Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa
File: 1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa (raw, json)
Hash identifier: AExY6SYTT4+6uVa9DTKcbd4cUT5eIEUVqEWx4Vh1qtU=
Subject key identifier: 4D:31:59:3F:85:89:9E:89:EB:47:BA:DF:16:05:C3:42:59:DE:32:95
Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial: 010D0C9F4328584919418A40B4F1148F731E7A80
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 22765
IP address blocks: 72.20.200.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8a:40:b4:f1:14:8f:73:1e:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=4be5b1c1-4e4a-414b-810d-51005dde1f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:2a:70:da:b7:6f:ba:d4:8b:15:3d:4b:4d:
7f:8c:0a:b1:14:25:93:72:71:b6:3d:b3:99:32:30:
a9:80:4a:a3:0d:05:7c:bf:59:47:c8:d7:c3:e4:e9:
48:8f:3f:af:37:0d:88:1c:d8:10:28:c3:81:d6:fa:
05:98:49:10:00:74:ec:1c:4c:a6:05:85:fb:5f:ca:
80:2e:a5:1d:15:32:c0:d6:2e:54:9c:c0:17:04:6d:
d5:8a:57:24:91:6f:77:0e:c8:a5:df:87:20:99:c6:
85:ff:b0:31:d4:40:43:98:89:2d:85:6e:5d:3d:e9:
c4:f0:87:db:87:00:a6:3a:8e:45:8c:fe:20:50:cf:
a7:86:aa:df:16:85:40:90:2b:b7:8a:69:32:54:78:
a2:a5:9b:60:e0:e9:7c:11:d8:82:39:9e:23:8b:29:
82:4d:96:f1:b3:de:64:89:9f:bb:50:eb:e1:29:43:
4b:8b:93:97:d0:6e:a6:cd:a6:de:a8:36:db:58:97:
1d:e6:07:ff:65:24:48:62:73:e9:9c:48:44:02:af:
e8:86:4f:72:8e:0e:2f:c7:c2:2b:be:49:7e:65:2f:
b8:a0:b7:f0:f8:d2:d4:71:e7:2f:fb:ed:c0:90:d2:
77:43:c6:b8:5f:de:54:2f:c7:b2:cf:a6:e7:c2:a2:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:31:59:3F:85:89:9E:89:EB:47:BA:DF:16:05:C3:42:59:DE:32:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
X509v3 Authority Key Identifier:
keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:dd:8a:7a:6f:d2:39:95:e6:a2:e3:0e:a1:99:44:49:ef:bf:
19:30:25:f2:7f:fc:c6:d8:39:45:b3:4f:15:71:8d:5f:c3:ad:
8a:e6:6a:32:66:6e:64:83:02:64:7f:7f:b0:79:a1:dc:df:46:
1b:b6:73:a0:bc:1e:c9:3c:06:fa:f3:94:51:1e:26:eb:0c:e4:
c5:a1:c5:48:04:48:04:42:8c:69:bb:08:48:4d:21:80:9b:41:
ab:28:b4:b9:c3:4b:71:98:bf:61:3f:89:01:5b:59:28:24:1f:
af:bf:37:53:92:9e:2d:60:65:b2:75:3a:17:3f:dc:e5:0b:1d:
14:e0:de:2a:cf:5a:6a:11:db:28:59:39:71:86:76:63:38:8b:
df:7e:e4:b4:a1:20:bb:e7:24:df:b5:2c:2a:bf:53:b5:97:49:
0b:5a:41:96:c7:bf:5b:a7:1d:18:4b:2f:3a:8e:a9:18:78:e7:
d4:78:9b:2f:d7:4b:98:f0:b6:db:9d:2e:21:82:6c:46:ac:29:
9d:27:b2:51:26:cb:3e:a3:79:13:c0:6f:c1:5e:08:2b:39:14:
e9:4a:b9:00:52:9e:96:65:2d:b1:72:2c:8a:f9:d9:59:20:1e:
fd:ff:e2:ae:4a:d3:2c:2e:42:90:8d:c5:74:11:2b:c2:6d:0f:
f4:fa:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net