Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/f72e9ac0-b88b-3ad3-8b97-4beaa42f9bbb.roa
File: f72e9ac0-b88b-3ad3-8b97-4beaa42f9bbb.roa (raw, json)
Hash identifier: qIegrP51D5kV0oPeeCeSdEb5u9wPFwucvH5k9GaaOas=
Subject key identifier: AE:6B:F7:D6:B5:AA:D4:50:25:73:30:47:B6:04:43:24:3F:97:C5:0C
Certificate issuer: /CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
Certificate serial: 010D0C9F4328584975445F19292EDB8258815940
Authority key identifier: A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/f72e9ac0-b88b-3ad3-8b97-4beaa42f9bbb.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 16509
IP address blocks: 23.148.128.0/24 maxlen: 24
2602:ff0d::/36 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:5f:19:29:2e:db:82:58:81:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=1ec84fbb-37fd-4dc0-b33b-dda8633ac941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:69:8d:4f:dd:81:90:10:8b:2e:60:5b:7d:
30:04:b5:75:db:07:c0:f2:bd:bf:ca:ce:d1:f7:41:
13:9e:a4:1c:e5:c6:f7:52:64:1d:4d:d2:6e:82:a8:
7f:56:c5:ee:70:14:11:9f:3f:c6:cc:10:0d:2d:34:
5c:77:b0:83:2b:8b:36:e8:0f:5d:1e:4b:53:dc:b6:
54:81:49:a1:b5:d7:5c:3c:64:1a:55:10:0d:1d:6c:
f0:c7:3d:2f:06:ee:c5:a3:a0:d0:97:da:78:a1:a0:
80:22:09:22:c2:a3:09:80:fa:51:a9:d6:6c:dd:ac:
62:2c:91:c3:3e:c8:46:39:93:f8:86:d1:0d:7a:83:
cd:7c:2e:4b:02:5e:a5:6b:c1:af:b1:7f:10:1c:ab:
fb:be:35:c1:17:fc:ae:45:25:c2:7b:9f:49:9e:46:
22:a1:ca:ee:89:d1:38:e3:20:a5:1c:60:3d:05:74:
bf:da:a8:46:95:cb:d6:91:85:6c:4c:d1:c6:7f:21:
7a:7f:d3:68:96:13:c4:28:00:c2:0d:0e:34:4f:0f:
3b:11:37:13:2f:d9:36:5b:aa:a7:83:4c:8e:26:67:
90:71:f1:90:93:ec:00:ee:98:61:e7:3f:0d:1d:ab:
ae:ce:f9:f2:e6:19:d8:4c:77:eb:d7:87:85:22:ba:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6B:F7:D6:B5:AA:D4:50:25:73:30:47:B6:04:43:24:3F:97:C5:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/f72e9ac0-b88b-3ad3-8b97-4beaa42f9bbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.crl
X509v3 Authority Key Identifier:
keyid:A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.128.0/24
IPv6:
2602:ff0d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:20:63:72:7b:79:c4:17:f2:c7:45:0d:ef:e2:fb:25:5a:a9:
10:69:3b:3a:92:77:09:66:b1:be:ce:f7:25:75:99:3f:36:f9:
1e:83:24:75:98:6b:f9:1d:01:23:3e:95:7c:22:2d:3c:48:ed:
7a:aa:14:05:94:bb:31:0c:7d:95:5e:89:97:3f:be:95:0e:5e:
ce:60:d1:30:70:ba:58:b8:80:d5:55:4a:d2:0a:cd:27:51:78:
67:bb:f6:3b:b0:05:53:0e:8e:3d:c3:ff:4c:49:ea:67:1d:e3:
73:a0:92:6f:37:9d:eb:46:dd:fc:89:d5:94:2d:ce:0a:ae:d9:
b0:fd:10:e1:90:4e:77:10:3d:30:8f:82:8e:23:fc:fe:f5:ba:
f7:f5:34:08:3b:1c:45:43:e2:3f:d4:14:0b:23:7f:72:8c:16:
2b:38:9d:49:23:6c:0d:65:d6:6e:8f:f2:44:86:17:7c:f5:21:
b8:e7:7a:c0:ee:87:39:b1:a1:89:83:ca:6e:25:47:10:f9:eb:
03:44:05:ac:7a:88:73:bb:73:7a:cb:49:5f:b9:30:92:b4:01:
7b:a5:9b:e2:61:d3:e5:71:f1:c3:75:b6:56:1f:ac:80:e0:65:
da:74:f3:1b:e8:12:68:4d:f8:ee:7f:23:9f:49:73:18:09:69:
1a:24:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:28 2025 by rpki-client on console.sobornost.net