Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa
File: 09435df8-02ac-3656-b5c3-baaac1dd687b.roa (raw, json)
Hash identifier: aTW6TG/nuig3/tKrt/BlVJUQpOaiEulM9bZK85wsTHs=
Subject key identifier: 74:9A:62:37:23:84:57:EA:38:4A:3E:8E:E3:33:0F:18:D3:F5:08:DA
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848FD56C186C0A466896F4CE520
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53508
IP address blocks: 206.255.224.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c1:86:c0:a4:66:89:6f:4c:e5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=2adea0bc-da94-4fb4-80b5-17cacfbd1820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:48:26:df:05:dd:83:04:97:60:e3:f0:82:
53:f8:ec:b2:60:21:6f:1b:94:0c:ba:43:cd:a9:bc:
72:d2:30:bc:88:11:51:0a:f2:11:a9:35:fb:7c:ce:
33:93:2f:a5:33:3e:85:20:28:64:7d:40:96:fa:8f:
a6:c3:23:de:17:4a:a8:c9:2f:b3:9d:4a:9b:20:e8:
d6:ba:9f:0a:e4:38:22:54:17:05:34:b9:f3:bb:af:
9e:2b:9f:f8:dc:3b:33:69:93:8b:f4:3e:9c:d5:27:
43:1a:16:c6:2c:e0:20:7e:c1:1d:0a:72:96:0c:7d:
94:5e:ce:d7:5a:e6:dc:69:90:33:44:d8:4c:df:2b:
e6:b6:8d:af:47:d2:19:6a:8a:12:84:7b:93:8a:4c:
bf:c9:3c:b2:8b:d3:c2:01:91:24:0d:68:9f:f7:5b:
1a:ba:9d:f5:40:ad:a7:e4:09:8d:00:74:59:3e:d1:
06:ba:54:9d:e6:ae:5e:0d:0d:4d:ad:25:6b:fc:cf:
a2:23:e6:cc:64:e7:df:66:83:cd:bb:af:c4:c0:2d:
76:24:9d:b1:b4:35:58:b0:b8:f2:73:96:1a:71:85:
d4:eb:61:7d:88:db:ef:d9:98:65:01:38:b1:b0:eb:
e9:4d:1c:ac:6c:45:d8:11:4e:f1:9f:0c:b1:9a:ad:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:62:37:23:84:57:EA:38:4A:3E:8E:E3:33:0F:18:D3:F5:08:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f5:4a:b6:49:74:72:1a:4c:0d:ea:ad:4b:58:6f:08:44:e9:
55:25:36:25:cf:13:ac:70:5a:ab:a0:97:c8:d5:4d:33:c6:7f:
73:11:0a:95:85:7d:23:c5:b1:a2:f4:09:b5:40:aa:07:cf:cc:
f7:b9:88:78:ce:72:62:f0:07:78:9c:47:6c:2f:77:51:95:b4:
10:a3:03:b0:02:f7:87:8f:27:b1:de:75:42:ac:0e:6c:10:30:
72:dc:b4:a2:70:fb:35:67:30:b7:b2:74:11:c7:59:22:b7:02:
b5:a3:7c:6a:1b:cb:00:4f:97:eb:f6:61:b7:ea:0b:18:68:b4:
84:27:7e:41:fd:54:67:b0:9f:cb:10:14:5e:94:ed:bc:82:d7:
cd:eb:d5:ad:1b:6b:00:ef:54:29:56:fd:16:66:f3:ae:cc:71:
8f:1f:dc:e6:db:f5:52:b3:a1:f4:f9:eb:fb:a4:81:f4:b0:02:
d3:79:59:e5:81:c8:74:d2:c8:ae:c2:22:5b:65:5b:07:c2:44:
98:27:2d:c9:53:c7:4f:a4:3f:16:ba:f7:89:e7:86:ea:14:83:
a1:a2:0f:aa:95:04:af:96:25:ed:43:67:c9:ba:2b:0e:1d:ac:
40:49:67:77:a9:f6:dc:fe:b6:86:f1:f4:a9:44:28:ed:bf:24:
bc:fe:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net