Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa
File: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (raw, json)
Hash identifier: NBLRT5Wz8XeA6Cyv8p7omLfu8hLr71dpXJIucAHIgDg=
Subject key identifier: EB:72:4C:E9:3D:6D:E6:53:99:99:DC:F3:E6:9F:BB:0C:4D:ED:4C:6F
Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04
Certificate serial: 010D0C9F43285849244E7AF11445A888B9BA2D64
Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 9009
IP address blocks: 72.18.92.0/24 maxlen: 24
72.18.93.0/24 maxlen: 24
72.18.94.0/24 maxlen: 24
72.18.95.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7a:f1:14:45:a8:88:b9:ba:2d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=72defa33-dfb8-47f2-82b0-0649fdaa40e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7c:da:bc:8f:56:ee:f3:d0:6d:a5:e3:1a:9d:
ce:2c:ca:08:f2:ac:a7:12:00:1f:9c:5e:bd:54:13:
7e:94:c8:c4:54:85:e1:d8:78:ab:23:1e:2c:13:90:
96:16:82:3c:e3:a1:95:4d:dd:c3:05:1a:6d:7d:49:
ea:7d:22:b4:77:76:93:8d:7b:e4:82:25:85:27:d9:
8b:9a:7f:93:58:f5:a9:12:97:0d:1b:d6:57:ee:68:
95:c8:f9:46:a4:01:3e:0a:b6:08:7e:98:c8:ba:3f:
df:b2:91:f9:6f:48:3f:b2:99:b4:42:1b:8b:f3:55:
bc:d3:1d:7e:24:31:01:dd:89:68:ac:bc:d4:d6:35:
88:86:ee:8b:11:4f:82:c0:24:08:c2:c6:02:2b:fc:
b8:21:9b:ec:76:95:ab:24:1f:92:19:ee:a4:66:08:
94:c6:fe:f8:97:0f:81:d3:62:96:a0:76:0e:73:9d:
b1:39:77:a0:79:b2:c3:6a:85:ca:b8:4e:78:a0:20:
72:10:6e:12:a9:92:18:49:28:13:8a:e2:8a:31:7f:
d3:4b:53:7a:bd:6e:04:9a:77:38:f7:76:0a:84:a9:
75:37:7b:84:14:8b:8f:91:d1:a2:c5:b4:34:88:ec:
19:5a:f3:6a:3b:03:6f:a3:fb:af:6e:13:5a:47:ad:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:4C:E9:3D:6D:E6:53:99:99:DC:F3:E6:9F:BB:0C:4D:ED:4C:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl
X509v3 Authority Key Identifier:
keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:c6:0b:e8:18:08:7e:70:8f:4f:fe:20:26:35:75:8c:40:fe:
d6:5d:af:54:dc:43:f6:a4:4b:e3:f3:68:c9:d3:35:cb:1f:0f:
57:a4:c9:33:8a:f0:6f:28:77:79:89:d5:20:86:2b:95:05:7c:
4a:bf:62:88:cc:b9:f1:df:a5:43:4b:e9:8f:0c:bc:09:9b:36:
57:fe:d4:40:ad:f9:ce:50:dc:61:fd:7d:bf:47:c9:a4:47:c1:
2c:ed:eb:4c:3a:f2:26:d0:07:13:ce:16:66:bc:4f:38:d8:47:
7c:5d:3b:5d:72:a0:61:98:14:4b:34:60:b9:ed:64:1d:61:1b:
82:68:77:9d:03:04:c9:01:68:d8:ba:ba:45:0c:3e:95:cc:61:
ca:04:8e:59:13:e1:d6:fb:f3:dd:55:a1:5e:63:ca:5b:2f:4d:
6d:66:b1:31:af:1c:1b:f3:85:4f:e9:64:95:66:98:35:e2:d8:
a7:45:28:fa:99:a2:bf:55:9a:18:90:be:62:7e:30:5a:a8:d6:
e1:a5:90:99:30:d0:bb:3d:5f:7b:05:25:f1:ea:e0:f1:12:5f:
50:e1:26:53:87:03:80:dd:44:48:9b:0c:5f:af:d0:4f:66:f6:
71:0e:29:06:ea:ab:94:62:18:73:40:a3:c9:16:e7:a4:c1:06:
60:a3:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:30 2025 by rpki-client on console.sobornost.net