Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa
File: 5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa (raw, json)
Hash identifier: 7KXGEeFB5nl3MXfSR59LxWSrXoX5TtA6O5XWSump+aM=
Subject key identifier: AE:1B:1A:02:33:A4:D0:DB:2A:9E:1A:7C:E5:56:7A:43:C3:14:8A:17
Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial: 010D0C9F4328584953C41260C92E4ECD8F9EEB00
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 7992
IP address blocks: 24.36.0.0/16 maxlen: 16
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:12:60:c9:2e:4e:cd:8f:9e:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=8264eacb-22c1-4e43-8941-52ee6fb30368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:37:47:fd:26:71:ce:9f:f2:8f:98:9b:55:
f6:aa:4b:5f:37:e1:54:11:1b:45:bb:45:5c:24:db:
0d:76:b0:2b:63:92:bf:69:67:d4:ed:8e:e1:92:f3:
51:e7:77:c6:ab:a9:a3:1e:20:79:20:27:8d:48:a7:
84:16:9b:29:37:b2:85:11:d5:15:79:bd:ff:5b:c3:
0b:05:6f:6a:69:01:ac:45:cb:09:ae:b8:98:da:20:
16:31:07:fe:cf:d1:c7:03:ab:ca:03:13:7c:4c:b1:
35:c4:33:3c:53:96:91:8e:0c:01:23:d7:81:71:88:
1b:94:de:92:be:04:39:1c:08:d5:d6:0f:47:a1:97:
55:61:a1:55:0a:08:89:da:93:83:36:c6:26:8f:11:
99:b4:94:26:d8:e8:7f:55:70:6b:9c:71:1b:1a:89:
5f:73:be:1d:d0:bb:83:fe:f8:f0:29:3a:5a:8f:8a:
67:97:c0:f6:c8:5d:30:fa:ed:74:6f:01:5d:e1:45:
c9:b6:1d:7d:a2:a4:4d:cb:97:1b:c2:b0:f9:9f:54:
9c:dd:80:89:e0:a6:1b:fd:08:3c:a4:cd:eb:d2:7f:
fb:47:1c:82:43:7c:ae:75:88:1b:a7:a2:f9:90:e5:
69:86:c2:42:75:1a:05:86:f4:21:1f:6a:e7:c8:6a:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1B:1A:02:33:A4:D0:DB:2A:9E:1A:7C:E5:56:7A:43:C3:14:8A:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
X509v3 Authority Key Identifier:
keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
sbgp-ipAddrBlock: critical
IPv4:
24.36.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:f8:7b:59:03:8a:b9:9e:16:8a:b0:0d:b0:b0:ba:46:2a:e1:
c3:0c:32:b1:b5:47:d4:47:be:84:18:92:4a:7c:f5:43:46:b3:
79:94:0b:bb:44:73:d8:e0:d1:02:1b:33:ff:30:c7:de:52:49:
a0:04:5d:28:f9:30:4e:1b:ac:9c:6e:ee:5a:95:f2:34:56:45:
f0:8e:d9:89:96:ba:3f:96:c1:d5:fe:4a:a4:e5:93:1d:6f:86:
c7:15:ce:82:df:73:b6:27:7d:70:9e:36:ee:2f:07:58:e0:af:
db:16:7d:0d:a2:57:a5:19:54:0c:0f:93:f4:f1:2c:76:bb:20:
07:a9:c0:b7:a8:25:90:b9:80:31:c9:c1:5a:66:89:a6:24:75:
4a:48:fe:67:5d:60:91:76:49:51:54:50:5e:66:61:08:aa:cf:
6a:28:c6:43:a5:68:d4:58:c4:6b:e0:8d:1e:6a:71:43:a6:b0:
4e:32:a5:36:d6:fc:06:00:44:ea:ef:40:fa:86:89:0e:7d:ac:
fe:04:e7:08:35:4b:f0:d9:ba:65:22:95:8a:d1:4c:71:38:61:
d8:cd:4f:68:3f:2f:d6:d4:cb:f1:18:bc:d1:41:1e:0f:bc:ff:
a9:24:19:18:7a:fe:88:f1:c9:c3:1a:6f:0d:b3:d4:17:51:40:
8b:e6:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:27 2025 by rpki-client on console.sobornost.net