Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
File: 2f0b7f49-a633-3566-aa0c-7f199a78611a.roa (raw, json)
Hash identifier: M/xgKo3mIlhsJuVm/lrym4CyOCC492yBsdI2yneiHi8=
Subject key identifier: 51:EC:82:29:6B:9F:4E:18:43:D6:4C:D0:4B:B3:16:50:A2:5A:5C:06
Certificate issuer: /CN=9c841696-0857-4d7c-8db5-21941a77450c
Certificate serial: 010D0C9F43285848AC60D69F0FD125E4D1389D80
Authority key identifier: 62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 237
IP address blocks: 192.138.137.0/24 maxlen: 24
192.160.192.0/24 maxlen: 24
192.160.204.0/24 maxlen: 24
192.245.252.0/24 maxlen: 24
192.245.254.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d6:9f:0f:d1:25:e4:d1:38:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c841696-0857-4d7c-8db5-21941a77450c
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=4d649daf-7947-43c5-bf33-d3000213d6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:f7:9a:4f:fd:db:13:be:55:60:26:59:d8:
94:87:3e:3a:94:c2:68:97:5a:ac:ad:c0:4e:cf:01:
9f:7f:1c:70:9e:98:49:d0:00:9d:ca:c4:0c:b2:f8:
08:6f:4f:a7:bd:29:d1:c3:82:5d:67:23:40:2e:ed:
49:dc:10:2b:d1:0f:5b:a6:52:65:06:93:5e:c6:d8:
b3:71:40:16:b2:52:83:77:9f:0c:bf:7b:41:e9:92:
b8:bf:c9:73:4a:4e:9f:f2:f2:c6:02:00:0f:a0:fc:
fb:4d:df:7d:37:c0:a7:35:e0:f4:73:e2:b2:ca:cc:
34:20:33:cb:2f:f9:8e:e3:a3:53:23:9a:44:82:28:
27:06:21:95:85:b6:5e:7f:90:ee:ee:7e:3f:55:40:
50:15:b0:c0:4b:6a:c3:cc:93:46:bc:45:f7:5e:cd:
f8:85:b8:2e:b5:69:30:18:d3:7c:1d:9f:50:68:58:
71:84:91:cd:79:4b:31:6e:08:3e:9a:e4:ae:9f:cd:
a5:53:aa:d5:9e:51:c2:48:10:25:4c:f5:07:06:86:
ca:d2:0d:73:8b:ba:3a:9e:41:61:c4:7e:98:e1:4f:
53:53:6a:24:40:9e:a9:cc:05:15:a5:e6:06:84:5f:
9a:89:ed:ce:e0:c3:df:84:71:d6:ca:85:05:04:30:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:82:29:6B:9F:4E:18:43:D6:4C:D0:4B:B3:16:50:A2:5A:5C:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl
X509v3 Authority Key Identifier:
keyid:62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.138.137.0/24
192.160.192.0/24
192.160.204.0/24
192.245.252.0/24
192.245.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ce:3a:a2:36:53:ea:a4:25:e5:57:ab:63:dc:9d:58:e3:5d:
3c:e2:a3:5a:4b:87:b4:7c:6d:15:9f:1c:e2:c9:52:e9:b1:8b:
a7:58:d5:b3:d6:a8:ca:19:09:e2:d9:45:44:8f:60:0e:33:2a:
7b:4f:a3:06:13:ae:62:ee:23:c9:d4:7f:6b:6a:83:5a:cd:30:
cc:4c:2c:60:0a:16:60:95:40:9c:ef:d6:07:2d:c0:03:57:f1:
e7:fa:23:01:76:48:12:d9:10:e3:14:a5:0e:45:d9:08:d0:df:
3c:0c:52:a1:ff:00:43:55:d2:83:75:f4:95:4e:b2:a7:b3:aa:
4a:f9:e7:8f:3e:de:01:99:f1:7a:43:36:11:2c:3c:9f:70:19:
a4:c7:79:9d:3b:89:1b:e8:8a:cc:13:fa:f6:04:8e:40:02:43:
a3:92:9b:16:80:35:42:eb:8b:ec:b0:10:26:17:7c:f6:06:30:
90:88:58:8e:80:82:80:f5:97:75:37:68:a8:c2:a7:17:f6:84:
48:b1:d9:cd:59:c1:f2:d5:86:3c:b5:bc:d2:e4:ff:38:bf:2d:
c2:38:ba:f8:69:8a:6b:1a:b4:c5:72:f7:d2:80:10:e8:bb:80:
78:1f:d8:19:9f:47:2c:b2:ac:07:c5:6f:26:36:74:31:90:bf:
d5:f4:65:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:29 2025 by rpki-client on console.sobornost.net