Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9c836c-81d9-346a-9556-aada3f6910e7.roa
File: 2d9c836c-81d9-346a-9556-aada3f6910e7.roa (raw, json)
Hash identifier: vGzJvESOmx3fOfR7RdaGtjJUoV8JYPzZInwpvSygFmQ=
Subject key identifier: 20:52:4E:34:FE:29:80:4D:DC:D8:95:9D:2B:52:36:C8:A7:79:C5:37
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584902EC1745B9EEA44D2FE494C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9c836c-81d9-346a-9556-aada3f6910e7.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 64267
IP address blocks: 206.206.96.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:17:45:b9:ee:a4:4d:2f:e4:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=d2d0204d-49d1-47a5-b828-a141ee19dce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:2b:0a:54:df:0e:94:e8:d0:0e:7c:9e:3b:
4e:87:1e:1a:62:48:30:f2:74:67:0b:42:58:2d:4e:
78:02:d3:d3:99:b7:fe:fe:c2:35:3c:f9:54:5b:ca:
3f:3c:72:a5:84:77:e2:5a:bf:c7:c9:2c:69:bc:30:
13:4e:4e:5f:b2:a8:7d:99:d2:2c:df:d6:ae:3f:78:
13:89:3a:48:0e:70:cf:fe:72:30:2c:c8:2a:35:71:
ca:b5:20:39:b2:fb:9b:8d:fa:5c:74:66:12:c1:e9:
95:b8:d9:6c:00:da:9f:ac:5f:24:9b:8d:62:86:2a:
28:96:ba:af:50:0f:fb:4e:34:08:fa:5b:3c:82:8c:
ae:c0:36:a7:c8:21:5f:f0:bb:60:11:c1:49:a3:51:
ac:da:a9:2d:4e:ec:cc:0b:9c:84:be:07:8b:54:63:
6e:a1:77:78:85:7a:50:6b:84:33:8a:71:84:64:ad:
7e:b3:af:ef:dc:f8:32:ba:cd:91:a2:20:2d:1d:d0:
6a:38:08:cc:6f:76:3a:9e:b7:6e:cd:48:a2:d3:44:
87:37:cf:d5:b9:79:c6:a7:fc:2b:2c:e1:c7:fb:fb:
4f:05:3b:5c:24:b1:f6:f0:4b:93:7d:ed:a5:46:e2:
1f:d8:3e:ee:cf:c3:0f:52:f4:ea:8a:d0:3b:ec:5e:
f9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:52:4E:34:FE:29:80:4D:DC:D8:95:9D:2B:52:36:C8:A7:79:C5:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9c836c-81d9-346a-9556-aada3f6910e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
206.206.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:c7:e9:35:8d:3a:38:cc:b6:36:d0:f6:0a:3c:2e:5b:c0:75:
a1:a2:65:29:19:d1:d9:39:06:c9:c9:55:7c:7d:c8:12:fc:83:
ce:ab:48:2e:20:a9:75:13:c9:6a:f7:c7:04:59:5d:4d:cb:03:
58:06:d1:76:39:78:92:de:23:37:f2:fa:23:3f:aa:81:95:6e:
df:c3:e8:02:4d:49:47:ba:b6:c9:e1:b5:4b:7d:30:ff:5c:7e:
60:83:9e:b4:7e:58:2b:5e:4d:4a:44:b4:5f:9d:eb:25:d5:05:
4e:c5:97:cb:48:07:05:e6:df:da:9f:4c:56:92:37:31:35:26:
de:cb:e8:95:bf:18:1e:8a:4a:75:df:77:61:5b:3a:05:48:ef:
fc:04:e9:a3:75:ac:5a:28:8e:44:cc:33:76:39:37:d9:82:72:
28:cc:46:3e:2b:3f:f5:48:c5:05:2b:57:2e:8c:89:af:00:62:
e8:e2:5c:86:b8:d9:9e:cd:5a:c2:4a:22:67:f0:f9:c6:70:bc:
96:e8:b8:21:bb:74:50:51:df:9c:6c:dd:32:ac:84:43:88:cf:
6d:07:63:12:40:58:61:44:a7:cc:55:23:49:2a:7e:b1:67:14:
8d:4c:92:f5:80:bb:fc:54:b1:a5:b8:56:51:29:dc:dc:d3:0a:
5a:f4:61:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net