Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa
File: 0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa (raw, json)
Hash identifier: 1fq8h8kMbKY9iYC7KTukUyAzeYChwAaAghfy4qW89+M=
Subject key identifier: 0D:A2:4D:BB:4C:FD:8C:33:53:2F:D9:D8:AA:51:6D:B5:D2:44:A0:3C
Certificate issuer: /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial: 010D0C9F43285849393E7A2C2195F4D5C4754F60
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 11904
IP address blocks: 209.25.240.0/20 maxlen: 20
209.25.240.0/21 maxlen: 21
209.25.240.0/22 maxlen: 22
209.25.244.0/22 maxlen: 22
209.25.248.0/21 maxlen: 21
209.25.248.0/22 maxlen: 22
209.25.252.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:7a:2c:21:95:f4:d5:c4:75:4f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=f9174258-b3fa-4faf-86d7-bd098e8687ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:a1:05:df:40:78:4e:7f:8a:7f:e4:85:a9:
3a:52:87:a8:d5:2d:33:9a:8c:03:53:07:b2:f4:ba:
47:42:b3:ac:79:27:f2:e0:e5:dc:f3:49:54:02:58:
59:f3:16:76:4b:7f:5c:6d:16:9f:68:7a:7d:d0:62:
3d:56:ae:75:6c:d5:60:87:59:7d:26:f2:10:9e:3b:
be:60:3d:c8:ff:83:47:01:e5:64:f0:89:cd:80:37:
93:43:ce:c1:2a:f4:5c:77:3f:5a:3c:2b:2c:7f:0b:
3b:16:23:42:60:bd:d6:cd:b7:12:d7:31:24:bc:cb:
9d:da:13:22:92:cc:f1:b1:46:5c:f1:bd:82:f3:85:
d0:d7:29:46:e6:2e:a9:d7:b5:1f:bf:fe:ea:f5:8b:
28:45:c7:96:86:29:8a:57:05:cd:91:de:39:cd:95:
57:d7:1c:56:b6:d5:0e:d0:45:82:b3:d7:b8:4b:b4:
c3:fc:a9:85:20:a1:50:68:c7:4c:cc:3b:0c:74:55:
42:6f:f0:9e:9c:df:c6:75:20:15:77:16:a5:02:e1:
c2:fb:01:4d:07:14:6d:62:8e:d0:31:0c:e3:41:49:
dc:49:03:f8:85:93:e8:52:bd:5c:de:05:b8:e4:1b:
7f:ff:66:d2:cb:72:7f:87:73:0a:a1:4a:4c:46:bd:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A2:4D:BB:4C:FD:8C:33:53:2F:D9:D8:AA:51:6D:B5:D2:44:A0:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
X509v3 Authority Key Identifier:
keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
sbgp-ipAddrBlock: critical
IPv4:
209.25.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:91:30:1a:39:2f:45:95:61:f7:fe:33:1a:22:ef:f5:78:d5:
10:a8:72:f4:07:eb:17:0c:53:29:9a:3c:21:c6:bb:60:c5:17:
b5:f6:5c:22:32:7e:d4:e9:5b:b5:1d:e5:ba:a7:f4:aa:a9:49:
08:12:04:7b:ac:01:ba:12:b1:2a:92:ac:3e:83:79:2a:09:fa:
34:c8:d4:f4:ba:8c:61:11:68:49:8e:d6:85:28:5d:88:3e:af:
57:ef:cf:8f:a7:5c:89:ec:06:fa:24:a7:dc:93:e4:4c:56:2e:
9d:b3:35:53:f4:b0:f2:f7:a9:ff:38:34:d0:8f:fa:10:2c:c3:
f4:29:52:b4:38:9b:d4:f8:8f:02:71:0e:8c:dd:6b:2f:99:a5:
f0:91:eb:b8:61:45:c9:c2:6f:d6:32:17:56:21:94:31:97:d3:
c4:ff:b3:17:bc:79:e6:1e:6d:d7:18:1c:b4:b2:06:bd:f1:17:
d8:c1:47:fc:7a:ee:50:e5:19:f4:b8:69:93:89:a9:d7:29:18:
0f:c5:06:4a:fe:6a:63:76:e5:18:0c:db:a7:9b:bc:1a:27:6a:
7f:a5:3b:47:33:76:ef:6a:12:fa:46:a9:ed:93:5c:34:e4:de:
cf:e2:3d:85:7c:02:f2:03:4a:73:f9:9c:9b:11:f7:b8:83:78:
e0:e8:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:24 2025 by rpki-client on console.sobornost.net