Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa
File: 1bbe69ec-9686-337d-a609-e5cb951dc776.roa (raw, json)
Hash identifier: 2se2FwZEpdrJ3oCOnlWkXiSa9VhOh6TRfNNse3pw8yM=
Subject key identifier: 72:65:F9:BC:60:5A:81:72:06:F4:80:34:87:83:27:96:27:89:5A:EF
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285848F22C6C2F2926456ED187C580
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.144.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:6c:2f:29:26:45:6e:d1:87:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=e964034e-e6af-4c07-b684-6460de0c37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:b9:6f:2b:31:01:02:14:db:d2:67:ff:3f:
13:e9:80:0b:94:83:ae:bc:36:8c:0c:de:0a:4a:f8:
04:a2:65:ee:4f:8a:07:4b:15:34:85:8b:f4:d4:33:
bc:16:8a:80:75:ad:c4:d2:63:fe:40:7c:27:c7:5b:
02:f3:41:45:b5:d2:a8:57:a3:08:25:d1:de:76:c2:
ad:4a:ec:b8:b1:52:e9:4f:93:f9:4d:44:52:72:6e:
86:78:5b:7a:bd:08:bf:b5:3a:ae:86:cd:d1:ef:fd:
b6:cb:7c:77:01:4a:43:ca:10:29:cc:5e:8b:0a:a1:
bb:bb:e2:7b:ad:20:0e:fd:79:b7:08:b7:a3:13:0d:
61:0b:5d:7b:55:74:a5:b0:4f:fc:68:9e:a7:dd:bc:
09:70:a5:35:56:a2:17:4f:3a:d7:bd:12:16:26:21:
88:63:23:de:6e:35:96:2a:03:74:a1:aa:90:4d:5a:
05:4a:ce:88:a1:b7:a4:f0:34:05:fa:38:bb:b0:6d:
aa:81:2d:70:e0:e4:bc:61:d9:95:5b:a9:07:00:9d:
83:74:6d:73:60:82:98:32:07:61:69:1f:fc:83:f5:
9d:e3:31:0b:39:38:da:b5:3f:34:98:f4:1e:f7:3f:
80:ce:63:31:99:ec:d5:49:ee:dc:f3:ae:b6:1c:0f:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:F9:BC:60:5A:81:72:06:F4:80:34:87:83:27:96:27:89:5A:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:27:67:38:f7:d4:92:61:a7:dc:e6:d4:60:2b:fa:89:00:c8:
d6:97:cc:33:6b:ad:9d:c1:77:18:01:90:ec:56:65:4f:f7:fd:
d1:2c:32:c2:71:44:7a:ae:13:2b:31:8e:be:8c:d3:5a:55:ea:
4c:3d:80:99:6c:9e:79:18:09:a5:39:b4:35:86:d3:fa:7e:c2:
b0:54:05:85:43:86:05:f0:d5:52:f0:16:e7:33:91:5a:27:b6:
55:cd:53:e3:e2:78:b1:29:9f:66:f2:27:bc:9f:dd:b5:d5:a2:
4f:1b:51:95:80:2a:70:bf:03:09:25:ee:2f:04:67:02:1f:41:
7d:ec:94:41:03:ae:6f:e0:45:3b:86:a8:96:1f:65:24:19:a1:
10:0c:66:81:6d:3c:a8:83:6d:07:23:0d:29:f9:d2:29:4b:a3:
fa:ba:01:e6:88:c3:a2:d5:41:58:b6:ec:fa:ad:a2:75:ed:f1:
b5:91:6c:1f:a1:6b:ae:af:50:32:a2:54:5e:38:e2:eb:20:a4:
6e:c6:20:b2:b1:0f:5c:56:6a:e6:a2:08:ce:20:99:49:5a:b5:
6a:12:b0:98:11:4e:9f:9a:df:bc:4c:1d:9e:66:d1:37:7d:b6:
90:40:9a:ef:d3:21:ca:3e:1e:91:ed:7b:14:82:f2:7b:d5:6a:
54:70:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:25 2025 by rpki-client on console.sobornost.net