Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
File: 542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json)
Hash identifier: 6HRdEf/okzgA5SsJ0h1rb8NZxbhhpBMmAqYvVXHaJlU=
Subject key identifier: 93:F5:C1:41:0A:88:AC:DD:BC:93:96:25:73:EB:E3:93:80:AB:A8:FA
Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial: 010D0C9F432858496B7ED4F45E9AF324D1AE7480
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
Signing time: Sat 05 Apr 2025 01:00:47 +0000
ROA not before: Sat 05 Apr 2025 01:00:47 +0000
ROA not after: Fri 04 Jul 2025 01:00:47 +0000
asID: 21530
IP address blocks: 170.186.152.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6b:7e:d4:f4:5e:9a:f3:24:d1:ae:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Validity
Not Before: Apr 5 01:00:47 2025 GMT
Not After : Jul 4 01:00:47 2025 GMT
Subject: CN=d54bdfff-9bae-461c-9b49-50bd88c47edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:6d:ab:2a:c3:ec:b2:92:8b:eb:23:19:46:
d1:e3:1c:2a:9a:7c:1b:33:ed:b0:e5:93:35:16:6c:
f7:78:63:ca:9f:92:d6:42:09:6f:fa:03:0e:f6:fb:
1a:3d:68:3b:3e:f5:89:70:f0:50:49:a2:ad:f2:dd:
7e:0a:3f:1a:71:05:3b:9e:47:0d:b0:7b:28:c4:df:
e9:7f:f3:a7:28:cb:67:97:13:33:0f:f2:7f:6c:5d:
2e:e1:ff:57:17:ca:63:22:82:cc:30:dc:e9:3d:55:
7a:89:97:c7:67:77:83:d8:6a:ac:30:df:20:24:5e:
55:3c:2c:43:9a:58:d3:35:52:a5:bc:15:4c:34:82:
2c:a1:25:ee:ff:32:37:24:05:8f:0e:00:4f:b8:41:
72:c7:cb:40:5b:95:94:ac:14:d3:05:9f:11:23:75:
d2:8c:64:98:88:2d:a9:53:ec:2e:8e:ed:f4:79:a7:
f7:6b:6f:45:e3:d9:80:01:63:29:e1:1a:e4:5c:07:
56:35:96:1c:83:6d:79:c5:3a:41:20:57:cd:48:b1:
6e:8a:7f:8a:48:b7:d5:42:55:d6:d0:35:e9:71:e1:
50:cf:ab:81:eb:f3:d8:6f:88:4b:07:43:a9:48:7a:
ab:5c:e3:e4:c0:25:02:e2:cd:85:d3:52:10:c4:02:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F5:C1:41:0A:88:AC:DD:BC:93:96:25:73:EB:E3:93:80:AB:A8:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
X509v3 Authority Key Identifier:
keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
sbgp-ipAddrBlock: critical
IPv4:
170.186.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:07:50:4a:06:bf:45:07:e7:d1:7e:41:51:80:27:50:c2:87:
25:9b:96:fd:90:cc:49:80:d5:4f:92:7d:bc:97:78:60:49:6b:
56:19:16:e5:b0:10:f0:12:88:bb:2a:50:00:29:92:d2:1b:34:
8e:13:a3:70:a0:d4:cf:ef:81:24:01:3e:fb:00:ab:ba:33:31:
80:7c:a9:d9:b7:75:ca:97:e0:dd:93:94:f5:09:8a:d4:20:e9:
35:7f:66:05:56:68:a3:92:dd:32:55:64:07:c1:8c:df:b7:47:
fe:f8:5d:e0:26:24:dc:a9:df:9e:ac:5f:a8:36:a6:bc:b5:54:
12:a5:63:0f:27:72:00:87:73:da:c0:fa:1e:ca:b2:6a:29:be:
fb:65:fe:6d:cb:33:6f:df:5f:12:54:52:d1:5c:65:e6:83:55:
6f:c5:0d:1d:4e:b5:77:bc:4b:68:8e:42:61:08:84:ec:7e:4f:
8f:4d:4d:58:16:5d:c4:57:26:c1:b2:2f:03:56:8f:b5:41:cd:
49:d6:fe:bb:ef:54:70:6d:86:95:7a:09:45:ab:e5:79:72:d7:
64:a8:ff:ae:6c:ac:a0:73:9c:81:f6:3b:45:aa:02:37:93:fb:
88:2c:b5:95:01:95:72:1c:9c:86:2a:ae:b3:13:e3:94:a1:f2:
60:99:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:45 2025 by rpki-client on console.sobornost.net