Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa
File: 3df8bceb-a2e2-3194-b950-40db68d2b35f.roa (raw, json)
Hash identifier: qHpT22+GuAhazYgL9QhqW9ZnU/dVutMV3btJiPuPQQg=
Subject key identifier: 18:F3:8B:95:D3:2A:7F:46:F9:5E:05:83:45:04:97:59:05:EF:77:4A
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858497279BC43815ECA739ADF4F80
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 33598
IP address blocks: 138.8.12.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:bc:43:81:5e:ca:73:9a:df:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=f7979518-08b0-41af-bdaa-1325f2b232ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2e:08:5f:c5:85:1a:1d:54:76:09:cd:1e:de:
44:2e:27:1f:77:d1:42:4c:03:4e:81:3e:f6:78:53:
ad:03:e2:79:38:14:dd:4b:85:7a:ac:61:55:66:c7:
21:26:86:c3:64:5d:8e:9c:ca:bc:5e:bf:98:72:a1:
0d:01:c2:e1:30:02:a7:32:71:7d:84:1c:a1:a4:6e:
d3:13:f5:06:80:95:3d:46:1a:60:0e:bd:3c:b3:1a:
b9:d6:eb:5e:dd:67:83:5d:f1:c1:46:8d:de:32:52:
49:46:88:bb:4f:87:2b:16:9e:a9:88:b0:ba:de:b1:
1a:39:b4:c6:04:90:b7:49:5e:5a:a1:99:b3:59:f7:
62:b1:86:7a:55:4e:f9:6b:ee:5b:09:af:f8:65:8c:
19:4d:f8:a4:88:88:25:3c:3e:aa:71:cf:5b:cf:68:
cb:d5:35:a4:b9:52:39:5d:64:e5:50:17:66:0a:1e:
fc:c6:ac:cc:99:18:a7:c6:e9:80:cf:15:e7:2a:c5:
ad:65:55:b5:41:51:11:f0:af:c6:49:2d:5e:ef:1b:
27:5e:cc:69:b3:be:80:30:a6:f4:50:05:d6:9f:e8:
e6:22:dc:91:c3:25:b2:19:2f:b4:3c:df:31:b1:dd:
91:0c:f3:56:85:dc:96:22:15:b5:d1:a6:6f:17:fa:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F3:8B:95:D3:2A:7F:46:F9:5E:05:83:45:04:97:59:05:EF:77:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:18:c8:35:dd:44:5b:55:85:69:8d:46:94:33:42:8f:af:6d:
af:27:e8:df:89:c0:92:be:1b:25:39:e6:f1:9e:23:80:00:80:
28:63:bb:05:f9:ba:60:12:cd:b3:01:45:a8:ff:a6:a2:5c:5f:
ed:e9:60:1f:a4:1a:f7:aa:cc:ec:6e:c6:8b:82:2b:bb:35:06:
5b:b0:c1:2e:8c:82:8a:c0:38:c6:8a:cf:0f:fd:41:81:0b:a0:
39:6a:ca:e1:a1:11:9f:20:45:e7:10:3d:a1:1a:4c:47:7b:0e:
e5:e6:ba:a4:58:66:1b:59:61:f0:d7:31:49:74:d9:ad:a3:21:
6f:a7:29:40:8b:3b:a7:aa:e9:e2:45:48:35:0a:73:c9:86:7f:
e6:24:92:a2:8c:91:ff:6c:48:38:a5:91:84:1e:cf:f1:c8:11:
1f:b1:d8:02:0c:c6:4d:92:f9:6c:5b:7d:8e:48:06:cc:94:84:
82:90:0d:72:88:b3:e6:10:e1:db:16:f2:39:52:8f:3b:25:ee:
7d:52:d6:1d:5c:4c:9d:33:e2:73:71:de:8c:d7:94:1e:25:1a:
c3:0e:97:31:d9:29:57:c9:f0:c2:5e:a9:17:3d:2d:c4:d6:9f:
96:7c:e3:30:67:1f:8c:e8:73:6d:96:9a:df:79:4c:60:3b:08:
26:70:1e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net