Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa
File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json)
Hash identifier: N650mvvedp/nTrcW2RaCZjFJAgGTBSBghQAUwWS8Evg=
Subject key identifier: C2:3D:BD:C5:0E:04:89:F0:A1:91:BF:0B:2D:8E:19:FC:CC:13:31:45
Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001
Certificate serial: 010D0C9F432858494469321E2C395A39FA77F8C0
Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 923
IP address blocks: 207.167.121.0/24 maxlen: 24
2602:fbf5::/40 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:32:1e:2c:39:5a:39:fa:77:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=3bf32f50-f888-4409-9de1-c5939a785182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:7c:46:88:eb:15:88:cc:b2:52:d8:29:0b:
2f:73:e9:9e:bc:96:31:d4:3a:d1:e4:05:5b:bd:70:
27:68:8a:77:bb:60:c5:8a:30:91:e9:59:c8:3b:a5:
f5:91:79:2d:d0:67:53:6a:95:df:d9:5e:8e:c4:f4:
8f:06:7d:fb:97:fc:0f:2e:12:47:8f:58:8d:50:66:
26:b2:f6:ae:81:f5:bd:9e:1e:78:34:b4:90:cb:bc:
6c:b8:8e:99:b3:a5:c1:ab:3b:a8:24:47:88:4e:da:
74:ca:12:86:85:43:c0:38:6d:a6:d3:57:6d:c1:45:
71:9b:bb:3d:1c:fd:a5:c9:3a:fc:0a:75:ca:06:cc:
41:f2:36:90:87:71:cf:7a:5e:91:d3:0f:45:0d:95:
63:b4:07:ff:0e:44:32:4a:e2:a6:49:26:58:5e:7c:
12:0b:6a:ed:09:b4:d7:2b:ae:0d:c5:e9:ea:d2:38:
b7:c9:ec:77:f3:97:fc:97:ff:4b:25:b5:4d:99:36:
10:25:a9:9c:9a:55:9a:a4:00:bf:2d:f8:cd:d4:d3:
84:fe:5f:dd:d2:4d:a5:d6:bd:b3:e5:8d:27:d9:11:
6e:29:95:f2:05:2e:61:49:c4:ce:5b:5f:ee:de:46:
d4:8d:db:37:9e:90:0a:ee:6e:d6:83:45:1a:5d:3c:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:BD:C5:0E:04:89:F0:A1:91:BF:0B:2D:8E:19:FC:CC:13:31:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl
X509v3 Authority Key Identifier:
keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
sbgp-ipAddrBlock: critical
IPv4:
207.167.121.0/24
IPv6:
2602:fbf5::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:8f:f7:b3:03:3e:96:16:13:bc:00:bd:67:10:2c:e1:ce:d2:
66:e4:d9:2e:3e:91:c5:3f:bd:d1:cd:e7:69:92:b2:9f:34:5d:
9e:82:e6:8a:01:f3:bf:35:c1:d2:ee:1f:47:24:27:88:af:0e:
a2:03:76:80:36:de:7a:34:56:8d:dc:a3:c7:da:a0:d0:26:f4:
d8:3d:71:04:b5:0a:2a:0d:4d:91:ee:3b:e6:31:29:04:47:50:
9d:3f:db:45:07:0c:38:b3:0a:0a:47:1b:28:ef:cb:dc:6c:55:
28:e9:3c:17:ac:a3:85:76:4b:20:7c:49:9f:00:7a:57:fc:b8:
6d:a1:bd:37:a6:f0:3d:9b:ca:85:43:a2:dd:11:27:ed:7f:2d:
58:77:d3:63:b5:eb:2f:53:2f:74:d1:92:33:2d:15:36:94:ba:
fb:77:39:64:0b:7a:9f:3c:1c:37:0e:41:bd:ff:f7:66:8e:30:
ef:43:be:54:4d:d2:63:92:70:d9:e8:28:e8:f9:ac:ca:52:83:
1b:52:84:78:54:1b:9c:eb:10:59:01:92:26:c4:05:3b:a6:a4:
5b:4a:02:29:98:86:dd:00:01:e5:02:62:51:bc:cc:a2:9e:52:
43:6a:5e:f4:c4:bc:49:95:1e:aa:66:90:23:c7:cf:cf:43:c4:
28:6f:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net