Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/30dd3ce4-de72-3391-8e1b-494fd30c7d16.roa
File: 30dd3ce4-de72-3391-8e1b-494fd30c7d16.roa (raw, json)
Hash identifier: QyATd7XEDDuS20RVpO9lHc9Wn8SbzXtAAzXJi/KAv/c=
Subject key identifier: 76:29:82:92:63:53:DB:D3:EE:B1:3D:C1:42:05:BA:1E:80:A0:0E:1A
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848FD56C96390ECB156FC170458
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/30dd3ce4-de72-3391-8e1b-494fd30c7d16.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53508
IP address blocks: 206.255.48.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c9:63:90:ec:b1:56:fc:17:04:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=0d142a0c-9fec-4b15-8ec8-b4ceb9a5fc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:50:e6:1e:f1:ec:2f:dd:4f:e7:60:73:20:
5b:40:0c:12:26:43:06:de:23:8a:7f:a4:2b:02:33:
ca:b5:68:ca:80:6e:a3:4d:47:41:79:3d:ed:67:2e:
f0:b7:5a:80:48:14:bc:1a:dd:8c:d9:37:ab:b3:f5:
c0:83:ef:00:3d:02:45:06:92:fa:57:64:c0:31:a9:
59:e8:01:dd:54:96:cc:3f:c3:73:07:50:5f:c5:13:
ab:6e:32:57:9d:de:92:f0:67:31:76:d4:01:52:9f:
f3:43:fa:1c:1a:3b:6b:97:81:61:98:14:70:c6:e8:
0f:01:4d:e4:57:0b:b6:c1:61:05:bc:12:79:7a:48:
28:c9:d8:d5:a4:f5:f3:48:fb:1c:eb:8d:45:17:2e:
7f:2b:87:f1:87:b3:97:79:ff:9d:33:16:c0:5c:ee:
3b:57:8f:a2:8b:de:d0:69:0a:66:6e:82:78:69:e7:
65:e7:3b:e4:45:e2:c0:af:d5:ef:86:11:ca:06:5f:
7c:86:2b:3f:d9:40:32:f5:ba:87:14:e8:44:50:f9:
6e:71:4d:d7:b4:f2:2d:73:97:ee:51:c6:30:0f:88:
4f:58:ff:64:e3:f9:37:bd:fe:7a:f4:aa:58:f4:ab:
62:1e:69:28:78:5c:86:87:79:68:76:9f:16:b2:d9:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:82:92:63:53:DB:D3:EE:B1:3D:C1:42:05:BA:1E:80:A0:0E:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/30dd3ce4-de72-3391-8e1b-494fd30c7d16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:3c:78:91:f2:63:e6:6b:92:6d:ac:9e:88:4a:73:76:8f:8b:
7b:47:ca:d2:53:c1:9c:78:77:80:99:2e:39:4b:45:cc:02:ab:
8c:87:ce:db:f7:60:a7:01:d8:57:6e:89:9e:cd:23:a0:36:f1:
49:bd:be:e9:8e:73:e7:1d:19:d2:4a:9f:b8:c9:fb:81:eb:ce:
d0:0d:96:ff:3b:c5:36:86:8a:54:66:9a:ea:35:2e:c3:37:e9:
59:8f:ee:ba:42:a5:cf:1a:ed:3e:62:fa:48:b6:8c:0d:97:10:
21:34:2c:a3:b7:9f:e0:10:d6:d4:7f:6c:ee:cd:9c:82:2a:c6:
49:fe:cc:94:82:00:2b:fe:90:82:0f:3d:ac:1f:3c:c4:c0:67:
98:c7:3d:90:25:95:c2:c1:07:a0:6d:75:98:08:58:66:2d:8b:
6d:39:b1:99:c3:a1:1f:2f:2d:93:72:3a:24:0b:b4:71:c7:38:
c2:99:12:88:6a:f2:f6:75:a2:ff:ad:77:71:bc:2d:86:01:a4:
74:3f:6a:3a:5f:89:d9:0b:f4:fb:1d:b8:f5:6d:2a:6e:4d:7a:
09:9d:12:9a:2a:eb:a1:78:a3:26:0b:eb:93:4c:a7:56:c8:38:
3a:3b:05:57:48:20:ae:8c:37:fe:d6:e2:b4:41:d8:a8:fe:5f:
fc:10:64:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net