Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c150f3a8-3424-3a84-9209-45853fdf49b7.roa
File: c150f3a8-3424-3a84-9209-45853fdf49b7.roa (raw, json)
Hash identifier: FPq2H9ZfUd3/yx9eiVqOcnM9HPERlR+Rg+yMhHxKV3I=
Subject key identifier: 34:27:94:89:56:76:3A:8D:29:A8:00:A5:27:7B:FD:5B:F5:17:68:BB
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848FD56CA2CB2D737D846D43400
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c150f3a8-3424-3a84-9209-45853fdf49b7.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 53508
IP address blocks: 206.255.240.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ca:2c:b2:d7:37:d8:46:d4:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=7049bec4-b25c-405e-a124-b4c388a7f2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:60:6e:7c:26:34:97:0e:7d:1e:5e:19:57:
82:a4:8b:04:ef:56:f0:aa:16:89:97:dd:e6:81:95:
55:cd:07:49:d5:5a:80:f0:4e:df:20:7c:1f:70:ee:
41:93:08:f0:da:e0:39:dd:0d:0d:f7:04:f5:00:78:
76:45:e5:b0:95:89:01:9b:59:e0:28:ef:15:8e:b3:
4d:12:7f:27:eb:b2:a6:f4:89:78:20:8f:33:3a:f5:
76:93:c1:33:47:32:56:10:f3:69:53:7e:96:16:7a:
e4:00:55:52:7b:e1:57:b4:c6:9b:40:a0:6a:c5:ea:
14:8a:76:60:e5:22:f5:2f:d3:4e:e4:57:0a:0c:73:
bc:1b:a0:a3:81:56:9d:91:94:b3:b1:42:4a:f7:2a:
e4:fa:bf:73:dd:90:4d:ea:da:3b:a9:7b:4b:43:78:
95:ff:c4:ed:65:74:98:77:e5:63:ba:2a:0f:a8:9a:
c4:07:69:8f:47:72:7f:4b:1d:6c:74:41:2e:d6:bc:
6c:01:cf:18:8b:b3:71:68:44:90:8d:b8:f2:d4:8f:
6e:c6:ab:a4:75:71:77:a0:11:d8:1a:2e:09:97:97:
7e:6b:a1:ba:b1:b3:b6:41:5d:79:52:b4:3d:21:45:
fb:55:b7:29:2e:ec:f0:73:03:17:07:84:31:a9:47:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:27:94:89:56:76:3A:8D:29:A8:00:A5:27:7B:FD:5B:F5:17:68:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c150f3a8-3424-3a84-9209-45853fdf49b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:79:ea:2d:d6:29:29:ca:c5:39:9c:b6:ea:85:12:3b:00:c2:
42:31:28:65:dc:46:e1:a2:27:e0:48:81:0d:50:b9:24:cb:d4:
82:db:34:f3:8b:8e:27:54:71:16:1d:94:b6:d3:50:4c:d5:d8:
9e:5b:75:0a:42:8b:9f:cd:1d:49:00:b4:76:3e:3e:d2:cd:91:
32:24:0b:91:ec:5b:1d:ca:e9:92:8b:02:f0:a3:ee:df:4a:e8:
27:ad:68:f6:7b:20:f1:2f:87:22:8d:6e:5f:12:76:26:d9:02:
a5:62:92:de:54:86:01:98:d6:54:49:bf:b7:93:dc:46:87:a7:
5e:5f:a8:ec:3e:a5:96:27:33:34:ee:35:b4:98:a7:04:7c:b3:
3f:f1:2e:bd:9b:a2:bd:0c:db:c5:5a:3c:39:7b:47:1b:a5:f7:
f1:48:e2:d1:c9:12:44:46:71:43:51:75:ad:f3:54:07:a3:63:
c3:87:dd:56:7c:28:2b:4e:90:1d:db:8b:4f:74:bd:ed:95:d6:
64:66:a0:9c:cc:5b:af:1b:a7:6f:5c:8c:e1:01:13:0b:2d:d0:
7e:51:81:12:05:47:44:ce:e4:78:be:9e:f0:ab:e4:14:e9:f4:
2c:31:df:ce:f1:cf:03:e2:48:07:b6:5d:da:04:00:e2:d1:11:
7f:fa:fc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net