Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dcef9f30-90e3-32a9-b742-b3751bbb4f5e.roa
File: dcef9f30-90e3-32a9-b742-b3751bbb4f5e.roa (raw, json)
Hash identifier: QCFiTCPgIP/OZCK6YFPhvap+2M8SDlVdotdkCZ70abI=
Subject key identifier: B1:65:78:C9:7B:3C:4B:0C:C4:A6:CD:1B:34:9C:D6:35:26:63:60:AD
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858497E07E8FAD18CA1DC5E8B0380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dcef9f30-90e3-32a9-b742-b3751bbb4f5e.roa
Signing time: Fri 11 Apr 2025 16:21:37 +0000
ROA not before: Fri 11 Apr 2025 16:21:37 +0000
ROA not after: Thu 10 Jul 2025 16:21:37 +0000
asID: 31715
IP address blocks: 45.39.71.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7e:07:e8:fa:d1:8c:a1:dc:5e:8b:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 11 16:21:37 2025 GMT
Not After : Jul 10 16:21:37 2025 GMT
Subject: CN=fc88f855-9596-43cd-9e1c-4fa63153e2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:cd:d0:9f:cb:43:d4:62:94:24:57:a7:88:
48:93:6f:4d:a7:0f:65:64:69:52:46:d1:24:04:51:
fd:b8:b4:01:fb:cc:f3:b4:bb:a4:79:0e:b2:b8:fc:
e9:b5:22:c2:1e:51:46:15:da:32:48:e6:77:0e:01:
eb:fe:a6:04:21:79:e5:12:b0:90:61:c3:b8:a1:79:
4c:c6:5d:5a:f6:3a:fb:41:bc:95:07:40:3b:78:ae:
fc:d9:02:ef:09:af:fe:f3:b4:df:08:6c:87:66:ee:
c9:4a:3c:23:cd:61:e6:a0:e9:ba:8e:0b:97:ba:80:
d8:fa:87:87:96:95:d0:b2:e9:f3:e2:1a:64:f2:12:
1d:76:7a:ec:c5:6f:24:6f:15:fb:9b:05:d0:77:c2:
e1:c7:0d:c3:17:04:dc:2a:04:d0:d1:66:17:f2:43:
b5:ad:75:fe:c0:54:6d:53:80:6a:31:3c:f2:a1:d1:
22:90:87:15:e8:70:57:a4:77:86:5d:e7:dd:a8:00:
a7:e8:3c:c8:aa:66:16:81:fa:fe:08:4f:49:14:e9:
c3:64:70:5f:c7:40:ed:54:76:59:d9:1a:5a:bf:7b:
3f:3e:52:1a:8f:bb:4c:81:de:f7:c1:66:40:1b:ff:
de:d7:6b:11:7e:6f:eb:1b:e7:70:ee:50:ec:ec:68:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:78:C9:7B:3C:4B:0C:C4:A6:CD:1B:34:9C:D6:35:26:63:60:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dcef9f30-90e3-32a9-b742-b3751bbb4f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.39.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:e7:5a:33:02:62:3f:a7:3d:c7:22:15:07:4a:78:b6:1e:54:
cf:e0:3d:32:ae:74:46:54:b2:07:bd:31:3c:99:a0:5f:10:92:
5f:80:df:c7:6f:39:33:46:fd:3b:35:b5:ac:78:11:41:02:6e:
06:e6:1d:73:16:23:90:dc:f4:ef:3f:27:32:67:0e:25:f8:93:
36:ac:bc:c6:6f:90:22:6e:53:be:a4:41:0f:32:fb:24:81:93:
5d:9b:21:39:16:14:69:ea:c8:4c:eb:1d:ee:f6:b6:37:15:19:
d2:a4:51:3d:87:1e:8d:a9:f7:46:65:84:4c:a0:e9:cd:8d:2a:
ff:37:98:ed:6c:e8:47:42:64:00:e6:21:0b:4e:b6:ca:38:aa:
00:8f:68:3b:bd:2e:fb:f9:9c:47:2a:52:53:bb:40:12:1f:68:
cd:2f:8c:2e:5a:d4:83:1e:08:50:a5:39:70:09:3b:d2:e8:a0:
13:fb:b7:13:8f:fa:60:93:9d:10:3d:44:62:e7:09:ab:f1:5f:
b7:2c:02:bd:af:3e:e6:da:6c:16:21:a8:8c:00:54:a2:5d:c7:
f9:bb:b1:d5:a3:9f:68:72:b5:e7:30:78:4f:a8:76:5c:07:3f:
4a:d3:a8:c1:db:75:16:63:05:78:eb:17:44:cb:cd:c2:d6:99:
44:08:5a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:43 2025 by rpki-client on console.sobornost.net