Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa
File: ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa (raw, json)
Hash identifier: b5Vps4YKtKTKDoRuny7y3cxpKlnfJeNSKN2u9J3NS6I=
Subject key identifier: 62:21:97:B2:8F:12:73:87:73:B7:BA:BF:3C:23:6F:87:D1:87:96:36
Certificate issuer: /CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8
Certificate serial: 010D0C9F4328584965E9701413F88B4DCF4B76AC
Authority key identifier: A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa
Signing time: Thu 03 Apr 2025 01:00:46 +0000
ROA not before: Thu 03 Apr 2025 01:00:46 +0000
ROA not after: Wed 02 Jul 2025 01:00:46 +0000
asID: 398292
IP address blocks: 23.158.48.0/24 maxlen: 24
169.197.156.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:65:e9:70:14:13:f8:8b:4d:cf:4b:76:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8
Validity
Not Before: Apr 3 01:00:46 2025 GMT
Not After : Jul 2 01:00:46 2025 GMT
Subject: CN=8aa6f901-c266-4a7d-b0b6-cdba67de44bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:78:00:73:ba:c5:4f:20:50:0b:29:df:e8:
a9:24:b4:44:13:48:44:d2:77:1b:8a:e9:63:af:c7:
12:b7:e0:d3:74:fb:84:9b:40:8a:40:64:0a:0c:1d:
f2:48:4c:76:23:b7:91:63:ab:89:ec:b3:bd:86:5c:
c2:ea:83:c7:48:e7:b6:59:ae:e3:52:01:9d:b6:ef:
36:d1:d4:97:87:0b:05:fb:74:28:0a:7f:cc:69:49:
c0:14:9d:2c:f3:bc:61:85:39:89:ac:90:4b:5e:9f:
6e:05:4e:5f:2c:c9:c8:df:19:79:24:ea:97:9d:4d:
85:91:de:f0:6f:6d:13:fc:69:1a:8f:14:76:c4:1c:
27:23:b1:56:59:de:d5:e8:c0:3b:8f:af:7c:da:89:
b4:1c:ff:bd:3e:3a:1b:67:f9:0e:a4:01:e7:c3:aa:
db:8c:93:6f:1b:1e:9b:d7:d6:85:b5:e5:ef:0e:d4:
87:e9:de:fd:c4:49:c7:58:39:b8:31:53:40:fe:0b:
51:13:a5:79:81:28:67:7e:4a:ad:0f:95:b5:bf:5a:
94:86:ea:53:97:18:0e:b8:2b:c0:ce:2b:3b:8c:49:
95:6f:c4:57:75:fa:f1:25:08:af:8d:36:51:34:4d:
6b:68:8f:f7:fc:14:ce:4a:ad:b4:5d:98:3f:3a:be:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:21:97:B2:8F:12:73:87:73:B7:BA:BF:3C:23:6F:87:D1:87:96:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl
X509v3 Authority Key Identifier:
keyid:A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.48.0/24
169.197.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:86:6e:b7:0e:b2:da:67:a9:34:2c:2b:83:3d:99:ee:d8:75:
bc:57:9b:a7:7f:4a:98:c3:c2:c0:95:c5:da:9c:81:e8:4d:b1:
4f:c3:ad:92:99:4c:1a:68:ab:bb:96:57:75:ba:23:c8:b4:68:
a6:db:93:ca:19:9c:97:eb:59:39:99:d4:97:4f:a1:63:c6:ed:
14:bd:05:24:59:ad:70:40:73:bd:4b:75:14:16:d2:59:18:de:
d7:29:75:c0:33:0f:0b:09:c3:e6:5f:83:23:0c:d3:41:85:23:
28:27:d6:c5:f8:58:1f:2f:6a:14:f9:fd:78:86:5b:cd:a6:18:
94:08:ee:a1:99:3e:a4:65:00:de:fa:48:c3:25:cd:ac:3e:9b:
20:f9:74:2f:8b:86:30:fa:cb:bf:90:7a:ff:a1:60:41:65:a1:
be:09:86:d7:4d:24:e7:b6:7d:a5:2a:be:8f:12:0b:70:48:bd:
c6:9d:9b:79:91:0c:7b:98:61:5a:0a:8a:b2:3a:ae:80:54:2b:
a9:ef:ac:50:77:26:f8:78:7a:1a:a8:23:75:f0:89:ae:fe:c3:
7e:bc:d8:d0:cc:61:2d:94:c6:50:7c:00:31:b3:17:ee:38:ee:
5f:7f:58:c9:c0:ac:54:d4:d7:83:03:6f:8c:48:cf:66:d0:63:
0e:ad:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:25 2025 by rpki-client on console.sobornost.net