Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa
File: 7253bf54-50b6-3248-9cd9-f777bdd3845d.roa (raw, json)
Hash identifier: aymGFXbtyDa2hwKgIIi8wGQD14xZ2byqwdRWYYBtKR8=
Subject key identifier: 7E:1B:13:AB:B0:6E:74:51:30:B2:29:EF:A8:B6:63:56:16:4B:0F:9D
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584979743D5BF51D55EFBDBFAE00
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa
Signing time: Thu 10 Apr 2025 01:00:46 +0000
ROA not before: Thu 10 Apr 2025 01:00:46 +0000
ROA not after: Wed 09 Jul 2025 01:00:46 +0000
asID: 13536
IP address blocks: 209.198.82.0/24 maxlen: 24
209.198.93.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:79:74:3d:5b:f5:1d:55:ef:bd:bf:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Apr 10 01:00:46 2025 GMT
Not After : Jul 9 01:00:46 2025 GMT
Subject: CN=ecd4de2c-1d67-4292-bfb7-11f14c452bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:d8:6e:5c:7e:51:2f:29:f3:8b:df:9d:94:
3a:f6:58:e7:4b:25:32:88:ab:ab:9b:ff:03:3c:96:
24:fc:b3:d7:e2:d9:7e:a1:b1:e5:77:b0:0c:8c:c3:
33:90:25:69:ef:a3:e8:c5:dc:f2:33:d0:65:23:55:
ab:03:14:36:0e:0d:91:5c:5a:ee:bf:6f:22:4f:b2:
b4:95:df:2d:9e:bd:b6:f6:a0:44:b0:48:0f:9d:e1:
e5:9a:e6:e3:0b:c7:8a:c7:19:33:9c:37:27:18:e0:
a9:91:6f:ac:23:10:40:1d:9b:4e:42:f8:68:20:54:
25:c2:85:0d:57:20:a4:6a:71:a3:ae:8d:1e:71:4c:
65:a4:e0:88:d5:47:de:b1:85:53:a3:97:96:69:63:
41:e3:55:97:ec:ab:ce:41:0b:03:ca:a1:a9:46:c1:
69:b9:f3:64:fd:ae:02:64:c9:3c:28:72:36:1c:74:
3f:ac:9f:1e:f6:6b:de:87:f0:15:1d:a1:63:2a:7e:
4f:05:27:79:8d:15:30:ab:95:ce:28:3e:95:21:3d:
e6:21:c3:8b:d8:90:9f:df:52:b7:68:b5:ea:81:47:
cb:39:ad:13:de:cc:d4:64:b8:4c:92:7c:66:31:ce:
0a:6b:e2:2a:ae:2c:c8:55:f7:b4:00:0b:55:bc:64:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:13:AB:B0:6E:74:51:30:B2:29:EF:A8:B6:63:56:16:4B:0F:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.198.82.0/24
209.198.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:09:70:22:bd:61:9e:49:0a:cd:71:df:b2:b8:3c:eb:62:e5:
ce:a1:c8:25:89:f8:63:0c:af:ee:fc:79:9e:66:79:7b:31:01:
c3:a2:bd:5a:c9:34:46:3b:32:1e:18:11:f9:c0:28:62:12:81:
b9:2c:1b:2f:65:39:f0:69:5a:70:67:f4:b3:3a:bf:39:ad:2d:
5f:f7:b4:cf:72:ed:13:3b:5e:7c:29:88:10:7a:2f:d8:ec:8d:
29:bf:4e:20:ba:2a:aa:69:21:27:f3:ef:14:7d:4c:ff:b9:4a:
57:d9:b2:ee:d2:b4:43:ee:8d:1a:b0:3b:a9:62:98:d1:26:18:
d3:a8:93:48:71:0e:f2:b0:a9:0f:67:9a:3b:e2:bb:b0:d0:23:
cc:60:35:71:8f:76:25:a3:69:f7:93:cb:59:27:3a:56:cf:05:
02:51:f1:16:16:72:55:79:53:df:77:c2:79:42:94:9a:fa:0f:
8a:e3:93:3b:f0:9a:23:13:fb:f1:9b:f4:75:55:56:51:6f:47:
e7:75:e3:2c:2e:f4:98:5e:db:69:ad:34:3e:27:0e:38:de:c0:
6f:11:2e:cc:73:5a:fe:f5:a8:c5:c2:52:9a:fd:4d:3f:e3:f8:
07:d6:4c:01:b9:b0:a4:8c:f3:7b:36:e7:95:5b:cd:05:8e:06:
3d:47:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net