Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa
File: 39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa (raw, json)
Hash identifier: M53P70rrvWMr1tk7ZeUlN08SlfygtG5DOF66jiwv2NM=
Subject key identifier: EE:65:F9:E7:E9:7A:4D:38:90:3B:28:D0:1D:6A:31:68:2D:42:94:21
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848FD56C0A173572F76195A8C40
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53508
IP address blocks: 24.89.56.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c0:a1:73:57:2f:76:19:5a:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=276fa0da-9d46-44d9-8181-716ebc6606d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:3b:a5:02:39:84:e5:e6:0c:75:4d:e8:1d:
e8:88:14:5e:f6:89:b9:dc:33:3e:5e:55:42:9f:7f:
74:a5:85:10:dc:e5:8e:98:6d:a0:af:e4:57:b5:0e:
5d:a8:34:7b:73:c7:59:c0:0a:f4:94:cf:45:fd:ff:
a0:45:b2:78:9f:01:54:f6:e6:f3:68:c6:5e:bd:92:
ae:4a:b7:2d:df:47:34:b1:cd:90:cd:51:8e:66:4e:
7f:49:2f:69:5e:cc:27:cc:d7:cc:28:6e:9f:c3:82:
06:1f:69:54:56:55:a5:30:57:30:c6:ac:42:14:db:
8b:a5:5e:aa:bc:4f:e4:bc:9b:13:9a:dd:ef:ab:23:
5c:ab:f6:9b:a6:91:b3:0e:c1:e7:9d:bd:47:89:be:
bb:96:36:a8:16:5d:72:57:a2:4c:a5:62:e4:da:04:
4b:71:89:74:43:a1:d4:db:ba:c5:75:68:66:8f:44:
cd:2d:84:d7:0f:b1:a8:dd:b9:72:53:50:cc:91:70:
dc:eb:74:43:cf:9a:e5:f9:e2:c7:01:67:81:7f:94:
91:48:34:19:95:90:14:18:9a:a2:c5:6c:14:35:a7:
3c:ea:85:36:49:73:c0:a0:0e:a2:59:22:0c:bb:89:
67:a4:ad:39:20:c8:af:3c:32:68:2c:87:c1:d8:11:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:65:F9:E7:E9:7A:4D:38:90:3B:28:D0:1D:6A:31:68:2D:42:94:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.89.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:fa:cc:9a:f9:09:fb:fb:c6:29:5a:64:2a:8e:70:d0:d8:f1:
b0:c9:c1:1f:f0:24:92:3c:e5:b8:30:52:83:ac:3f:90:22:2f:
f4:12:59:23:f4:91:6a:c5:12:75:18:fe:7f:d3:75:6a:3d:32:
e8:94:cd:0d:21:76:27:e0:a1:b0:c0:b7:48:97:59:43:2f:21:
1d:b4:ae:08:ca:8e:2e:75:c5:d7:17:e0:17:32:44:ba:14:e0:
f3:95:29:10:8b:e3:61:95:c0:5a:89:b1:a5:d7:ed:3c:a6:7a:
87:be:f1:51:dc:6f:5f:dd:b1:ee:fd:76:f6:d2:c2:ed:1f:fa:
39:7a:a8:58:73:5f:3b:d1:30:c7:43:99:5b:14:de:35:29:4e:
d7:a5:72:e2:b6:eb:88:9a:c8:9e:99:f1:ce:43:22:e4:c1:f8:
3e:6f:5a:ed:a8:7c:1d:dd:86:38:08:79:e7:2b:f9:bb:cc:9c:
e9:69:46:13:c9:db:70:f6:d0:1c:e4:32:ef:c0:44:0f:f7:fd:
75:fd:b7:27:3c:8a:94:61:0d:12:d3:41:3e:49:37:b5:0a:20:
2c:25:81:fb:50:1a:53:67:9b:a0:69:82:21:d9:7c:bf:48:a9:
21:45:9f:06:e4:7e:61:25:08:3f:0e:e8:69:92:27:41:54:bc:
e9:cc:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net