Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa
File: eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa (raw, json)
Hash identifier: 44MUZyuFG60w9mOYDJCYU1hgGecnf+1OU5lrs0wm6bs=
Subject key identifier: 42:3B:EE:05:8E:10:6F:15:4F:C1:2A:12:01:37:B6:88:BF:9B:89:70
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584957F4149A9BE34282107014C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 216.107.128.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:14:9a:9b:e3:42:82:10:70:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=c2708a9f-6307-4e1f-a4a1-558932ae75df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bb:9c:5b:18:2c:43:07:e7:15:8b:20:b1:4d:
45:e2:b4:ca:80:5e:79:c0:ea:98:eb:2d:9e:8b:35:
a6:c5:07:d7:94:7a:4f:5a:65:de:db:24:e9:7f:10:
98:3c:5e:ca:b1:c0:65:04:18:1f:2b:8a:a5:10:cd:
e2:e5:90:68:4e:8b:3f:80:c2:2c:86:81:df:fa:93:
e0:28:a2:d3:e2:54:3a:76:a2:7f:bd:27:d0:a1:73:
43:7c:c7:c8:48:21:a7:ad:74:08:ba:da:89:fa:20:
63:9a:52:4f:e4:4a:b1:60:bf:bc:30:ad:38:c0:5c:
3e:54:75:b5:03:87:73:fa:79:74:b1:14:23:09:a6:
3e:18:95:97:90:a8:ea:fc:d1:24:92:e3:2c:ba:50:
f3:c4:5b:2e:0f:45:46:2c:2d:2f:a3:d5:0c:b9:ee:
ab:5a:c3:b6:4c:76:6e:58:93:14:51:e4:9b:f4:82:
cf:32:b7:1c:17:13:df:9b:16:f6:5d:a3:58:69:18:
ad:c2:33:6a:6e:1d:4e:9a:20:c5:ba:76:d0:fd:f2:
de:08:92:59:a5:83:75:42:a4:d8:23:89:7e:df:16:
33:7a:90:d3:3b:eb:d9:ff:31:a8:b2:4d:b1:4c:62:
40:3b:ea:dc:52:2b:ea:a9:f7:9a:b9:60:16:08:d3:
cc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3B:EE:05:8E:10:6F:15:4F:C1:2A:12:01:37:B6:88:BF:9B:89:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.107.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:28:aa:32:94:9e:91:12:af:47:5c:00:fa:6a:5c:b7:05:11:
cf:70:cf:da:f7:d9:dd:90:97:b2:f8:59:14:b1:42:75:d1:7f:
ec:f8:6d:bb:f4:5f:45:e4:a8:4c:74:27:f2:49:be:b0:8e:b2:
fb:a7:0f:10:ec:13:81:65:d8:31:77:27:4b:d2:76:6c:89:67:
b5:40:40:cd:60:00:95:ef:a3:7e:0d:4a:76:b3:a5:28:43:ca:
8b:2b:e0:2e:ec:aa:fd:85:89:6e:da:a3:90:c5:e1:2d:f9:bd:
28:a5:96:6e:3a:34:52:f6:e7:e1:1c:da:60:f7:46:6d:5c:53:
bf:bf:08:34:4d:e4:19:b9:7c:12:9e:dd:83:48:50:b8:82:8b:
d1:61:da:dc:59:9c:cf:2c:6e:c6:03:c4:f6:30:82:ea:a6:61:
e4:fb:5d:68:16:60:cb:16:2d:42:6c:b5:5e:6b:bc:7c:75:7a:
da:75:9d:45:f5:b5:94:d8:89:4c:5c:5d:6c:79:73:76:17:a7:
b0:55:8b:90:d8:2d:0d:08:fc:87:b7:5c:c6:b6:ba:93:8e:88:
1d:a4:1f:f6:56:e5:62:b1:47:b8:9c:57:ad:25:98:d4:63:19:
ab:14:fe:2c:b9:1f:f3:8e:8b:66:19:15:ba:64:6f:61:14:cb:
68:78:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:48 2025 by rpki-client on console.sobornost.net