Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa
File: 9dc53f79-5229-395e-abe4-ac308a1251e7.roa (raw, json)
Hash identifier: dztns5NmNktSm+j4cQh1aqlR4nosZ810QLUGS/Cc6fE=
Subject key identifier: 0B:8F:E0:E0:75:CC:4F:11:A9:89:13:85:DC:DF:66:52:51:BC:5D:C2
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F432858494CC94FB8E5842D5DACD58640
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 40065
IP address blocks: 67.220.90.0/23 maxlen: 24
67.220.92.0/23 maxlen: 24
68.168.16.0/23 maxlen: 24
68.168.22.0/24 maxlen: 24
68.168.24.0/22 maxlen: 24
68.168.28.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4f:b8:e5:84:2d:5d:ac:d5:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=e498a2d1-fcc6-485c-9410-aa70de104158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:ac:2d:6f:4c:4c:bb:83:2a:fe:b9:cd:41:
f1:77:b6:64:ea:2c:6a:9f:51:6e:56:21:96:1e:59:
33:a8:7b:43:11:4c:f7:c9:ff:0c:4a:a3:70:bd:ea:
f5:a9:0d:85:e5:42:00:73:5c:46:01:e8:62:19:41:
6c:a0:6c:2b:80:3d:dd:9a:28:5e:f5:9e:93:5c:95:
a3:61:9c:41:90:95:2a:53:65:81:f5:78:96:4e:29:
af:4c:da:e0:91:d9:c1:24:b6:64:73:11:81:05:fb:
1a:78:1a:f2:9a:c7:ab:9c:6f:69:85:5d:65:13:06:
07:20:0b:93:98:6f:d8:54:a2:79:be:8b:80:3e:0a:
f0:d8:d3:a1:24:41:12:3d:21:6b:0f:9c:11:f7:d6:
6c:16:e1:e0:bb:2c:fd:9c:63:d8:7b:ce:de:80:32:
d6:e5:08:7e:56:c6:19:db:a0:b2:b5:15:cf:b8:3f:
e1:77:6a:a7:77:8e:23:ef:c3:51:f0:81:61:45:07:
76:df:4a:fa:39:8f:d4:d8:e8:2b:7d:50:f1:0b:04:
5f:19:93:80:5e:bf:6b:1a:84:da:73:96:6e:c4:5a:
ad:ff:42:b7:11:de:2e:03:38:f7:a9:84:76:50:3b:
a5:40:55:c8:24:51:8f:a3:35:98:60:26:ff:ee:fe:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:E0:E0:75:CC:4F:11:A9:89:13:85:DC:DF:66:52:51:BC:5D:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.90.0-67.220.93.255
68.168.16.0/23
68.168.22.0/24
68.168.24.0-68.168.28.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:54:d7:7c:2b:e1:e7:0d:65:a3:5d:56:f0:8a:2f:b8:46:5a:
c4:c1:67:12:c6:a0:53:b3:d0:d8:62:02:1a:df:fc:46:ca:58:
f5:cd:b3:30:b3:3d:99:42:a3:79:32:80:b9:8f:fc:e6:fe:39:
ca:24:66:90:60:e1:54:0a:d1:71:be:37:16:51:c3:d1:7f:4c:
5f:dc:14:da:33:96:b4:e0:b0:52:fa:9e:fa:da:50:a1:d4:b8:
8e:d8:97:dd:fb:56:16:38:a1:35:b7:41:4d:b0:fc:ac:c8:1e:
9d:c5:f1:7c:0c:09:1b:99:5a:4f:97:91:7b:e1:7d:ec:0a:87:
d9:f9:19:c2:d1:b7:40:ac:e3:05:fc:b8:51:3f:77:10:bb:fa:
10:54:41:ce:00:b6:1d:b4:5c:1d:6a:b5:b4:22:be:ea:5d:86:
34:3c:d7:47:96:fe:33:ae:6c:e3:f0:59:c5:12:fd:32:ed:f3:
07:8d:e9:2d:70:b0:55:97:78:34:b2:3b:3b:9f:70:df:59:be:
41:ff:8d:70:06:c0:72:e3:ea:d8:73:6c:a6:58:e7:9c:7c:1f:
5d:aa:62:d6:89:1f:76:88:44:c7:6b:af:3f:ba:5c:c2:9d:21:
73:f2:98:23:50:20:64:56:d5:be:4c:cc:98:ce:19:70:e4:43:
46:e1:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net