Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/0caf9562-8f57-30dd-a4d9-4fa99a623f07.roa
File: 0caf9562-8f57-30dd-a4d9-4fa99a623f07.roa (raw, json)
Hash identifier: oQ7DkFJit/18In08d8ZcHncARekLEGuJ/dCK6+q6E9k=
Subject key identifier: AD:E7:2B:5C:1A:9B:01:A9:19:63:C5:E2:12:13:79:26:D8:31:3F:C9
Certificate issuer: /CN=8ed6b206-848a-41c7-8e44-d095394ff9fe
Certificate serial: 010D0C9F43285848B8F0C55F4FBFC49164886480
Authority key identifier: 53:04:C9:27:03:E2:6D:C7:C3:AC:47:17:00:EC:10:34:D7:72:5D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/0caf9562-8f57-30dd-a4d9-4fa99a623f07.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 401477
IP address blocks: 23.185.40.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:c5:5f:4f:bf:c4:91:64:88:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed6b206-848a-41c7-8e44-d095394ff9fe
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=23f1e675-c538-4f90-a943-d75e58bda19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:d7:43:da:b8:2c:37:8b:89:ac:df:65:53:
10:7b:8e:73:5a:f3:b7:46:6a:9f:98:a9:3a:5f:3f:
7d:ef:47:7d:6e:93:be:f2:a2:96:61:93:75:c0:a3:
91:bb:0d:93:2b:ab:46:5b:19:ca:2c:65:ae:78:e2:
04:e3:d5:72:5e:40:ea:28:99:de:43:d6:89:a0:2b:
15:ad:7b:02:44:c0:9b:9e:58:c1:70:40:7e:4a:50:
ee:b6:6c:76:57:7a:86:ab:d0:6b:a6:2f:82:c9:38:
07:db:3b:5b:fc:54:63:0f:b7:fd:f9:36:9a:bc:92:
7b:99:5c:28:45:08:a7:c9:49:fb:c0:4d:24:77:73:
59:70:1d:d1:4f:36:44:cc:3a:88:5c:d9:c1:88:2b:
72:20:dd:42:0c:1b:7e:1d:3e:4f:ef:98:93:3f:bb:
87:06:3a:a5:15:aa:74:99:87:9a:cf:d4:98:3b:01:
8a:e5:40:ac:6e:5d:92:10:dc:59:92:b1:5b:f0:01:
91:89:6a:d3:98:3b:38:50:ed:2c:e2:16:bf:eb:81:
7e:53:66:07:b1:59:e7:32:c7:bc:c8:4a:5d:dd:9e:
de:44:13:73:02:40:88:49:4f:42:d1:7c:46:18:8d:
eb:ba:99:7e:cb:c4:9e:77:67:19:9a:07:79:38:0d:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:2B:5C:1A:9B:01:A9:19:63:C5:E2:12:13:79:26:D8:31:3F:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/0caf9562-8f57-30dd-a4d9-4fa99a623f07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/8ed6b206-848a-41c7-8e44-d095394ff9fe.crl
X509v3 Authority Key Identifier:
keyid:53:04:C9:27:03:E2:6D:C7:C3:AC:47:17:00:EC:10:34:D7:72:5D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.185.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:47:23:88:e4:4d:12:34:33:b1:fe:cd:3b:15:73:cd:c1:af:
1d:2a:e9:a3:83:b5:1d:23:d1:b1:37:0a:33:6b:78:69:44:20:
a2:fd:b1:5d:7f:4e:2f:85:8e:ea:c9:30:a6:29:28:3d:ae:ac:
26:36:54:70:15:37:6d:47:18:d6:72:cd:1a:64:a1:5d:14:13:
d6:79:54:c8:10:28:3d:ac:c2:d2:96:ed:62:48:aa:76:7a:ef:
c0:7b:88:f5:1e:3a:53:b8:a2:e0:43:9e:a8:b8:7f:f3:b7:04:
d4:68:0b:70:95:68:22:30:17:8a:31:28:8a:e6:c2:2f:fa:8f:
d4:34:5c:ba:5e:ff:47:7a:61:45:c8:b0:b4:3b:57:0a:56:b3:
ad:46:b1:97:c0:10:79:78:a2:e5:45:6c:9b:58:a8:6e:bf:48:
0c:ee:c1:3b:f5:42:71:96:26:c9:1d:ae:25:0b:d8:0b:62:7e:
40:78:c7:50:9a:f5:59:2b:76:fa:83:af:22:92:63:5d:ac:f1:
97:37:ba:0e:ae:84:45:08:25:35:28:e7:a5:02:d1:73:21:eb:
95:46:15:b6:fe:42:f8:54:cc:2b:21:e4:ee:51:51:6b:79:e7:
2e:94:26:71:04:63:73:b9:bb:9e:a5:fc:19:ef:0e:05:f8:44:
14:c1:95:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:19 2025 by rpki-client on console.sobornost.net