:25:10:2c:bc:d1:
a2:35:bc:e6:4c:28:db:31:6d:8c:c9:92:d3:10:1c:a2:06:96:
4a:eb:84:ee:f7:f1:5d:99:0d:75:7e:22:7e:e3:28:ef:9c:8d:
8b:98:d7:ed:b1:d3:98:c6:47:e7:88:1f:cb:06:dc:a4:18:c7:
2c:e7:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net