Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa
File: 67711168-57b6-3fb5-9d03-dd8b8f2377da.roa (raw, json)
Hash identifier: 29TTgJBbZ997eLMkFKEvS1dWGuWyPj9moAPzQ2CK7Sk=
Subject key identifier: 4C:94:BD:27:7D:B5:6C:8D:64:A5:99:FB:7D:D0:66:55:2D:2C:CA:DF
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848FD56CABE8CB95BC07540A280
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53508
IP address blocks: 206.255.200.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ca:be:8c:b9:5b:c0:75:40:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=a003da9b-0818-4b3c-ab95-813a537afe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:eb:12:8f:c7:68:5d:1a:ac:ec:a5:f3:f1:
24:35:2d:31:84:49:be:39:ad:fc:12:01:d2:55:1d:
51:80:30:bb:ae:23:63:c1:90:d4:fe:de:10:2d:48:
08:d1:24:33:55:f3:1f:0e:10:d2:dd:a9:e4:61:0f:
3e:43:bc:93:e2:ad:3f:19:75:e6:c9:52:eb:e8:bb:
c9:57:cf:eb:08:ff:d1:4e:48:00:b3:88:dc:9c:e9:
ee:48:30:62:e1:30:68:6f:7e:bc:57:74:f2:fc:2b:
8e:b6:7f:ac:7f:6e:06:24:8e:ad:7b:7c:e5:92:79:
10:a3:6c:11:1f:bb:0a:8e:96:23:90:a2:93:67:31:
c4:c7:69:f3:69:81:e0:11:6b:be:d6:21:45:56:f0:
97:09:1c:71:2a:0d:88:30:7d:77:0b:2f:34:d4:08:
a6:b5:71:7e:01:06:bc:56:9e:c2:42:d0:19:21:73:
ec:23:5b:60:e1:08:c1:77:38:cd:10:cb:0f:e2:f4:
d7:57:04:07:7a:a6:74:0e:93:53:ee:6c:c5:3c:7e:
dd:44:27:16:07:dc:b7:51:2c:0c:96:8e:88:54:7c:
dd:cf:da:b8:11:51:7b:86:cf:08:ce:14:b9:67:8d:
0d:41:3d:29:6c:36:75:86:f1:09:be:31:e0:9e:64:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:BD:27:7D:B5:6C:8D:64:A5:99:FB:7D:D0:66:55:2D:2C:CA:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:be:d9:5b:82:2e:b8:6c:cb:bb:a2:e8:62:76:67:c1:b3:82:
a7:76:5d:1f:27:78:da:e9:b5:5c:f7:c7:3c:f2:4f:83:ce:53:
cc:07:be:d7:9d:ca:4c:b1:79:95:44:82:a0:85:52:5f:f6:b0:
0a:68:58:06:4b:2e:72:0c:08:89:63:07:ce:8c:e3:7b:d8:d1:
18:ca:d5:fc:39:46:a6:d0:ef:f9:3e:15:31:9d:58:2d:c6:3b:
ab:0b:cf:ae:fa:9a:83:52:c5:c8:31:54:e1:73:bb:c5:c5:69:
d6:06:96:59:ad:66:de:14:b3:c6:7c:cb:21:a3:ff:77:62:6e:
61:18:e1:40:4b:a6:e2:42:96:31:66:68:db:0c:fd:2b:7b:3c:
40:ed:21:9d:89:80:d2:6b:94:2c:bb:83:7a:01:98:b6:39:22:
87:92:36:f2:c5:6b:a3:db:09:91:eb:f5:1d:e2:18:c1:16:14:
62:4d:8d:2d:b4:f5:3b:ba:c1:10:b1:b7:c8:ea:19:58:94:58:
e6:52:42:f9:c5:f6:12:2d:65:48:0a:99:db:11:d5:81:5f:de:
41:00:ca:44:f2:59:51:3f:91:43:82:b6:df:cb:46:47:53:4b:
be:aa:8d:bf:e7:37:f0:b2:94:8d:23:5d:01:71:60:a0:2e:d6:
af:15:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net