Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0a5ea506-535d-3cce-aa88-2f1380b887dc.roa
File: 0a5ea506-535d-3cce-aa88-2f1380b887dc.roa (raw, json)
Hash identifier: ZAuz4ENUIBHku/1MfP+nKMMrD3lVgwqEmRjj60xwSlM=
Subject key identifier: 97:EA:3D:BB:28:21:65:B0:D3:2D:7E:0C:6C:9D:F3:7B:64:0E:FC:D0
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584973DEED798468F93B19D5A8C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0a5ea506-535d-3cce-aa88-2f1380b887dc.roa
Signing time: Tue 08 Apr 2025 01:00:47 +0000
ROA not before: Tue 08 Apr 2025 01:00:47 +0000
ROA not after: Mon 07 Jul 2025 01:00:47 +0000
asID: 211192
IP address blocks: 206.206.98.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:73:de:ed:79:84:68:f9:3b:19:d5:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Apr 8 01:00:47 2025 GMT
Not After : Jul 7 01:00:47 2025 GMT
Subject: CN=b124d48c-0197-42c3-8239-9ae7fcb0442d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:31:c6:9d:e9:85:1d:20:b5:66:f5:c8:35:
ca:df:04:b3:07:30:7b:df:f1:b4:a1:ec:20:5e:88:
52:56:8e:f1:ef:d8:8c:61:c9:64:29:6a:40:85:03:
86:1b:13:bd:26:c3:75:17:8f:db:47:e6:02:dc:f8:
4c:77:f8:28:f8:f9:11:b8:2c:d5:6d:52:1d:81:3e:
80:53:a1:b6:4f:a9:45:49:20:16:fa:8b:1f:16:d0:
ac:77:9a:c1:1c:9c:f2:02:d9:9a:58:e9:36:fb:f7:
d4:46:54:7f:22:f5:89:c7:ed:37:ea:95:82:4d:94:
66:1d:16:49:9a:f9:65:98:4d:ba:02:90:b2:87:55:
b4:cd:5f:4c:69:bf:d5:7c:0e:dd:16:5c:47:7a:02:
91:1f:46:18:75:45:e3:40:1e:22:d0:4b:99:2d:d3:
f9:20:0c:16:eb:48:4c:fa:4b:12:26:4f:91:b8:d5:
32:13:7d:ca:c3:98:40:2b:e8:eb:7f:6b:7d:4d:b1:
a7:02:77:3f:48:8a:d5:06:de:bb:8d:f9:13:c0:3c:
c8:b2:4a:dd:e0:fb:e5:4f:4e:b3:5c:7e:c4:f1:94:
13:54:0b:eb:f6:41:44:f4:39:65:ce:19:ab:5a:e1:
6f:13:87:6b:ca:fa:ac:89:db:ba:1d:37:44:a9:fc:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EA:3D:BB:28:21:65:B0:D3:2D:7E:0C:6C:9D:F3:7B:64:0E:FC:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0a5ea506-535d-3cce-aa88-2f1380b887dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
206.206.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:70:bb:bf:d2:10:13:a0:6e:2f:66:76:c4:20:1d:e2:7f:f2:
e5:5f:b2:64:0e:a8:e7:62:3b:a0:97:ae:61:46:d9:ad:05:70:
a6:54:bb:69:ff:68:d6:95:38:c4:52:bc:89:19:1a:c1:59:e3:
09:e0:a4:52:2e:42:fc:5d:64:4d:aa:90:7a:a6:5b:0d:48:12:
9f:4e:46:6c:86:26:1f:d1:a0:b6:16:37:d5:67:02:bf:1b:da:
f1:a1:4f:9f:55:ca:17:de:c2:2b:6d:f1:cb:38:3f:e9:ac:d7:
92:90:93:6a:0a:01:7d:75:7b:18:35:df:ed:ff:a9:b0:ac:4a:
6f:54:b1:6a:40:e2:7c:8c:2b:03:34:f0:15:31:d3:46:91:6d:
36:cd:27:85:03:f7:6c:04:62:b0:70:2b:1f:90:20:29:22:3f:
36:3f:fc:27:8f:52:58:f0:69:51:66:6c:ec:5a:3a:77:11:ff:
f7:26:ed:ed:79:5b:a0:b7:2d:19:ea:8d:45:66:f1:7a:0a:fa:
a9:59:5d:32:ab:4b:5b:ff:99:8f:10:10:0c:30:a0:18:be:89:
94:fc:ec:ec:d3:77:d6:40:14:c1:17:d6:43:e7:7d:6e:07:88:
a2:ac:d4:6e:6c:22:da:17:fa:df:3d:37:c6:40:77:14:8e:bc:
1e:59:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net