Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/d8007fd6-d1cd-325d-b7d8-ba89b8bb17f5.roa
File: d8007fd6-d1cd-325d-b7d8-ba89b8bb17f5.roa (raw, json)
Hash identifier: EQpQE4ANJ8CNjJ88O9SEGz+fiISjiZArf3HrR0qQ+cM=
Subject key identifier: 41:8E:34:C3:A7:82:3D:62:AC:BB:11:65:5C:49:05:14:0B:D1:C2:34
Certificate issuer: /CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Certificate serial: 010D0C9F432858498198DD4191FEA80F99237C00
Authority key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/d8007fd6-d1cd-325d-b7d8-ba89b8bb17f5.roa
Signing time: Sat 12 Apr 2025 23:01:06 +0000
ROA not before: Sat 12 Apr 2025 23:01:06 +0000
ROA not after: Fri 11 Jul 2025 23:01:06 +0000
asID: 13875
IP address blocks: 207.228.200.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:98:dd:41:91:fe:a8:0f:99:23:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Validity
Not Before: Apr 12 23:01:06 2025 GMT
Not After : Jul 11 23:01:06 2025 GMT
Subject: CN=e1e97524-f401-4599-88f1-a6a6f862ee95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0a:d5:af:78:8e:8e:d5:8d:bf:8b:e0:68:45:
3e:49:41:a6:a3:f5:ec:77:db:20:ef:e3:40:46:73:
56:3b:7d:d0:d7:97:bf:c7:cb:f4:7b:cb:6c:a6:a9:
3b:ee:31:e2:5e:c8:04:c2:39:68:f6:f7:cb:78:5c:
11:98:84:63:3e:e7:d8:ac:df:28:32:b4:7a:ce:10:
a2:a0:b2:84:34:31:fa:5b:aa:9d:cf:d7:96:ff:72:
32:3a:44:3f:26:23:c5:91:37:30:f7:a4:ac:24:73:
83:69:9f:f0:f7:44:dc:02:9e:26:c2:09:ae:8c:d6:
45:a0:cf:dd:a8:d9:fa:5e:c5:25:bd:ce:28:b7:a9:
ef:8e:a1:4d:d1:05:1e:24:ee:e2:30:47:0c:7a:9e:
bb:85:3c:52:fb:66:0b:b3:a3:6c:ce:55:fc:59:7e:
cf:28:10:7c:b0:93:87:98:45:8b:be:1e:20:53:7f:
b3:8b:e0:61:c1:68:a8:a1:fe:f2:e1:50:8a:b3:3e:
28:9d:e1:cf:16:b1:32:c2:b2:75:4f:1f:4a:ae:34:
c3:0b:76:ea:7e:3c:5c:70:47:fe:96:43:39:69:5c:
95:d3:cf:e7:42:56:ba:fc:35:d2:a7:00:b6:eb:9e:
03:5a:df:c7:88:36:88:78:04:ee:35:51:f6:b0:11:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8E:34:C3:A7:82:3D:62:AC:BB:11:65:5C:49:05:14:0B:D1:C2:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/d8007fd6-d1cd-325d-b7d8-ba89b8bb17f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl
X509v3 Authority Key Identifier:
keyid:5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
sbgp-ipAddrBlock: critical
IPv4:
207.228.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:e0:20:83:51:47:c0:3a:05:ff:24:e5:a5:f9:f8:29:82:86:
19:19:65:c9:4b:ed:96:74:43:c2:d4:5c:28:c7:ff:7f:6b:66:
82:85:cb:5c:f4:a6:63:99:5e:8a:bf:04:3c:b3:c0:f5:90:55:
1a:85:b8:ba:56:b0:8c:44:42:39:7b:4f:24:0b:62:d6:43:de:
55:b2:89:ad:f5:c2:d8:4a:af:b7:cf:26:c9:4e:6b:a0:0b:c1:
13:56:30:d9:bd:d6:eb:5e:90:59:0f:64:ce:4f:72:9a:28:0e:
d6:b0:a3:49:70:6d:10:0f:dc:02:8e:c4:64:36:bc:32:fd:9a:
57:34:59:78:5b:ae:46:de:7a:21:8f:57:8e:56:12:16:2b:b0:
51:9b:55:f5:8e:db:74:59:09:28:a8:08:39:17:96:4d:7a:3c:
aa:e1:6d:dd:74:68:01:28:c5:dc:4f:c3:4e:11:ce:21:1b:a0:
ac:71:5d:75:a6:a0:3b:0b:1e:ac:8f:6c:ee:bb:2c:05:a4:a6:
69:b4:b2:f1:ef:4f:5a:5a:87:f9:eb:91:49:d4:0e:fd:d1:ce:
da:0f:b9:3a:e0:1e:ad:04:4a:4e:59:3f:73:21:31:c8:56:81:
d1:6f:aa:bb:c1:ff:73:8b:87:fe:45:2c:e0:78:e2:38:e2:80:
5c:4f:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:19 2025 by rpki-client on console.sobornost.net