Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
File: da28cf00-8f8b-3953-a50b-406aac3a4726.roa (raw, json)
Hash identifier: R8kYHcMwBbN4yW1s8CEa1yWbQ+bpaV4FIcgcpZp7Apw=
Subject key identifier: 79:D1:4F:A9:54:3A:07:FA:23:EC:F1:6E:CE:1E:64:5F:F2:6E:77:2D
Certificate issuer: /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial: 010D0C9F432858496A19ACB85767A6D87C33C200
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 202013
IP address blocks: 198.161.168.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:ac:b8:57:67:a6:d8:7c:33:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=d8f1ccd5-9a88-43f0-8c9a-1914d43cb5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:e5:5f:9d:4c:42:01:73:ff:d1:04:d1:dc:
ca:51:a0:ee:89:fb:a8:c8:54:de:c5:d9:3a:e4:85:
ca:94:16:05:1d:63:72:49:df:67:ba:ab:79:24:4f:
6f:b1:61:4d:fc:44:08:7d:32:f0:02:07:14:38:43:
1c:bb:66:d0:af:8c:06:ec:6d:1e:12:50:88:22:da:
51:69:bf:e9:db:45:b4:de:59:1c:72:d4:a5:c3:54:
ec:fd:e1:e4:29:3b:50:e3:80:df:ca:e8:e3:35:57:
80:9a:3c:18:c3:4f:5b:5f:bb:8b:8c:23:58:c7:f9:
da:df:7a:1a:d0:a1:d4:84:b8:b3:46:f4:51:29:d9:
d4:8e:21:a7:49:11:a7:27:74:e1:ff:07:8e:de:5d:
34:1b:a4:90:52:db:c1:6e:7e:5e:c2:26:54:ae:c3:
cb:47:1b:a7:56:8a:76:f5:b2:09:32:98:83:e7:7d:
2a:c6:0e:c3:d8:6c:2b:c6:65:06:d5:d9:35:74:8d:
7d:0c:bc:73:6f:ef:70:31:3b:48:e6:7f:f5:ae:e8:
41:9f:10:1d:11:9b:54:4d:7f:9c:79:78:f8:db:48:
01:1d:c9:fd:cb:a6:ad:12:a3:0f:03:68:ef:3f:d4:
c2:b1:b6:41:eb:cd:d4:eb:e2:21:5e:5f:4c:41:2a:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D1:4F:A9:54:3A:07:FA:23:EC:F1:6E:CE:1E:64:5F:F2:6E:77:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
X509v3 Authority Key Identifier:
keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.161.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:cf:56:8a:09:b2:19:c9:f2:1c:6d:46:02:c1:10:ce:09:b7:
7b:de:1e:9c:05:56:b6:31:10:3e:e0:17:ce:2a:ea:dc:ef:d4:
f6:1c:ba:95:7e:8b:0c:41:e7:d6:dc:39:89:61:63:ed:e4:a9:
5d:41:dd:83:98:a2:b6:2f:0e:f3:14:1f:4d:35:67:16:4b:a5:
fa:a8:54:f0:5f:04:78:40:ad:14:67:20:6a:39:78:f4:a6:b2:
13:af:5a:6d:43:23:dc:bb:4f:b0:c5:54:7f:28:89:44:9d:0c:
e6:64:b1:1f:88:e4:a0:e7:fb:f3:54:85:d8:76:c9:d1:4a:bd:
ef:c7:41:09:a2:2c:ef:a6:80:95:87:89:59:e5:ff:68:ff:2e:
9f:d9:c6:eb:e6:67:e0:a8:0e:a8:30:94:98:a7:bc:53:e5:f4:
7c:e1:93:e4:0b:39:93:53:6f:91:cb:cc:6f:f8:ed:cc:cf:99:
68:fc:b4:ff:97:3f:75:90:71:90:d6:30:58:ad:da:76:bc:ac:
93:3d:b3:df:39:a7:a1:19:2d:72:09:3d:f8:92:de:90:29:98:
eb:8e:c4:22:f4:d1:94:61:fc:58:9e:1f:22:19:7c:47:2a:54:
68:ed:59:3b:08:fc:99:4a:86:1c:9f:d5:9a:7a:be:2f:6a:4f:
76:eb:d3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:08:49 2025 by rpki-client on console.sobornost.net