Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa
File: b39705dc-aa8e-3894-ae97-fe60e59e609d.roa (raw, json)
Hash identifier: wudZWT36ImMIZ0HlfOMTvHGttZYeEDMxiA7WEM3T3bE=
Subject key identifier: 9C:A8:49:21:66:DD:74:E4:CF:35:E6:23:9A:57:34:EB:84:3E:9D:52
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848FD56C17A51EAA67075539F80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53508
IP address blocks: 206.255.220.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c1:7a:51:ea:a6:70:75:53:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=d2129686-9c93-4e19-916b-296026e4f203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:0e:12:ed:58:6b:d2:8b:32:d5:3c:fb:c1:
bb:a2:7c:64:c9:94:ae:f6:c3:e3:4b:30:21:81:90:
9e:ff:05:5f:67:cf:14:c7:30:6f:19:5b:d5:11:1c:
79:02:3f:be:c4:4a:66:98:92:2c:9f:2f:77:54:5c:
57:f7:ed:08:84:28:f4:ba:69:d5:35:9f:f5:f3:18:
70:23:3b:88:3d:4f:63:69:14:49:22:17:f2:3a:90:
37:99:9f:2d:27:16:84:a7:28:ae:ca:3c:e4:a6:3e:
cb:73:51:9d:dd:5e:d8:65:93:7e:14:ae:25:ca:34:
ba:d4:c5:ac:2f:c2:ba:a1:04:b5:fd:e8:1c:af:05:
89:04:5e:6a:12:69:9f:99:34:c4:ed:ff:7e:1a:2e:
e0:6d:0f:1a:2f:60:d4:c7:89:6c:7d:af:8a:8d:c7:
9e:15:4d:a6:d1:53:ae:a6:50:fd:6b:07:82:c3:a2:
e7:e4:e8:8a:32:52:66:b1:78:d5:38:6f:af:fb:ae:
13:a7:7e:70:d9:f3:60:33:04:49:44:f3:d8:b8:98:
49:8f:a8:10:4c:12:a7:43:68:c9:76:42:73:3d:46:
22:13:e9:5c:6f:d8:46:88:95:7c:71:43:6f:cd:ed:
64:a6:c9:8a:9e:8f:2d:04:51:4f:71:08:a1:ec:35:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A8:49:21:66:DD:74:E4:CF:35:E6:23:9A:57:34:EB:84:3E:9D:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:15:c5:36:21:69:d0:91:a7:ff:1e:fb:f3:d9:f6:fa:a6:1a:
f5:90:c3:7a:b8:6e:93:7e:88:40:64:88:1b:74:dd:ea:b1:fc:
f4:a5:9a:23:3c:4a:b0:ad:53:05:69:4c:9f:ae:0e:64:50:cd:
c6:ee:60:bd:ae:ac:ed:1f:e4:57:d9:03:a2:68:07:b5:5d:b7:
5e:f4:96:1d:0b:ce:3f:f6:49:6a:c8:dd:8b:f3:2f:9e:dc:34:
4c:9e:69:8b:e8:30:61:2d:18:ba:ad:28:2f:a7:e8:0c:47:02:
4c:e1:3e:85:d9:5e:66:29:a6:8b:bb:d0:41:b0:d4:cd:38:12:
18:37:d6:6e:92:0d:1b:15:d8:62:48:5c:88:65:80:d8:45:b0:
85:8c:d3:27:69:e0:2f:ee:1d:c2:7c:a7:a3:bb:9a:ec:bc:2b:
3d:0a:11:90:5d:75:ab:24:c1:d7:94:de:28:48:50:1b:7e:13:
00:ec:a4:a8:a9:4b:5f:de:bd:89:66:6c:bf:e5:7c:ce:8d:a2:
0a:09:91:a5:0c:38:df:4b:1b:b0:e6:77:83:b7:d4:39:da:f0:
a7:27:f2:1c:b3:36:0b:36:11:a2:ad:ed:ec:71:fe:65:0a:d4:
e6:49:01:b0:31:9a:3a:ea:f2:40:2c:30:2b:fc:ae:03:d7:a3:
8e:92:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net