Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa
File: 502da292-08a8-3b75-bc4b-8d390e5fe580.roa (raw, json)
Hash identifier: ZFJ0k0+mxVvnIzTH3JGgiqce4jILSrByjImwkz3cEFw=
Subject key identifier: 9D:9A:B8:42:99:C5:58:C1:DC:E4:17:FF:BE:A1:17:BA:EF:BC:E6:01
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F4328584937D93E17026E1D3E18733080
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 398210
IP address blocks: 207.211.240.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3e:17:02:6e:1d:3e:18:73:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=8aad30e5-ba6d-4e24-aae5-6c5bed7817ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:78:99:9f:14:f3:0b:f2:d1:4a:11:a2:3d:
73:37:72:63:ca:6b:db:f4:40:0f:e8:0e:c5:4b:ae:
c0:65:75:ef:80:63:5b:d7:57:74:f6:0e:29:3e:23:
63:cb:b5:ba:bd:9a:3a:ba:ad:2e:77:9a:40:2c:bf:
ba:e0:8f:2a:25:3d:84:e6:b2:17:12:ad:58:9d:9d:
46:8a:9e:8b:51:25:47:4e:ef:f0:ba:d8:b5:ab:a7:
54:3f:12:8e:e4:dc:80:13:15:a4:2d:01:53:7e:71:
be:5b:09:9f:cd:6d:41:c4:79:d6:c3:56:eb:73:5a:
9e:b5:75:d2:dc:b1:f1:08:4d:74:e7:d6:94:3e:e0:
50:87:9c:c3:a1:9c:00:f0:99:02:b1:64:72:7f:a6:
b3:88:e0:c4:95:2c:2c:12:30:e7:6f:5b:f0:55:65:
d7:75:51:85:18:db:e7:6b:be:e1:e2:63:83:d8:1c:
d2:17:e1:19:12:07:74:69:ff:38:74:1b:30:66:0f:
e6:f1:da:0d:83:1d:af:02:29:95:db:4a:a7:f4:3d:
9c:c0:20:e6:4b:fa:4d:09:9e:21:ab:5b:41:f2:43:
18:d5:d0:09:74:ce:3c:43:02:1d:5c:48:b8:23:83:
46:e1:b5:e3:9f:ae:b8:f2:f7:ba:db:28:79:4d:22:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:B8:42:99:C5:58:C1:DC:E4:17:FF:BE:A1:17:BA:EF:BC:E6:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
207.211.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:4a:ca:99:d9:95:42:55:ba:e9:e9:04:af:60:2e:45:31:ff:
e5:f7:0e:80:55:bf:8e:1a:14:8b:79:20:63:04:8b:0b:b3:9a:
46:83:1c:a4:ff:e0:52:e2:1b:b4:dc:4b:d4:2f:64:ea:df:b9:
23:09:40:64:27:5c:25:49:77:89:17:69:7e:2a:5c:dd:53:94:
4f:13:71:f1:ff:5f:a8:51:cb:8c:72:99:6e:5c:da:28:a4:fe:
69:c4:9e:b0:2a:0b:ce:96:73:a6:4e:f5:00:ae:d2:e6:ae:f3:
28:5b:38:21:ff:16:41:93:73:88:ad:42:ca:4d:c0:37:f4:a4:
16:42:4c:6f:07:ec:c0:41:34:da:93:e9:9b:cc:ff:9c:73:de:
b9:66:7c:fb:7e:50:ff:89:ce:01:b9:bd:23:e6:f2:f0:ed:8e:
05:0d:12:d8:2f:8f:b1:2a:22:30:63:59:5c:33:df:6b:77:51:
e8:b7:74:6d:0c:97:72:f1:7b:7d:cb:be:e6:eb:b0:2a:fc:d6:
5c:34:a8:16:db:e8:0e:15:2e:1f:97:a9:87:2d:05:c4:81:03:
6b:7a:82:67:58:7f:c4:41:b6:44:70:8c:3f:40:73:58:21:15:
bf:d0:04:f1:14:a8:f1:4e:dd:80:18:56:f1:44:88:06:eb:04:
05:bb:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net