Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa
File: a71bf399-4b1b-3700-8996-65eac6cc402a.roa (raw, json)
Hash identifier: gdUHk+IStLGhCMUdVWCbDW6vE7+chQCbU72zxaAmGzY=
Subject key identifier: 2F:F2:44:07:7F:23:76:CE:8C:28:48:48:1B:87:74:10:4B:0D:D6:FC
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584905B6B107620BDE996384DC98
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13536
IP address blocks: 66.231.216.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b1:07:62:0b:de:99:63:84:dc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=ed54f29a-92e5-4151-bf52-c61d98dbc9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:8c:bc:73:33:87:c4:46:2e:8d:61:09:66:
b8:e3:db:90:a6:8c:d1:60:26:2b:ef:85:6a:9b:17:
b4:97:d2:b6:52:c6:b5:7f:86:41:f8:47:25:06:b6:
4d:20:91:c7:33:9d:7c:34:b7:b1:e8:7d:9f:29:bc:
5f:09:f7:54:cd:64:4b:d7:6a:7b:ac:e5:50:4b:9e:
fc:fa:53:db:f7:f2:38:4b:5b:2d:6b:e8:98:b6:32:
1d:92:5f:ac:c2:a5:ea:ed:8a:2d:97:00:39:0b:36:
84:c1:7a:14:54:38:0a:de:94:19:76:31:af:00:c5:
ff:ca:6e:c8:31:72:bc:42:3f:c7:7e:70:b3:6b:05:
fd:ce:45:26:53:b9:97:46:5d:b0:cf:38:18:3b:6f:
a5:35:66:d8:fd:56:23:30:5e:30:ea:65:27:89:c5:
23:e2:3b:ee:77:a9:8e:7f:2d:e4:bc:44:ba:31:ee:
72:e8:3c:7a:21:f9:ee:ff:0d:e5:ec:95:7b:58:76:
a3:99:e8:2e:26:31:34:4b:f7:06:b7:70:e5:a5:1c:
07:a0:7b:e5:50:14:83:53:de:49:30:c3:2b:6e:c1:
06:1e:90:ce:51:23:3a:a9:06:04:fd:f0:8a:1c:bc:
d5:9c:2f:ca:46:90:57:dc:1e:73:0f:46:00:c6:1e:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:44:07:7F:23:76:CE:8C:28:48:48:1B:87:74:10:4B:0D:D6:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:8b:a5:51:62:ed:6d:2b:4f:2a:dc:d3:10:45:16:8d:21:fc:
2c:ac:60:a0:4b:b0:00:f1:ab:9e:6f:53:d8:db:c7:aa:5a:7f:
49:6c:62:eb:26:03:ad:ae:b6:e5:86:bc:f1:03:04:46:d0:53:
1e:cc:17:0d:33:54:31:85:42:47:f6:d1:88:6f:89:91:25:25:
1d:7c:79:eb:61:62:df:8a:71:7f:83:8f:41:be:73:80:14:87:
21:54:eb:71:fa:61:8c:5c:bb:af:f8:64:4f:41:d6:05:42:69:
29:e7:ec:1b:37:d9:c8:8f:55:c8:58:1b:1c:d3:b6:81:ca:3e:
32:6b:42:bc:8b:fd:e4:2a:39:c3:d3:42:40:3f:0d:0c:af:15:
2a:60:58:62:2a:8b:5a:d4:bd:5e:d4:8e:3b:52:9d:e2:cd:1d:
d9:69:f8:d9:6a:f0:54:09:ba:14:9b:26:89:a0:1f:0f:7c:2f:
5a:01:5f:26:14:e7:3d:e4:ef:47:db:1b:bb:86:b9:d3:37:74:
d8:33:52:58:99:ee:95:93:59:b8:4b:20:6f:c2:cd:be:82:3e:
b1:71:5c:f9:c7:22:33:e0:41:79:ae:b1:df:e8:a2:7f:bf:02:
24:4f:d2:e3:f3:e2:6d:19:d7:b6:6f:4d:3c:34:1c:ed:f3:4d:
6a:c5:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net