Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa
File: d73092b4-54aa-3405-a3ca-45d7d6798270.roa (raw, json)
Hash identifier: ZkL6eYVrv0btg7S2cAcI1tVpEABjFgEUlcBc0af325E=
Subject key identifier: AA:A4:D0:5A:C7:69:E5:02:3E:7B:45:36:76:78:DF:F0:28:5C:FC:45
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584971142E019040ACDEEDA59580
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 23473
IP address blocks: 216.171.21.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:2e:01:90:40:ac:de:ed:a5:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=a83c5a3a-4447-4be6-803d-02364ef84214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:e4:57:74:d6:64:f5:e3:95:8d:06:2d:2f:
23:35:68:f4:7d:82:6b:a9:22:64:da:dc:d7:f0:b9:
6c:9d:6a:3d:c3:08:fe:a5:ae:8c:1b:44:e0:85:35:
31:c2:32:6c:54:d3:d2:59:ef:ee:da:e7:a8:db:60:
c5:46:20:2a:4b:d1:6e:ea:56:f8:d1:24:53:fa:71:
08:65:35:89:1f:25:11:ad:1b:08:a2:5a:21:66:59:
2d:df:81:ea:33:28:5d:4c:54:11:04:09:50:13:b7:
2d:95:d5:0d:c1:0b:a4:bd:9e:2e:d0:9f:18:1b:57:
39:d3:8b:be:1b:6d:9e:04:e1:e8:7e:10:e2:fe:3d:
a4:4d:32:fd:cc:23:6c:8c:1b:4b:bf:80:c6:e8:6e:
fd:54:4e:a1:f2:c2:b6:87:21:24:eb:5e:2a:94:4e:
16:f4:36:79:2e:bb:48:ab:e2:d2:e7:29:69:93:75:
14:b8:62:30:2e:17:74:cd:0a:f1:c0:fd:46:14:23:
ae:54:8b:7b:52:c4:30:eb:b0:8c:26:6d:86:11:34:
37:6c:5d:0f:1f:39:d0:8c:f8:6a:52:3c:02:11:5a:
32:82:dc:be:ea:78:91:1f:91:73:52:87:c2:a0:99:
2d:02:ec:e8:2b:32:61:27:ed:da:ff:d2:3e:fc:23:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:D0:5A:C7:69:E5:02:3E:7B:45:36:76:78:DF:F0:28:5C:FC:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:6c:3b:63:31:78:dd:e9:ca:8c:db:34:dd:a0:d5:a0:ea:8b:
a1:77:29:f8:ea:b3:79:b2:35:25:f1:a5:49:ab:07:6c:37:77:
45:b2:5b:53:73:e2:1c:de:fd:75:ce:73:c2:d9:40:d9:56:60:
98:2a:d8:c0:95:ad:8a:d2:8e:36:66:93:17:60:6b:36:ad:3c:
59:1b:53:be:d6:51:a1:7f:7d:a2:9f:91:ce:fc:cd:07:26:8b:
09:c6:49:ae:ee:a0:ed:de:5e:89:58:65:51:5e:a3:db:0e:c8:
ac:7e:2f:dc:be:a2:cb:ea:4f:66:8c:09:38:d9:83:ac:60:63:
a2:6c:2f:e2:a7:ff:c9:d1:b4:32:12:7f:2d:9a:5b:ab:4a:c4:
db:f2:cf:d7:84:eb:78:7a:bb:9b:51:d9:e5:7a:bb:99:de:68:
70:66:f8:7c:df:14:fd:7d:0a:90:dd:03:59:5c:d1:9c:06:8a:
9a:96:15:a6:4e:56:88:d8:57:1c:ba:ff:60:4a:4f:bb:26:27:
cd:cb:77:63:bc:f2:4c:76:71:03:47:71:27:95:ff:b3:09:4e:
6a:18:53:b8:af:c4:f9:a5:fe:00:f7:99:59:5f:c6:46:72:79:
47:3b:b6:31:61:79:49:26:70:d5:6c:40:6d:51:44:e3:27:a1:
74:45:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net