Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/23902af4-0c49-3014-9394-6b31fa2836cd.roa
File: 23902af4-0c49-3014-9394-6b31fa2836cd.roa (raw, json)
Hash identifier: De5L7Gnh5ZvwZPkFmj1EakKd1xqtUv268zsOW6MIyr0=
Subject key identifier: 6F:D4:50:4E:4C:87:9B:42:63:C2:CD:1E:96:70:5A:02:3E:21:0A:FD
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F4328584944693C976C928870399C7F80
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/23902af4-0c49-3014-9394-6b31fa2836cd.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 9084
IP address blocks: 154.1.168.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3c:97:6c:92:88:70:39:9c:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=26a38ea2-61c8-49a4-90c5-b8a9f44120de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:10:d2:e5:0d:46:45:37:9f:49:a6:27:01:
1d:64:d7:ab:86:56:38:f4:33:8d:16:83:76:e8:ae:
c1:f0:72:73:95:69:5e:b6:3d:41:ed:21:c5:a4:91:
4f:a7:c1:af:77:2a:95:1b:4b:a6:f5:5a:b5:a0:19:
e5:b0:38:9a:e3:30:98:7a:8c:e8:41:25:33:82:42:
d4:f3:db:9e:bb:4e:6e:49:a9:7c:d3:0b:cc:20:8d:
be:fe:47:1c:6f:17:b9:76:4a:d5:2d:01:91:7f:b0:
80:38:45:6f:55:d7:53:fa:29:0b:c3:c7:f1:14:9f:
a3:19:c9:1e:82:a0:73:68:58:45:74:bf:92:20:f7:
0d:c3:a2:24:ac:95:09:24:cb:0f:a0:85:57:f6:cd:
16:da:4f:d8:6b:bf:58:b9:f9:e7:6b:d9:63:53:6f:
46:26:e5:ab:95:ee:e3:f7:0c:34:27:61:b8:bd:6b:
b5:d6:a3:94:3e:c7:d1:71:d2:a0:91:78:11:64:30:
53:01:d1:fb:f2:22:c6:10:63:f2:2c:f1:36:c4:45:
c8:7f:06:c3:35:54:49:81:d4:79:cf:e2:52:22:ba:
2d:39:ae:5d:3e:c2:ae:31:e2:40:45:f7:bb:a5:fb:
cc:f7:85:3a:92:d8:83:20:ec:63:c4:34:0e:48:8e:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:50:4E:4C:87:9B:42:63:C2:CD:1E:96:70:5A:02:3E:21:0A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/23902af4-0c49-3014-9394-6b31fa2836cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
154.1.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:40:d8:7c:0b:37:fa:eb:d8:03:6d:47:29:6b:c6:f7:ec:92:
1a:17:77:7a:51:54:8c:e5:03:3e:df:e8:75:8d:7c:80:e8:ee:
b9:94:1e:2e:9d:c0:ad:70:f5:46:cc:69:39:22:4d:2b:40:78:
86:c0:1e:c8:eb:d2:b7:b8:1d:52:31:45:ee:83:58:8f:51:ba:
c2:1d:27:32:a4:08:e2:5c:12:a9:87:b3:2a:96:8d:7e:b1:5b:
3d:7b:93:51:71:b0:e1:03:73:50:7b:7a:b8:f2:54:8b:9e:24:
93:08:73:a5:29:5e:e0:d7:77:ab:d7:81:74:18:c4:d0:1b:1a:
08:cb:2e:63:9d:50:66:1c:8b:07:66:96:ce:50:7e:c5:7e:1e:
80:ed:23:f0:94:3d:06:7f:0c:a7:c2:3c:41:25:ed:e2:76:21:
80:9b:c9:51:a2:99:a0:c2:a1:21:64:b1:b4:f1:25:4c:7e:5f:
d9:a4:7b:a0:ce:3a:7d:ab:b2:de:6b:0b:06:e3:9f:95:b5:a4:
8c:60:ff:9f:29:26:f0:69:89:8f:e7:ec:7a:58:6b:76:f7:8e:
7f:7c:c0:bb:a3:ed:95:bb:c7:e2:8a:be:47:2a:a7:4a:86:0f:
d3:a4:9c:ce:40:84:14:0e:38:06:d6:18:4a:e6:40:ab:5b:64:
03:e8:68:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net