Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa
File: 7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa (raw, json)
Hash identifier: 844BKdtMEGuGQRN8dklnTZRQemer76SnqbV6No8Yjvg=
Subject key identifier: C1:B3:E1:83:B5:06:86:85:73:87:C2:AF:62:08:39:3E:CB:70:9B:3E
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F4328584937D939AA8A15CC4DF958CB40
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 398210
IP address blocks: 168.220.160.0/19 maxlen: 19
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:39:aa:8a:15:cc:4d:f9:58:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=2cb91eb2-adea-4aaa-bf6c-b7be7c80acc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:6c:33:5d:47:0b:37:78:89:20:4c:67:37:
ef:e0:03:ee:4c:bc:dc:48:6c:73:71:f8:7d:65:3c:
d1:82:6b:d3:e1:84:17:a7:93:0a:fd:1b:f5:52:71:
cd:74:4e:1b:4f:a8:42:b5:bf:fb:60:4e:3b:2e:ed:
86:22:71:80:95:b2:7b:cf:aa:a7:75:36:09:59:53:
23:fe:31:1c:e5:b7:79:d2:19:c6:99:3b:ab:de:b4:
80:0a:67:1b:22:9f:5c:22:e5:06:4d:f8:1a:f0:fe:
91:b7:cd:be:52:f4:c4:6a:e5:22:35:15:33:64:c6:
d3:e5:10:73:e1:66:e6:97:62:cd:c0:4e:7f:f8:1c:
16:10:66:d2:54:4d:00:a4:82:a7:b9:63:51:a6:f6:
fd:72:1c:e3:95:a4:ec:0f:ae:d3:fc:f8:c2:61:ae:
e0:00:57:73:48:ac:4c:9b:8a:a8:15:4b:61:06:9b:
f4:81:24:c2:67:f1:f8:6f:c0:59:6d:0f:aa:32:36:
81:f4:7a:0f:e0:7c:ad:40:50:28:be:4b:65:ae:b4:
d1:0c:3f:e0:c9:e4:e0:03:1a:65:43:ad:12:da:f1:
11:5d:06:6c:75:5a:fb:9d:83:38:ed:b1:64:ab:5e:
4c:dc:b1:88:c4:10:c8:0e:7d:0e:54:cb:d8:96:64:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B3:E1:83:B5:06:86:85:73:87:C2:AF:62:08:39:3E:CB:70:9B:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:0f:85:2f:25:a1:22:f7:b9:33:56:c0:f1:d7:ac:60:d8:3f:
25:75:ca:38:de:e3:cd:05:fb:e4:d6:11:ec:81:f6:f4:f3:43:
11:e1:22:1f:a4:8e:1a:c3:71:f1:5c:fa:bd:d0:30:24:84:7d:
57:c1:06:6b:55:15:a3:e2:1c:2b:75:0c:e2:63:e5:74:b2:6b:
d6:ff:4d:51:0f:06:db:9e:07:fb:68:e9:76:70:c6:1c:6c:6d:
23:85:f1:6f:7a:68:79:e0:aa:61:88:39:a7:dc:a1:bd:14:47:
5e:e2:4c:a9:a8:b9:9c:94:11:6a:75:71:6d:c8:fc:1a:5a:5c:
88:d0:5b:09:37:b0:c9:4a:f5:7c:18:ea:0f:14:37:65:bb:b7:
47:de:93:5e:7a:f9:b4:22:fb:8b:68:a3:c0:31:08:a4:d0:56:
1b:8d:42:06:69:b5:9c:a0:4d:7a:cc:30:b4:a5:14:85:32:35:
1a:7a:7a:37:2e:ac:dd:b3:39:37:58:2b:9c:f3:70:50:cd:b5:
8c:45:cd:3f:8d:aa:b2:a5:bb:30:c1:a8:54:69:bf:75:2a:e8:
1d:e9:e3:f7:19:41:5f:ac:2f:59:c9:27:82:7e:57:71:f6:2c:
c6:36:58:ce:c0:8f:bb:c4:d9:9b:46:2e:d0:64:77:22:c4:ba:
51:fc:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net