Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa
File: 4756446c-96ad-309f-b6b4-5601e968e103.roa (raw, json)
Hash identifier: jNTpKNRxcS77da/Z2MzJsv3bVttH8eNNLNwv5O9hKHs=
Subject key identifier: 61:E9:ED:7A:98:79:36:CF:9F:75:80:61:74:B1:3E:EF:56:36:48:95
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F432858491246C884199563AEC5C2C900
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 27446
IP address blocks: 64.147.211.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c8:84:19:95:63:ae:c5:c2:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=93db5270-3474-49f8-8a67-ebf3d4a46c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:04:a5:14:fa:98:9a:a8:f1:45:43:91:8d:
30:07:ee:27:71:fd:ed:de:71:9a:33:96:3e:9e:bf:
69:61:ff:46:62:d8:c0:ba:db:61:48:9c:3e:68:18:
78:c2:a9:8f:f1:e8:de:ff:e7:3f:b5:1c:62:35:e3:
04:ab:ba:2f:81:a2:2b:8c:8e:b4:5a:f7:39:5b:42:
40:8a:90:54:65:19:66:6c:7c:f3:34:51:ed:3b:1f:
d8:97:c4:d2:d2:12:ac:23:fe:2d:c1:f0:6d:58:7e:
1f:81:c9:c7:20:0b:fb:cf:5f:bd:1e:c7:6a:24:20:
15:d1:0c:db:09:e6:79:7a:71:c7:a1:0f:89:85:2e:
f7:b7:8f:0d:f0:ca:b9:7b:f3:44:21:85:7e:72:72:
1b:0c:13:0f:47:7d:3c:1e:59:de:77:01:98:32:f7:
52:68:22:0a:94:9a:dd:75:2e:cc:b8:ae:83:39:f1:
59:2a:8e:f6:d0:c0:ba:70:f6:23:bc:a0:1d:bd:14:
4d:e2:27:42:77:96:47:74:b5:a4:3d:48:a2:e2:86:
52:b0:c3:31:96:30:9a:be:c2:d9:bc:e3:17:39:54:
09:b0:82:12:ed:55:79:1b:ba:b9:a0:07:90:a0:46:
d8:6d:7f:af:f0:b1:2a:52:88:ea:b8:37:a6:23:65:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E9:ED:7A:98:79:36:CF:9F:75:80:61:74:B1:3E:EF:56:36:48:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.147.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:92:24:25:08:39:2d:63:b5:da:b7:10:88:eb:27:a8:85:68:
49:c3:02:71:83:f5:8e:c8:88:95:0f:8e:8a:26:c3:d8:80:b9:
c3:1e:68:10:32:d6:ba:01:a9:91:de:33:74:02:7e:bb:da:93:
55:99:69:c2:94:cb:92:46:c1:23:fb:f4:bd:8e:c6:4d:82:40:
ea:6a:6d:f0:ac:3b:56:8e:27:17:6e:1e:44:a4:04:5d:d0:21:
19:9a:7f:bd:c6:43:15:32:b7:a2:18:d0:bf:d5:f1:9b:17:35:
99:39:07:86:b7:76:ba:c0:7f:52:5c:c0:3f:60:60:c7:d0:34:
3f:40:53:85:ce:4d:c3:42:cb:53:ce:55:e1:35:51:d1:0b:d1:
6b:37:b4:b2:16:0b:6b:2d:a7:0a:f8:0d:75:7d:aa:86:52:17:
b1:99:d6:f0:3f:3c:91:96:68:fd:d6:68:47:c9:79:c2:72:e2:
b4:ed:c0:f5:db:86:39:bb:34:80:85:1e:15:8d:a9:2c:22:7c:
33:5f:68:17:2a:31:6c:99:7b:0a:25:10:58:e7:9a:f8:67:0f:
32:58:6d:46:ce:18:92:32:a2:03:76:b1:7e:4c:4c:76:7b:bb:
56:f6:26:8c:ad:1f:75:67:2d:7d:74:90:0b:d2:ea:bd:b0:58:
57:3b:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net