Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/0d5d27ac-c197-3bbd-953b-e9dcfd4aa802.roa
File: 0d5d27ac-c197-3bbd-953b-e9dcfd4aa802.roa (raw, json)
Hash identifier: U7F2oyBhO3QntARtSeF0k3pskuvcUH8WVHd42j+WzEs=
Subject key identifier: F5:4B:CC:79:5E:A0:E3:8B:A6:17:02:19:DA:B7:12:A9:EE:3F:73:1A
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F432858490881952F442F85C3AA185100
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/0d5d27ac-c197-3bbd-953b-e9dcfd4aa802.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 0
IP address blocks: 169.145.120.0/21 maxlen: 24
169.145.128.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:95:2f:44:2f:85:c3:aa:18:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=fd49b578-6ee2-4a95-a46e-bcd9d6cdb27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:9d:e6:1a:04:17:37:03:55:59:68:3b:55:
38:cc:87:74:4e:e7:2c:d4:5d:81:30:f0:80:24:72:
45:b3:47:ff:3e:32:d8:fd:0f:e1:0a:ef:28:d3:1e:
e5:55:d2:bb:9a:50:60:d3:23:44:7e:30:b2:e3:88:
1f:af:27:2f:31:46:ca:1a:30:02:aa:2a:c0:4d:3b:
ad:60:11:08:9b:ee:29:6b:e3:d2:87:bc:fb:10:59:
5e:65:6d:ec:f6:8c:8b:e5:5d:41:5f:a8:42:21:41:
fd:2b:77:04:75:0b:6c:86:9b:9f:a0:9e:5e:3e:8e:
82:bb:b3:6a:76:02:18:6d:21:10:ad:f4:1c:86:d4:
3e:f2:0b:24:77:41:3e:17:36:42:5c:84:0d:ba:51:
e6:8d:d7:e7:df:85:c0:83:d5:83:ff:3b:6f:d5:2b:
b9:8b:9c:f8:e8:1b:64:6a:42:b1:8d:48:96:fb:74:
8d:dd:0d:78:84:64:8c:f8:6f:4c:6f:39:dd:c5:21:
ae:2f:1f:19:5c:86:b8:3e:30:ac:c9:a2:26:7c:dc:
87:e6:a8:7a:79:89:24:1e:99:53:a7:1d:a1:44:46:
8d:3d:c4:58:ac:eb:d0:1c:9d:38:d2:f0:9f:e6:a1:
b7:71:0e:fa:3c:0b:9d:eb:c5:3c:eb:4c:d2:db:5c:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:CC:79:5E:A0:E3:8B:A6:17:02:19:DA:B7:12:A9:EE:3F:73:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/0d5d27ac-c197-3bbd-953b-e9dcfd4aa802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.120.0-169.145.135.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:bd:84:c2:75:f0:92:49:a8:81:ec:d6:0a:12:b6:fb:33:8a:
06:27:2a:2d:5c:f4:06:62:08:47:9c:cd:e7:7e:44:cd:2a:83:
71:47:4b:de:65:71:97:b0:e4:7c:6e:fa:c1:83:af:1b:d4:e5:
37:fd:fd:23:9e:4f:df:e1:ce:a7:5f:3d:fd:3d:4d:7e:28:24:
f2:a4:0a:a8:10:bb:22:a0:78:56:9c:fb:ef:55:01:56:c0:db:
bd:89:51:62:7b:60:68:49:d6:46:eb:40:af:67:17:00:8a:07:
07:1f:7b:8c:f6:64:bb:ce:5f:28:9e:42:cc:b5:5f:49:8f:0c:
16:a6:d8:b4:55:d1:82:09:2c:b9:58:81:0f:23:dc:35:70:7a:
78:c7:82:15:ad:43:e7:00:cb:b9:c0:fc:6b:22:71:a7:27:0f:
b1:40:f4:ed:6e:62:e3:db:f0:c7:3b:99:94:c3:3a:f3:f0:cb:
10:15:48:07:9c:1d:19:32:de:4b:8b:3f:a2:c4:de:56:c0:1e:
d5:2b:6b:11:19:68:fe:5c:0d:04:c1:08:91:57:01:84:3e:20:
e2:93:a2:24:f1:4c:8d:1d:b9:70:47:d9:2a:7f:8c:c3:d2:44:
e4:b8:5c:05:4d:73:b7:ee:49:11:76:04:15:49:74:36:9c:88:
1c:fd:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net