Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d199c96f-44b3-33f0-b7e0-0d2607c9c136.roa
File: d199c96f-44b3-33f0-b7e0-0d2607c9c136.roa (raw, json)
Hash identifier: 5yfcldAgTUkdcalET8S37OJlEofLZEeb3Q3DoLFxQ+4=
Subject key identifier: 0D:BD:27:AB:60:06:82:28:0F:CB:A2:7D:C7:0D:E3:A2:6D:AF:B1:FC
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848D6412B28FA1A3BB6160B6000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d199c96f-44b3-33f0-b7e0-0d2607c9c136.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 212238
IP address blocks: 23.230.84.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:2b:28:fa:1a:3b:b6:16:0b:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=5b21def2-81aa-4aa4-a40a-3ea0a18edb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:67:43:b2:6c:aa:a0:ec:94:02:0b:51:1a:
b4:a2:5f:d7:12:d5:ef:c9:fe:a9:f4:8a:37:dc:f3:
84:fd:41:e0:a1:73:17:a0:94:83:2d:99:a6:d3:d8:
f8:65:88:0c:6a:02:bb:41:33:75:3c:04:1f:da:43:
e9:73:e7:2c:df:c2:00:05:6e:d2:30:0c:0f:c9:5a:
b1:e1:9d:f8:eb:f0:7f:f1:48:70:36:fd:1f:43:66:
ae:0f:a7:41:0c:08:12:73:f7:b6:e9:2e:67:f9:cd:
52:7d:0d:a6:ef:6b:21:fd:d8:34:f9:d6:e0:20:db:
0d:a4:7a:a3:f8:e6:b3:02:51:47:35:77:79:ff:dc:
6f:64:5d:d1:20:36:ff:48:d9:1d:8c:07:e3:e5:a1:
da:09:f9:f6:7f:8a:34:58:e4:65:f7:16:8d:af:ba:
17:5f:1b:37:1c:8b:d0:fe:9e:a3:51:b2:3c:85:5c:
90:d9:13:b8:2c:93:da:3b:ec:90:19:7e:ce:3c:4e:
f3:ab:a9:25:9e:5f:63:c3:4f:eb:de:b6:cb:96:d9:
40:5a:c7:4d:7d:d1:6e:33:ee:53:b9:91:c8:af:3c:
d2:dd:ae:ff:6c:57:62:67:cd:d9:fb:15:0a:5a:ef:
c3:c1:32:96:92:20:5d:5a:d4:83:1a:57:5e:c7:97:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BD:27:AB:60:06:82:28:0F:CB:A2:7D:C7:0D:E3:A2:6D:AF:B1:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d199c96f-44b3-33f0-b7e0-0d2607c9c136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.230.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:c0:f4:a3:6d:7e:65:5e:11:90:03:88:51:90:fa:c4:f3:4d:
a0:3f:ed:b8:27:ee:69:c7:b9:8b:a9:88:8a:ad:4e:52:26:ec:
b8:53:78:d7:a5:a1:4e:4c:f5:db:58:61:98:5f:8b:91:f9:91:
ad:bf:d7:51:ff:68:5a:5e:e4:94:ba:1e:d1:f4:b2:df:eb:53:
2f:ec:e0:45:64:e1:7b:15:26:c9:f3:71:13:36:0e:e3:dc:90:
bc:bc:6e:eb:03:bf:39:12:51:84:96:0c:75:8f:f2:d6:e8:c2:
f0:62:e0:ff:09:6e:2d:97:56:9b:4d:7c:81:85:dd:bd:4a:ec:
98:1b:eb:d9:49:e1:57:44:b6:61:95:d6:3f:3a:18:9d:32:4a:
65:ad:1f:d4:9c:3f:d9:6b:7a:f8:22:f4:68:4f:c5:76:58:d7:
74:3e:95:ef:12:37:b1:ec:73:35:ae:67:56:13:a1:a4:d3:d9:
24:36:ae:15:38:b6:a6:99:7b:0b:ee:ad:40:5d:e8:0e:49:85:
2e:97:70:24:44:a2:7f:9c:52:c3:f2:0e:ac:d8:54:dd:ae:06:
87:0d:0f:0b:a3:70:d2:f2:5f:65:98:4e:73:1b:68:f2:85:71:
72:e6:88:cc:b9:27:82:2e:75:5a:14:b3:15:cf:8d:c1:46:85:
34:d0:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:39 2025 by rpki-client on console.sobornost.net