Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa
File: c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa (raw, json)
Hash identifier: dS1lx/gCMIoFTwRtRv8ToXmoP2cQ7VJRQR03fOz/p6o=
Subject key identifier: EB:F5:BE:21:8E:68:75:CF:0A:7F:A9:C3:9B:2C:0C:24:22:A4:DA:D1
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285849806F240642FECFF766A4BA40
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa
Signing time: Sat 12 Apr 2025 13:01:01 +0000
ROA not before: Sat 12 Apr 2025 13:01:01 +0000
ROA not after: Fri 11 Jul 2025 13:01:01 +0000
asID: 54989
IP address blocks: 64.17.97.0/24 maxlen: 24
64.17.119.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:80:6f:24:06:42:fe:cf:f7:66:a4:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Apr 12 13:01:01 2025 GMT
Not After : Jul 11 13:01:01 2025 GMT
Subject: CN=96b76b7f-3fe7-492d-b1a5-c88252ba14e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:a8:e9:f9:c1:c1:19:f9:95:88:df:6d:fe:
a8:b6:2f:b7:1c:79:f1:42:9b:83:ba:28:70:53:f6:
cd:b1:7d:e7:39:f5:56:e0:67:51:c7:0e:8f:a1:ea:
fc:db:c8:cd:85:df:ad:65:0a:5c:fd:c5:92:44:8a:
b5:d2:e3:05:fa:f6:88:89:ae:0b:79:cf:db:02:02:
c0:6e:b2:98:5b:d6:7f:38:9f:21:51:b9:2b:d8:64:
b4:a3:1c:15:83:01:1f:85:71:b9:31:37:40:ab:69:
6d:e1:4e:1c:e8:fd:47:d3:7f:1e:b1:f7:26:cb:ba:
24:97:1d:47:32:42:fa:df:da:2e:38:1a:20:c2:77:
bd:14:06:fa:d6:7a:71:5c:25:dc:ba:4a:53:2c:94:
31:b5:f2:92:64:a4:6c:1e:5e:c4:47:e5:3e:b3:c8:
69:20:4f:7c:d9:a0:0d:9a:90:97:c8:a1:71:d9:ff:
b6:9b:e7:77:e9:69:61:c0:98:e9:8f:69:c3:5f:d7:
0e:fc:37:c7:47:ee:f4:1a:7f:53:b9:9f:da:11:6a:
62:ac:da:9e:c0:b6:79:12:45:6d:9b:6a:8f:1f:f2:
9c:93:6c:3c:d8:7f:28:5b:a5:e8:07:fd:f9:15:fe:
a1:b1:9d:43:95:b8:e1:23:af:cd:34:8e:e2:c6:81:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:BE:21:8E:68:75:CF:0A:7F:A9:C3:9B:2C:0C:24:22:A4:DA:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.17.97.0/24
64.17.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:e0:5f:30:ff:c7:c9:d3:1f:8b:52:27:45:b5:d0:fd:76:fb:
a6:6c:42:c2:42:1b:1a:5b:2c:c2:dd:09:87:fd:87:fb:dc:b3:
36:98:56:82:f0:bd:dd:7d:05:f1:23:3f:5a:6a:07:ba:6a:52:
03:e8:09:0f:c5:da:4b:9b:43:cc:53:37:11:9a:c7:90:75:a7:
6c:06:bb:0c:f8:47:cd:13:c7:d1:3c:d0:3b:e4:43:d4:77:55:
77:3d:09:0d:db:7a:02:4e:91:69:97:e1:1d:aa:fd:9b:ed:65:
d6:eb:24:ac:61:22:d4:9d:cd:d9:29:c5:59:dc:b3:6d:8e:fd:
3a:35:fe:56:51:70:dd:2d:89:88:c2:a3:e9:61:ac:eb:6d:89:
c1:b5:67:7f:dc:a8:5a:4e:b4:85:45:71:a5:d1:c7:be:97:03:
f7:d5:34:c2:55:c4:ed:a2:e8:27:15:4f:c3:1e:0d:6b:99:8c:
0a:3d:b9:00:3e:13:cc:49:5b:52:e7:37:1a:40:7e:0f:60:d7:
06:2e:a2:bf:ee:5c:8a:64:9e:0d:bb:0e:4e:3e:9b:64:0b:f7:
27:21:db:58:5b:21:cb:8e:ae:47:30:3b:ee:64:ed:3c:09:f2:
b6:fb:0c:83:19:e1:9e:ab:19:69:40:68:a4:47:14:55:bc:93:
08:da:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net