Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/bf01d3af-b9c6-3be3-9dc7-52c3221ae329.roa
File: bf01d3af-b9c6-3be3-9dc7-52c3221ae329.roa (raw, json)
Hash identifier: 4oRftS5E9JLvTCc399eYazRoRX4ClbLTCe/8t68f0tE=
Subject key identifier: 34:48:BB:FF:62:BC:0A:2D:6F:69:BF:08:0F:DD:7D:9E:C6:B1:F5:A9
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858495ABEE07919A60252B4639D00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/bf01d3af-b9c6-3be3-9dc7-52c3221ae329.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 22652
IP address blocks: 45.61.13.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:e0:79:19:a6:02:52:b4:63:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=15aee568-c717-46b5-9027-525d831faf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:0f:5a:97:5a:50:54:d4:29:3b:52:54:db:
e7:df:87:d7:9f:16:60:4a:ca:f7:c8:49:9d:61:36:
a0:b7:d4:3c:fb:97:36:a4:77:5a:5a:7b:d6:b6:f0:
65:78:85:4c:79:f0:e8:c9:73:71:88:58:30:06:76:
99:91:e3:8c:9c:df:bb:96:2f:59:af:2b:19:60:ac:
7d:ad:0c:e1:de:68:d8:51:a6:14:9c:90:b4:71:a7:
22:bf:33:78:a6:51:7e:3c:97:55:7c:29:76:1f:6b:
50:85:31:b4:58:c2:39:c6:61:b3:e7:1b:4e:38:8a:
f4:74:19:2d:e1:51:19:2b:00:a1:08:9c:df:06:7c:
67:0d:b1:dc:2d:19:23:c3:bb:63:62:44:5f:99:8d:
f9:06:94:4d:fe:f3:e3:a2:6b:c7:6f:3c:12:fe:71:
aa:34:76:07:de:13:2e:87:34:1e:64:1a:88:6f:1c:
2a:80:44:62:f7:b9:a7:cd:9b:1b:6e:fc:fc:c7:36:
c6:6f:4f:97:72:27:ea:ac:a8:00:d4:65:b7:08:20:
2e:bd:37:19:ad:94:79:76:5b:49:98:1c:0d:f8:9b:
6b:07:12:30:5e:83:bf:fd:67:b9:64:f0:10:21:d5:
b1:4d:f7:c7:ee:dd:4e:12:64:0a:87:fb:18:ea:e1:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:48:BB:FF:62:BC:0A:2D:6F:69:BF:08:0F:DD:7D:9E:C6:B1:F5:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/bf01d3af-b9c6-3be3-9dc7-52c3221ae329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
45.61.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:69:09:2b:cc:be:93:4c:0d:d1:87:10:1c:ca:40:81:8e:31:
40:19:5d:c9:02:eb:09:1e:8f:84:cc:55:3f:84:05:9d:56:f1:
aa:15:c3:1b:e3:27:52:8f:03:76:70:d1:5b:16:97:05:12:8b:
96:5c:d3:c9:21:3d:08:0b:c8:c0:4c:2b:12:cc:ee:c7:38:75:
3e:a7:01:e3:db:b0:20:20:df:f0:3a:84:e3:3d:8c:95:56:24:
c5:c4:f8:36:fb:7b:f9:f9:aa:2f:86:33:34:70:82:81:8b:23:
70:19:1b:b6:cc:17:42:80:3e:54:86:ec:f9:06:38:93:47:ee:
8b:d3:81:29:54:a1:01:2c:f6:f3:b3:72:a0:97:71:ac:fa:1d:
62:4c:b3:9c:94:80:27:7a:10:ba:dc:5e:dc:6d:2c:16:1f:63:
31:a5:6e:c0:30:3c:d8:a0:5e:64:1b:87:61:81:11:90:49:b6:
9e:0d:64:a5:7e:7f:a5:77:ab:de:0a:13:ce:18:2e:5c:7a:af:
71:d0:6e:e8:c9:c5:de:c4:4f:eb:3f:c5:cb:d5:1d:44:97:67:
e1:d9:ce:6b:9c:05:45:df:8f:ae:c8:35:f5:7b:b6:93:61:72:
01:8e:a3:79:57:6f:dd:1e:a1:e0:1d:42:66:9f:80:8d:2e:eb:
29:f2:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net