Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9edae517-5ef2-394c-8d05-e242c809840c.roa
File: 9edae517-5ef2-394c-8d05-e242c809840c.roa (raw, json)
Hash identifier: nsovFGHoPmnmx4juLrhfg/HvY8flRqeJnHXpdlu7Z8w=
Subject key identifier: 78:6D:D0:C8:62:0F:4B:ED:FB:24:8C:E8:54:E6:48:F6:25:D4:C9:6C
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858496054185932DD77D33DDCEF80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9edae517-5ef2-394c-8d05-e242c809840c.roa
Signing time: Tue 01 Apr 2025 01:00:47 +0000
ROA not before: Tue 01 Apr 2025 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:00:47 +0000
asID: 21769
IP address blocks: 104.247.152.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:54:18:59:32:dd:77:d3:3d:dc:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Apr 1 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=e8ea3b21-2386-4851-9f4d-dcc38a1d610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7c:56:2d:36:1f:46:e3:89:91:b2:a8:b1:2d:
fb:73:15:de:34:47:d8:ce:02:3e:5c:31:2e:61:48:
f5:10:84:41:a4:b2:87:06:a5:ac:af:0c:7d:7d:10:
76:c0:d2:7e:f5:09:57:86:a1:27:10:65:38:a3:90:
5a:81:bd:cf:60:d9:e5:91:10:5b:b4:5d:13:a8:86:
7b:3d:93:d6:8c:ca:ea:60:b8:dc:11:04:aa:78:bb:
4d:4c:5d:b3:6c:99:79:c8:15:8a:40:42:a5:19:ed:
f8:d0:2d:55:25:7d:59:58:d0:ab:b7:89:91:b2:39:
e1:90:73:eb:a9:ff:09:9d:ab:ab:bf:33:94:97:ee:
ca:d9:8e:50:32:7c:a9:f9:f1:31:0c:c9:85:1f:bf:
0c:ff:ac:67:3d:a8:dc:c4:cb:13:b8:93:7c:7b:a2:
e0:1a:37:ed:ab:5a:63:bb:48:7b:21:c8:e1:ef:76:
c6:b6:2b:e5:83:dc:51:72:aa:18:8d:e2:e3:9d:9f:
7e:2d:4c:45:72:b7:86:41:42:67:4f:26:24:19:f0:
cc:ce:38:37:01:ab:e5:45:18:95:2a:3e:95:88:7e:
5a:8c:e6:4e:7e:2a:cf:ee:db:7e:45:60:77:03:28:
e3:f1:19:93:df:01:8e:8f:92:dc:34:43:62:2d:87:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:D0:C8:62:0F:4B:ED:FB:24:8C:E8:54:E6:48:F6:25:D4:C9:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9edae517-5ef2-394c-8d05-e242c809840c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
104.247.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:5b:f1:b9:ea:97:cb:50:d4:0d:fb:4a:fc:5f:a2:a7:c4:f1:
c0:1a:c3:dd:07:9a:48:1e:b5:9e:38:ac:9a:27:28:b0:68:70:
e9:56:21:11:60:94:ab:0b:d5:f4:59:82:c2:63:81:0c:61:a5:
26:7c:a0:4f:79:03:62:ee:4c:d2:46:c7:76:03:6d:5a:f2:b2:
68:f7:d9:67:9c:97:c1:b2:e3:ac:0b:12:04:c7:71:cd:b4:26:
0e:18:75:f9:41:1e:aa:ff:87:b0:72:f7:53:60:12:cf:9f:5e:
c9:4c:a2:53:e1:e9:52:ba:e6:81:96:b2:f2:d9:c2:21:39:6f:
d9:23:47:8a:ed:cc:74:1b:c6:f6:b4:5b:7a:7b:61:ba:5c:1e:
dd:d8:52:f5:17:90:00:58:23:2d:63:d5:55:21:ac:ed:ed:86:
15:c8:77:73:c0:ba:f3:b1:47:39:65:51:b4:55:2b:ef:0c:bd:
79:65:10:3f:ce:e9:9e:45:00:d4:05:8d:7a:b1:6d:31:5d:ef:
7e:be:97:a7:f8:d2:0f:e0:d2:ac:a1:06:c7:e9:88:52:04:e8:
47:6a:81:7b:4e:84:ba:68:0a:be:ef:b4:4d:32:3e:ca:9d:28:
99:35:44:3e:23:43:ce:07:31:f5:fc:42:b9:d2:80:e4:85:86:
65:56:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:48 2025 by rpki-client on console.sobornost.net