Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/df1b97c6-e9e0-3890-9005-82d844d80642.roa
File: df1b97c6-e9e0-3890-9005-82d844d80642.roa (raw, json)
Hash identifier: yy3mrwlD36jmVwWk2crStzWlf+be2kbH1VHGiINz5dA=
Subject key identifier: E5:AE:60:E0:74:F7:9B:36:43:03:CB:39:1B:51:66:84:08:CF:56:C7
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584981D4492EA30992018E419FC0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/df1b97c6-e9e0-3890-9005-82d844d80642.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 5769
IP address blocks: 207.253.143.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:49:2e:a3:09:92:01:8e:41:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=5a9c5a90-542d-45d8-be6c-7e9a8c8076dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:f8:32:6b:fb:e0:f4:c0:39:c6:1e:b0:27:
c1:4f:be:59:4a:ea:c9:64:f9:16:f2:4c:57:ef:fb:
3a:b7:ec:88:d0:f9:0c:c2:10:ec:37:b1:4c:c7:7d:
7f:9c:9d:4c:66:b0:e7:8e:c3:cb:8b:a2:62:91:ba:
ba:b7:3b:82:92:0a:0a:cd:7f:04:13:ea:fd:87:6b:
93:7d:50:78:0a:cf:d7:df:89:b9:e7:a8:9e:fa:90:
28:73:7c:1b:de:44:e1:49:45:f7:84:84:00:92:ff:
19:3e:86:33:ec:e1:a3:70:98:12:0f:0c:03:38:fd:
97:b7:90:3d:bf:f8:a7:b5:26:ff:fb:70:4a:c6:f0:
2e:45:45:e5:8e:53:f1:ac:2d:26:41:02:50:af:b6:
9f:c3:30:8d:f3:72:b2:c4:ad:c9:08:da:5e:33:df:
b6:36:86:bd:d2:a8:8c:80:45:29:3d:41:a5:43:6e:
8e:39:67:f0:6e:2c:43:da:38:ef:9e:4d:32:8f:e6:
0a:97:2c:1c:73:4c:f8:43:43:53:fe:ca:50:0f:69:
b0:8a:06:c3:6f:f6:6b:d1:da:cb:32:12:3d:75:89:
02:74:fa:32:56:d5:8a:4e:e4:a9:37:db:07:57:b6:
c8:ad:f1:00:48:dc:a9:98:99:e1:cc:b4:23:f5:0a:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AE:60:E0:74:F7:9B:36:43:03:CB:39:1B:51:66:84:08:CF:56:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/df1b97c6-e9e0-3890-9005-82d844d80642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:98:9e:fb:f6:ba:1d:ce:8a:d5:e5:8c:cd:97:d2:5d:c9:3b:
4a:ce:01:83:02:7b:1b:f6:8e:89:9e:7d:a8:ab:3f:a8:cc:88:
57:28:8a:80:cf:8c:ed:e4:8e:cc:1d:ad:b0:bf:13:69:3a:9d:
7d:22:57:72:20:5b:42:9f:cf:d6:2a:a4:93:c9:be:46:cc:45:
75:8f:9f:1e:80:a0:bc:49:53:2e:1c:5a:97:c6:b5:5e:60:28:
0d:a7:a3:ac:3d:29:f9:d2:f8:8b:66:a2:af:12:dc:6d:78:4c:
38:8a:09:f6:a1:91:78:b2:d8:e7:69:c7:f0:70:1e:bb:30:72:
b1:c6:23:37:b8:19:2e:9c:71:1a:87:02:b8:74:dd:da:a8:d3:
85:55:d3:5d:0f:37:ab:f9:b9:b1:89:75:54:e1:00:81:07:1a:
03:17:9d:09:01:b3:99:d5:c4:4e:ad:06:5c:16:dc:3b:4c:32:
1f:fa:c2:31:a2:59:07:6b:21:a6:79:c2:16:e2:e8:9a:08:54:
73:b0:ce:15:26:62:e3:c3:1f:de:37:e6:a1:fd:53:b4:f0:89:
4a:20:1e:2a:87:d2:63:82:d8:a5:c2:62:fb:37:50:fa:38:2d:
48:04:b5:84:56:a2:65:f4:f1:0c:31:0a:87:38:1a:86:04:6b:
de:70:7d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net