Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa
File: 0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa (raw, json)
Hash identifier: HdRbHI7Q0DgcKHO5jZ2+RdaQPxyn3RgqqYOJl1O0ddk=
Subject key identifier: D6:12:A7:5C:31:AF:7F:08:FF:2E:D7:AC:C6:85:08:AD:9E:16:76:C5
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848F926AF017B95A131145F2180
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 25899
IP address blocks: 209.237.68.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:af:01:7b:95:a1:31:14:5f:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=5e4c3e09-a7a1-45eb-9865-16495857e076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:82:03:f5:8f:79:ca:a6:fe:d5:2f:17:d4:
de:80:7d:13:86:d9:6e:92:70:db:9e:84:c4:53:09:
e3:33:6d:55:74:67:f7:a6:92:33:1b:c5:4d:dc:21:
a8:6b:16:17:de:a7:11:63:7d:ac:2c:e9:4e:c4:77:
b8:73:9d:81:c5:b1:78:74:bf:31:5e:73:e6:38:ae:
fd:c6:03:3b:c6:49:d5:7a:0b:a3:e8:5a:18:dd:29:
bd:87:7c:a1:cf:95:76:9a:b8:ff:ce:81:89:6f:67:
dc:be:4d:26:61:93:48:c5:45:ac:d2:7a:7c:91:31:
ac:82:19:4a:7d:f7:25:3c:05:2c:9c:5e:ce:38:75:
02:12:3b:af:ea:e6:2a:59:0c:ff:7e:4e:32:d2:b0:
7d:cc:41:58:9b:bd:2a:fc:ed:b3:ee:b6:8b:b7:f3:
10:ab:4a:27:31:d2:52:17:31:4a:b1:d0:59:be:0c:
3e:c2:74:6c:58:4c:2e:1d:b6:43:19:05:d6:26:d7:
57:a7:f2:0e:8b:2c:43:3f:ed:8d:07:72:b9:ec:38:
17:b0:98:51:6a:9c:be:9b:94:b6:8a:71:9d:e4:85:
06:60:b0:9e:22:11:91:25:13:f0:3b:4d:34:0b:89:
88:13:c6:6d:40:69:24:20:07:2d:c7:fb:0e:c5:aa:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:12:A7:5C:31:AF:7F:08:FF:2E:D7:AC:C6:85:08:AD:9E:16:76:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ea:21:1f:a0:6a:06:9e:25:fc:c9:47:bf:14:23:2e:fe:42:
9f:d0:da:91:04:89:3b:1c:c0:58:9b:a3:05:d8:1c:dd:88:b7:
05:7f:36:25:89:02:1d:a9:93:85:48:69:31:24:a0:5f:58:5a:
08:d9:71:19:e1:12:3c:13:d1:11:fa:50:60:24:c1:0a:0e:41:
36:84:b5:ac:e2:90:81:a3:96:5e:7a:7f:12:b7:63:b4:66:fd:
b8:e3:a5:03:35:1c:1a:c4:b4:24:35:c2:37:4f:11:7f:e8:5b:
a3:a6:6b:a9:eb:44:75:ff:5f:06:cd:44:02:31:72:3f:d5:98:
33:60:65:ac:64:25:71:e8:98:c1:9c:bc:b7:45:9a:35:06:8a:
a7:21:67:5f:19:e3:e1:73:b7:71:29:a1:51:fd:a0:46:97:4e:
06:14:2f:ae:0e:e8:fd:43:ca:0e:19:22:61:bc:e6:dd:06:c1:
a8:e5:e6:d5:f9:c6:41:dd:13:cf:28:f4:b8:43:6d:87:d5:10:
be:af:80:03:ae:c0:7d:21:fb:bf:3f:bc:42:05:bc:7e:17:90:
9d:1e:cd:c5:ba:3e:d4:09:6b:b4:ad:6b:b9:8a:a5:00:a2:87:
02:83:6b:b0:3f:44:45:b2:66:95:3d:c3:7e:d6:b8:cb:1a:15:
6f:10:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:12 2025 by rpki-client on console.sobornost.net