Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
File: 79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa (raw, json)
Hash identifier: J2d0xYDX3x/BKT4NJmRT+rjehXag5ogE+T68M/u6Vm8=
Subject key identifier: E2:AA:70:30:02:BA:D8:FF:29:A0:61:72:03:11:D4:93:0F:C9:CD:46
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858495D89667E67101FBCF4CEB600
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 22652
IP address blocks: 70.35.217.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:66:7e:67:10:1f:bc:f4:ce:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=d559b561-7088-46b6-a8c3-950f9973603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:eb:68:cd:47:e8:30:0d:ca:c7:42:39:16:
49:d7:b5:9a:f4:83:6d:02:da:a8:9a:97:23:f0:4e:
5e:a3:46:5d:e1:b9:53:9e:e2:0f:34:b5:27:53:64:
90:01:85:b9:93:3b:8a:0a:1d:1c:9a:a7:d2:52:0e:
91:81:58:e0:45:21:a0:36:54:4e:b1:d1:99:5d:6f:
e1:08:21:60:25:17:9b:7b:94:ea:22:1d:01:c5:9f:
cf:75:48:53:9c:82:9c:3a:37:13:3b:d4:49:98:e2:
3e:ec:07:c1:cc:7f:13:8e:5f:c6:0b:95:bf:ca:16:
60:ae:55:b8:51:f9:38:0c:12:be:17:7a:ce:76:21:
9f:e6:ef:b5:56:26:ad:26:9d:14:c6:82:a4:32:f0:
fd:3a:e5:3d:54:3b:c1:97:55:9a:c3:c8:cd:38:33:
6c:45:76:15:c0:fa:55:ab:f4:37:8a:da:b8:af:33:
bb:63:f8:15:8b:9f:ea:5a:ca:1d:9f:1c:6f:97:8b:
cc:3d:81:14:68:10:30:ed:06:b2:be:d1:8f:01:38:
53:52:ee:d9:8c:5a:31:63:99:c0:aa:d0:6f:67:aa:
a7:b5:b0:ec:e8:55:7b:75:cf:ce:35:72:75:66:ca:
5f:b7:93:88:7d:59:7a:d0:4d:40:9b:32:26:d6:d5:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:70:30:02:BA:D8:FF:29:A0:61:72:03:11:D4:93:0F:C9:CD:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
70.35.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:bf:0c:8c:04:d1:6c:0b:e6:cd:9e:1d:e6:95:29:7c:35:79:
b1:5c:18:4e:61:07:4f:85:cb:ea:db:2b:2a:97:2f:7c:64:9a:
63:12:7f:eb:6e:3a:e4:65:3f:9b:80:81:12:d0:b5:f9:e5:92:
df:d6:48:b8:b9:11:4e:54:de:ce:96:d2:6a:aa:c7:48:4c:d3:
0c:0e:98:7b:68:df:13:12:b5:84:58:6f:92:76:66:9d:0e:1f:
46:c8:48:ca:cb:8e:1a:2f:c6:f2:d1:47:41:87:f7:9d:1e:8d:
b4:2d:e1:2c:08:57:52:1e:3d:2d:e0:a0:52:93:d4:3f:1e:20:
e3:e3:af:c0:d4:f0:97:ed:84:f3:50:15:da:91:89:5c:20:58:
35:a8:47:9b:50:21:e6:03:06:a9:05:f1:02:fd:37:25:b5:05:
ff:de:4d:3f:dd:b5:3e:a1:6f:c1:07:c3:16:02:62:4f:6c:f6:
9d:f2:9f:c9:a0:9e:a2:59:23:76:e6:37:c1:61:e9:c3:10:ac:
d5:06:c2:fa:21:98:47:34:23:df:61:e1:81:c7:95:c3:67:60:
60:35:bb:46:67:c8:e9:ca:18:3e:e9:e1:d7:a1:d6:89:94:c6:
67:9e:a0:29:9f:da:03:dc:65:e2:55:cf:d8:12:df:b5:a2:5d:
49:b2:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net