Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa
File: 3d1824af-5e0a-30b8-9547-2f81c0164b04.roa (raw, json)
Hash identifier: rjLEGICfWIx6Yr6fhl/ywmbmnNiBa3FN1fK7eIdcwTQ=
Subject key identifier: 5D:2E:95:0D:09:38:67:ED:DF:95:0D:99:F2:53:A8:B5:E4:C6:08:97
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F4328584949FE9242D697D35845422C00
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 393885
IP address blocks: 2604:4a00:c000::/36 maxlen: 36
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:92:42:d6:97:d3:58:45:42:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=b16071f1-1238-412f-8312-a2c16360061b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:e0:cd:1f:c5:6f:df:98:fc:ca:12:bd:26:
ba:dc:6e:78:24:9d:c8:c8:1e:fb:07:7a:f6:c1:3e:
57:ba:8d:6c:bc:e8:40:12:9b:80:b4:ae:b5:95:61:
13:84:c5:22:1d:cd:c7:b4:a3:b8:f5:f6:93:a2:f9:
04:c3:4f:ff:bf:ee:69:0c:e3:c5:6b:76:6b:6c:06:
60:d0:c3:47:b3:62:e9:5f:48:69:23:16:dc:a8:4b:
52:da:84:8b:f9:cb:30:26:98:d9:6b:30:93:04:33:
cd:c4:3d:f7:fa:03:27:a1:c7:5b:24:97:89:1c:ab:
32:c4:11:d1:67:5c:a8:79:03:c3:dd:03:da:44:b2:
35:26:9c:23:e3:25:20:25:7b:72:80:0f:3c:7d:28:
6a:4d:cb:27:4d:69:17:4a:19:bd:e3:5a:c7:9b:47:
d6:d7:6e:4e:84:39:a7:51:8e:e4:53:ae:bd:46:54:
de:63:9d:8e:c6:e5:62:c8:5f:fd:e0:e5:74:70:61:
49:ef:ce:91:4b:73:50:2f:bb:db:f4:d2:9c:b4:1c:
ca:96:a2:18:f9:a4:ba:28:95:20:d9:ff:cd:da:95:
e0:42:1d:d0:f6:06:01:73:57:80:28:ad:fc:33:d9:
54:fb:76:b7:cf:74:cd:df:e9:55:f9:73:ad:eb:7d:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2E:95:0D:09:38:67:ED:DF:95:0D:99:F2:53:A8:B5:E4:C6:08:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4a00:c000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:9b:82:9b:1c:da:a3:83:71:85:79:11:76:bb:c2:af:da:ea:
be:3f:e3:be:72:2a:41:c7:b5:0a:92:7f:df:92:2c:9d:a9:95:
24:b5:b2:48:7e:a0:db:20:01:9f:1d:ce:8a:e3:08:d5:d5:c6:
7b:c4:fc:4e:1b:ed:32:37:3c:dd:0b:f8:bf:ce:85:dc:54:09:
e4:46:1e:2a:25:59:36:8d:4f:13:4c:92:47:44:0a:d4:81:43:
31:2a:0f:b0:2f:78:a7:1e:72:3d:68:eb:07:91:89:ec:d0:78:
9c:cf:3d:80:5f:ab:b9:3d:7b:68:e1:8c:54:cb:c6:be:6e:53:
82:da:9e:73:81:a3:8e:38:d2:b8:d7:2a:b9:f5:cc:a3:56:83:
89:5b:1d:b6:8d:d0:a5:ee:b8:06:97:91:17:ff:21:d2:a6:7a:
13:6f:06:33:ac:ee:da:20:02:ce:01:c0:fb:6b:66:da:8d:5c:
fa:04:02:85:87:fb:43:80:7e:26:fa:7f:fb:a3:c2:cd:ab:07:
11:72:16:69:4d:09:7e:bd:8b:db:8b:a0:62:46:bf:c2:e8:b4:
ee:ef:92:0c:03:01:82:c8:32:1c:2b:eb:e3:9b:0d:53:43:b8:
22:04:b3:6b:3d:68:53:a5:08:01:5a:cc:5f:9f:a0:93:bd:0f:
b4:35:fe:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:28 2025 by rpki-client on console.sobornost.net