Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa
File: 9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa (raw, json)
Hash identifier: kUkQxu9qKezoWATAxti7BDY4khp30j49KBknIiTpK8g=
Subject key identifier: 99:CB:08:F6:55:4F:C4:65:F1:7A:CA:1A:07:03:B1:3C:A1:55:D6:65
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F43285849350EAE79754DA3EF7EBFD280
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 0
IP address blocks: 157.133.1.0/24 maxlen: 24
157.133.2.0/23 maxlen: 24
157.133.4.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ae:79:75:4d:a3:ef:7e:bf:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=f2b937c5-afcf-4bd8-a151-d9ed85a40dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:f4:7e:9c:f9:a8:41:77:51:ac:cd:81:91:
e4:fc:5c:07:8c:f3:c4:31:91:d8:f5:3d:06:4d:7e:
a8:96:3b:ef:3f:29:46:c2:e5:54:8b:23:05:9c:43:
eb:42:be:37:b0:bf:0c:da:72:1b:72:21:a0:29:b7:
28:33:da:47:da:c1:df:20:92:9b:54:5a:06:98:e3:
49:92:30:82:ea:64:54:a8:80:62:bb:53:ea:7e:dc:
10:6f:51:08:2e:96:f7:5c:85:10:dd:68:dc:52:d5:
ad:6b:a6:c1:12:4a:d5:3f:09:95:a1:6b:78:10:e6:
03:53:64:d9:73:16:27:f2:31:4c:89:27:0a:d8:0d:
8e:d1:d0:66:be:56:3c:5d:4b:af:3e:93:f4:de:cc:
a2:9d:39:36:ff:ac:2a:c2:ea:73:3d:24:74:27:58:
f2:aa:fc:aa:6e:e3:da:e3:3e:ad:7d:4f:2b:a3:80:
65:3b:20:35:f5:4d:f1:d5:d7:95:f2:4f:2c:4a:bb:
1d:07:64:c8:de:f4:ec:ce:a9:04:90:d8:91:4e:cc:
30:8b:4f:a1:7c:82:81:62:73:79:8c:f0:8f:30:58:
c1:0a:95:51:83:25:8e:a3:fe:ff:40:7e:85:bc:85:
55:20:de:ec:76:7c:f5:09:1c:82:d7:18:6a:5a:6a:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CB:08:F6:55:4F:C4:65:F1:7A:CA:1A:07:03:B1:3C:A1:55:D6:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.1.0-157.133.7.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:4e:ab:1c:a9:a6:33:97:14:9d:c6:8a:0d:f6:d7:72:3c:05:
12:6f:be:f2:f5:a3:0c:83:1d:d6:69:8c:ec:8f:cd:77:7b:9c:
36:80:c6:55:0f:51:a8:a0:83:68:fb:05:f6:5a:00:87:ad:13:
ce:a9:42:f0:d2:f9:6a:bc:01:b4:4c:3a:51:75:5e:f6:aa:74:
9d:18:f7:69:4b:e6:6b:c5:58:94:00:d4:70:0d:b6:64:d1:1d:
e3:f9:fb:4a:a5:e0:c6:d5:81:47:72:86:0d:e5:e0:f9:e9:9e:
41:87:a9:89:09:43:7e:26:3e:32:27:85:73:b9:1d:4c:f9:5d:
f2:23:38:89:29:7a:9e:5f:f1:0a:c6:61:10:f2:4a:e8:9e:ef:
bc:a4:80:61:51:4c:b3:de:30:ef:fe:e5:3a:69:2f:cc:1b:66:
73:e1:1e:e1:fd:a4:cb:73:78:7f:f4:ec:88:09:1f:12:b4:05:
10:87:70:f7:12:39:c1:29:d2:26:42:6d:45:93:2a:96:31:c1:
e1:9c:05:64:42:1b:31:46:5b:d4:25:a1:85:89:1f:f3:02:6b:
23:20:38:28:b8:0f:51:22:e9:ac:80:6d:07:47:25:ec:4d:8a:
62:41:00:21:48:db:11:34:29:5e:24:c7:5a:e6:c6:29:3a:f5:
3a:ee:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net