Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa
File: 23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa (raw, json)
Hash identifier: 1tEHZeDY+0x8ypnXcbNK2zdwcfgKznd744sgnQXxDzw=
Subject key identifier: 89:8B:B2:BE:EB:29:43:32:A4:CE:CB:B5:BD:12:3F:A6:84:A9:F1:E0
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584960541C19CAB8F3E68DB5ED40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa
Signing time: Tue 01 Apr 2025 01:00:47 +0000
ROA not before: Tue 01 Apr 2025 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:00:47 +0000
asID: 55286
IP address blocks: 198.89.124.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:54:1c:19:ca:b8:f3:e6:8d:b5:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Apr 1 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=fea85b38-1385-41e6-a6cb-7e7ab90cff31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:24:8d:5d:22:eb:26:c2:e4:c8:f8:f4:09:2f:
d2:e4:06:1f:1c:26:36:e5:e9:ac:a3:1a:a3:62:80:
9c:9b:f0:b6:69:83:2e:08:cf:52:77:b1:ee:a4:63:
a6:4c:fb:69:ba:c4:63:bf:77:7b:18:a4:fe:d6:a6:
5f:59:04:7d:8e:20:51:57:f2:78:b2:39:45:97:8a:
7a:a3:39:24:22:e5:47:27:5f:8c:a8:75:ba:84:10:
67:25:4b:b1:a2:43:b9:5b:b3:78:d0:49:87:8c:f6:
98:03:dd:69:cb:17:02:ff:d9:63:18:8a:88:a6:81:
d8:b6:2f:c0:b9:40:d9:67:58:18:01:96:03:c3:c7:
69:e8:89:5b:3e:32:79:91:98:4c:ad:39:80:98:ef:
93:79:27:8c:ef:22:8f:66:28:d6:42:27:74:47:ae:
b3:3a:e9:65:f6:7f:1e:e4:2f:93:a4:31:cf:a7:35:
12:07:3d:ce:ca:52:ec:1e:bd:1f:70:2b:33:28:40:
cf:bc:61:68:18:9e:7f:0b:01:ef:8e:63:04:23:13:
ca:a9:f8:3e:bc:92:c3:89:b7:28:86:41:0a:b2:2f:
83:84:17:a6:14:9a:b8:cf:0c:bc:0a:9f:10:2a:4f:
5a:ad:81:96:1e:8e:34:8e:40:1c:a4:ca:cd:e4:7f:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:B2:BE:EB:29:43:32:A4:CE:CB:B5:BD:12:3F:A6:84:A9:F1:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
198.89.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:66:91:41:7f:a5:c7:9e:84:a7:64:19:66:5d:d3:76:73:a8:
07:2a:f5:11:36:00:03:74:5d:f5:84:51:b3:76:e7:8d:cb:81:
93:b4:46:37:15:46:f7:b1:21:b5:29:35:21:26:3d:28:58:a1:
bc:0e:ee:86:13:1f:96:73:8f:85:22:d7:a4:d2:97:81:b4:c4:
c1:77:a2:79:19:bf:38:72:b8:23:65:f1:de:99:cf:ff:5a:9c:
47:0e:97:fd:88:47:ec:46:fa:90:88:2e:1d:d2:9b:27:35:9f:
d5:59:7d:d6:a1:37:fe:80:66:6a:f8:68:d5:14:df:4a:4c:89:
c7:69:c7:5d:52:da:d7:46:fd:f3:62:2e:5a:c0:72:cb:2a:cf:
af:01:18:25:25:f9:c7:ba:3d:c8:85:b7:ab:71:e4:5c:17:bc:
d5:f1:f1:2b:3b:d0:2e:20:b7:53:24:3c:3a:b6:bb:17:2c:a8:
e4:1d:8a:fd:ca:67:43:36:24:27:e3:5d:cb:d4:5f:43:6f:3b:
ce:e0:1c:c0:6b:0b:a4:5f:e8:d9:d9:77:ed:c7:b7:29:55:6f:
1d:f8:f1:dc:f9:3d:d2:c7:16:e0:87:ee:8b:25:3f:0b:8d:ad:
81:6c:f1:77:e5:8f:7b:d1:2f:59:10:3d:e6:99:1e:aa:b6:0d:
3a:f9:7e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net