Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89453ec5-f976-3e5b-8f09-a56b56ecedc0.roa
File: 89453ec5-f976-3e5b-8f09-a56b56ecedc0.roa (raw, json)
Hash identifier: 4ipsIpyrQACw2Ey2PSA694Y3XhVehTYLiDvS2NrTDMo=
Subject key identifier: FE:A4:28:E3:F7:C5:4C:1E:38:5C:C1:74:70:7F:C6:89:67:84:56:DA
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285849674EF6DE0B9D405E82F7A440
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89453ec5-f976-3e5b-8f09-a56b56ecedc0.roa
Signing time: Thu 03 Apr 2025 13:01:02 +0000
ROA not before: Thu 03 Apr 2025 13:01:02 +0000
ROA not after: Wed 02 Jul 2025 13:01:02 +0000
asID: 62240
IP address blocks: 198.102.9.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:67:4e:f6:de:0b:9d:40:5e:82:f7:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Apr 3 13:01:02 2025 GMT
Not After : Jul 2 13:01:02 2025 GMT
Subject: CN=772fee4e-60ad-4b4c-ad02-e225cca33812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:d5:0b:72:21:2f:9e:c9:55:a7:85:fd:e5:
58:e2:38:95:79:0c:60:31:04:32:e3:cf:9e:74:60:
3f:cc:a1:80:f6:bc:75:90:49:75:58:9c:48:ac:08:
c7:29:3e:39:ea:27:30:1f:c4:2c:eb:fb:24:a4:c6:
b9:44:82:4d:bf:05:36:aa:ca:8b:87:19:33:4b:33:
f1:47:4c:d0:45:8e:4f:4f:5c:95:a1:88:61:8e:35:
5e:1f:4f:67:dc:1c:8a:db:2f:a1:84:86:ca:fa:f1:
8a:b7:b8:80:3d:b4:54:c1:bd:74:79:d9:74:18:e7:
6b:25:ef:37:ff:ba:1a:10:14:37:02:23:2e:ec:f8:
f4:2a:c2:c2:7e:db:46:97:ad:75:3c:c7:4a:96:63:
35:dd:69:3c:32:f0:46:ff:4f:0b:ad:38:e4:8b:f2:
86:89:ab:f6:46:16:61:4c:51:71:02:7a:6a:1b:a4:
df:93:05:d6:e4:06:a1:65:64:e8:4e:4e:3a:b1:e9:
57:ff:6f:42:91:a3:a1:c3:7a:5c:47:6f:42:a9:8b:
16:9e:3e:db:06:8f:e6:ba:40:a2:3f:47:f5:d5:ab:
4f:d6:a4:b7:09:16:d8:19:b9:d7:a8:28:7d:a8:21:
6b:63:b1:52:53:0e:49:76:bc:4d:d2:45:6e:62:8c:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A4:28:E3:F7:C5:4C:1E:38:5C:C1:74:70:7F:C6:89:67:84:56:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89453ec5-f976-3e5b-8f09-a56b56ecedc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
198.102.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:49:d7:d5:19:25:bd:e5:1c:f6:79:6b:0d:03:e9:3a:b2:df:
4d:3e:59:45:9f:0c:e2:8e:3c:7b:c0:37:19:67:4d:97:4c:09:
b1:be:51:21:fa:47:ed:82:ba:a3:d7:69:ac:3b:81:fb:8f:c6:
8a:4c:77:41:97:63:33:02:fa:8b:1d:da:44:99:31:c1:a6:4e:
72:96:50:63:b9:8d:94:93:50:a1:23:bc:16:cb:58:84:21:ab:
2b:c1:fd:8c:11:63:44:5b:99:6d:b8:e1:96:55:f5:aa:18:88:
42:91:62:70:5a:8f:96:80:e3:f5:cf:8d:fb:a7:39:61:c2:2d:
bc:71:ec:42:6f:e7:bf:18:47:94:d2:3a:26:f5:71:0f:bf:ab:
7a:68:88:99:a7:36:da:77:a8:43:34:b0:04:b5:d8:5a:c0:4b:
07:02:e7:bf:a8:25:df:08:9a:4b:d1:54:59:e3:d3:72:01:10:
ac:bb:dd:fb:50:0a:07:2a:5e:22:16:21:e6:08:90:58:63:d1:
d2:37:1d:a3:08:77:11:20:a5:63:9a:5b:a8:47:94:9c:de:fb:
a5:48:f3:b2:3d:5c:28:dc:5a:58:c3:cd:73:0c:44:d7:0f:4a:
21:99:41:65:f6:b8:da:fb:10:0c:07:df:6a:de:e9:f4:90:ac:
23:f8:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:48 2025 by rpki-client on console.sobornost.net