Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/e408dee3-c038-3b93-b489-a688428531c6.roa
File: e408dee3-c038-3b93-b489-a688428531c6.roa (raw, json)
Hash identifier: XexbIJAars6H1bCBO+rH3T/Zq6WadVNuF/z29I6RO5I=
Subject key identifier: 6A:F8:36:2F:CA:92:35:58:41:D0:9D:38:07:7B:C8:70:90:67:37:23
Certificate issuer: /CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
Certificate serial: 010D0C9F432858493C0922E8A4AE54E13E03B600
Authority key identifier: 42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/e408dee3-c038-3b93-b489-a688428531c6.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 14618
IP address blocks: 203.96.184.0/22 maxlen: 25
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:22:e8:a4:ae:54:e1:3e:03:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=ef29d46e-62e4-47e8-9363-aa7e9eb89cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:49:c1:57:61:cf:d1:8f:7e:ff:65:9d:78:
dd:cc:d5:75:24:06:f0:7c:28:5e:53:de:70:8c:2c:
15:08:c1:43:d8:6f:2b:c4:64:58:12:67:83:c5:3e:
e8:b6:3c:49:fb:a4:37:2f:c6:08:ff:6b:01:61:39:
20:61:ac:4e:ad:d9:5a:69:29:52:ae:4e:05:b9:2a:
a6:8f:97:9b:64:81:93:3c:7d:33:9f:c8:55:ea:7a:
98:45:65:2c:27:f6:cf:20:c1:b6:80:2b:e9:eb:c7:
ba:e7:ca:82:b0:30:46:30:42:0c:94:c0:7c:d7:29:
31:19:96:81:ae:44:b4:8d:ae:b0:71:83:3b:f7:1f:
76:d2:2d:09:91:b7:2d:a7:5e:92:a5:01:c8:85:7a:
6f:6c:a7:ae:50:79:82:c3:b4:b9:4f:b5:1c:3c:d7:
9c:28:ef:be:d0:67:d5:6a:71:43:74:44:37:0c:32:
0d:3b:e8:43:54:90:cf:06:69:28:36:8d:08:48:b3:
42:89:1f:4b:88:27:27:a7:06:b9:e0:ea:a0:10:82:
b9:39:87:54:ea:5b:7d:26:5e:7d:7a:cc:42:76:24:
53:28:0a:7c:f4:f5:7f:c0:15:49:8b:bd:71:e2:72:
9e:a1:0c:0d:77:ce:b3:50:f7:dc:e8:51:02:a7:28:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F8:36:2F:CA:92:35:58:41:D0:9D:38:07:7B:C8:70:90:67:37:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/e408dee3-c038-3b93-b489-a688428531c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl
X509v3 Authority Key Identifier:
keyid:42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
sbgp-ipAddrBlock: critical
IPv4:
203.96.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:7a:be:4d:c3:55:3b:b3:9b:1a:ff:fa:cb:70:1e:db:d2:01:
74:90:86:2f:4a:7c:b8:5c:1f:e7:86:bf:e9:2e:66:ed:e1:75:
21:b1:e4:e6:e5:87:60:22:83:b4:69:e4:eb:6c:27:9c:19:e5:
38:1a:b5:ac:79:89:e9:47:72:eb:d4:08:b1:21:1a:33:32:32:
03:67:74:e9:ea:74:d6:2f:96:40:9e:08:03:66:8d:ae:47:46:
88:62:64:8f:cb:6c:33:40:9b:47:eb:82:9e:56:23:c2:74:d2:
5e:32:25:70:72:75:68:49:22:93:e9:62:f0:d7:0f:9a:94:aa:
47:4c:75:2d:dd:7c:4e:72:2a:e3:5d:a8:b4:bb:20:08:06:61:
7b:33:31:b4:3b:11:96:fd:83:56:9d:00:67:61:69:d9:79:81:
88:d9:3c:c4:8b:14:8e:ed:f0:d5:5b:e1:e2:ed:b4:f6:99:44:
34:7d:bc:10:18:a3:5d:fd:b1:d5:ba:a2:13:2f:76:8c:0b:65:
da:d0:ab:ed:25:04:2a:c7:ad:06:4b:be:c8:82:4f:18:b6:1a:
b2:54:45:87:c3:b2:1b:4a:fd:fe:48:45:9a:be:73:32:67:9e:
a9:cd:13:10:8b:d7:1f:77:23:55:b9:52:e3:28:06:42:e7:a5:
07:20:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:24 2025 by rpki-client on console.sobornost.net