Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/25637759-4ecf-32b3-975e-106a6ab9f585.roa
File: 25637759-4ecf-32b3-975e-106a6ab9f585.roa (raw, json)
Hash identifier: c49ueFLK8H/WQqNwk0vi6nCWC1dVqEpL6VOiYHwFBuk=
Subject key identifier: 20:11:EB:6A:3A:C3:C1:F5:AB:52:06:90:39:35:CE:4E:89:CD:A7:72
Certificate issuer: /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial: 010D0C9F432858495ABEE398AEEE28810C0F7F70
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/25637759-4ecf-32b3-975e-106a6ab9f585.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 2055
IP address blocks: 204.90.32.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:e3:98:ae:ee:28:81:0c:0f:7f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=f840faa2-bf44-4e76-8881-a0a6587e62b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:07:e3:cb:80:37:a8:ff:d7:3f:3b:cb:7e:
18:d2:73:d7:6f:b5:f7:96:ec:17:79:29:35:cf:0b:
c3:05:20:12:fd:66:23:6a:46:87:b9:d3:12:3c:56:
f3:2f:10:00:ae:1e:0f:18:f4:3a:03:2d:69:be:c3:
5a:b7:1b:a3:c7:9a:4e:45:48:b8:be:c4:53:3c:13:
6f:cc:b0:ca:dd:91:c0:6d:59:41:74:2e:e5:1c:5d:
44:c4:db:b5:2e:71:12:18:08:4e:32:7f:d2:e1:b3:
df:7c:06:80:10:e3:d3:01:97:7c:bf:5b:8f:c2:24:
c3:c8:1d:0c:27:8d:54:2f:45:73:55:c6:fc:eb:c8:
69:e3:f9:50:84:b4:f8:6f:b0:51:2d:e1:80:9f:77:
5d:83:9d:5e:47:88:ae:96:1d:dd:a9:ed:2c:23:f6:
ae:d6:63:dc:1f:03:18:2b:7a:e7:8f:6b:e9:8a:f0:
d2:7b:81:ba:2a:09:19:6f:d5:7f:b0:aa:01:4c:6e:
9d:ae:20:4d:a4:a9:0d:cd:9c:1f:3d:1a:0a:59:77:
65:de:f5:e2:8a:6c:f8:49:0b:2a:ad:5e:e3:8d:40:
47:32:31:02:3b:6a:1f:bd:54:44:33:98:55:0f:48:
ee:bf:ca:a1:38:aa:a6:6a:7d:07:2c:b8:7f:ad:8d:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:11:EB:6A:3A:C3:C1:F5:AB:52:06:90:39:35:CE:4E:89:CD:A7:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/25637759-4ecf-32b3-975e-106a6ab9f585.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
X509v3 Authority Key Identifier:
keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
sbgp-ipAddrBlock: critical
IPv4:
204.90.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:a7:45:95:ce:1c:b7:b6:55:a6:89:81:6e:9a:fe:9f:77:fd:
eb:0c:f4:5c:33:11:db:a7:64:e3:7a:2a:8a:a5:d8:68:0d:d1:
18:87:8e:b9:dc:82:83:22:11:3a:9d:7c:a8:31:1d:4d:f6:84:
c8:01:e7:f6:0d:30:a3:2d:80:00:08:5d:18:96:30:fa:cc:1f:
10:9b:bc:50:6b:0f:34:a8:83:e2:32:f9:ab:a6:6c:34:fa:12:
d6:e2:00:9d:39:d4:c8:0f:88:35:0a:ae:0a:20:de:9d:c5:bb:
4f:b9:96:32:a9:05:11:09:1e:1a:b0:b2:ed:17:ef:d0:8a:b8:
54:20:df:de:13:c8:7e:b2:d5:0f:b8:a1:04:f9:e9:0f:44:66:
39:e5:8b:19:d8:46:85:54:ab:7f:d9:70:02:03:49:42:bc:55:
e2:83:94:28:a2:48:7b:e8:c4:db:ef:65:1f:ad:d5:81:84:52:
ba:23:2e:a9:5f:44:2b:3e:e2:cf:c2:29:b8:73:28:b3:27:71:
04:4c:2f:c2:b8:4f:f4:70:64:a4:8b:f4:26:0a:d4:2d:cf:ca:
4a:0a:17:77:76:f4:d8:06:f2:f6:ad:a3:ed:6f:fd:c1:14:66:
59:97:14:de:15:ad:ba:86:ae:e5:70:4f:ef:81:0e:b2:75:2e:
80:c9:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:30 2025 by rpki-client on console.sobornost.net