Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa
File: da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa (raw, json)
Hash identifier: NDNrQ0gxj6rPc4nOQDXkTsuHEx3Im+f3s4GO6kGhD5U=
Subject key identifier: 90:FA:C3:14:1D:3A:BA:7A:FC:93:36:D1:50:2F:DD:15:A7:DA:5D:C3
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848F65BCE79B85B59D0141D2B80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 30133
IP address blocks: 192.228.85.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:ce:79:b8:5b:59:d0:14:1d:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=d25089c1-3cf8-4e00-a6d3-0011d8becefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:c1:b9:26:31:f2:61:09:65:23:03:f6:91:
a5:08:b6:73:cf:ca:da:ee:61:37:87:63:5d:4e:30:
fb:f7:d7:be:dc:86:0e:e8:6b:da:38:cb:41:bb:ff:
52:d3:1f:7d:70:4b:26:a9:ea:1f:10:a5:86:b6:17:
d1:48:ea:04:9b:9b:6c:8e:90:50:27:7a:f5:af:04:
6d:49:20:a7:51:ee:15:6b:05:ff:09:80:90:89:d9:
d1:aa:89:75:9a:ed:ce:91:64:55:a8:b2:0f:68:d6:
a4:49:6c:02:77:e3:d0:31:f2:5b:bc:20:53:6f:71:
f4:c5:32:a4:d6:27:a6:19:fc:65:81:8f:59:a1:0c:
88:93:bc:2a:89:42:92:8a:a0:b7:34:e5:95:d8:0f:
ac:41:cf:2c:07:a1:09:b5:20:c4:24:7d:78:8e:26:
8b:ed:73:77:7d:d2:35:be:97:92:55:3e:0d:dc:50:
93:0c:ac:97:d5:2a:87:09:c9:a6:a3:74:67:f0:73:
ee:64:52:33:ab:0d:d6:5a:03:7b:77:c8:1d:82:8a:
e0:1a:b3:82:12:c3:7c:c3:c0:4e:96:ed:69:ef:3d:
4e:64:5f:bf:e1:a0:39:7c:10:d0:81:b6:7f:07:a8:
48:30:e4:e9:78:9e:43:d9:8c:c8:9b:64:b0:8b:c7:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FA:C3:14:1D:3A:BA:7A:FC:93:36:D1:50:2F:DD:15:A7:DA:5D:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
192.228.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:39:66:67:6d:60:32:fa:1a:de:e1:f5:fd:0d:93:39:cb:ac:
cb:c0:9b:0e:e2:6b:12:23:38:2c:51:f0:2f:fa:7e:74:ff:c8:
d8:33:45:18:f4:9d:e5:86:b8:c9:93:7c:f8:1b:88:b1:9d:65:
90:7f:fd:9f:6f:0f:2f:c9:0d:27:98:f0:8a:dd:c6:06:25:78:
e2:92:89:31:2e:64:9a:36:c1:ca:92:5d:58:2a:61:45:8f:c4:
b3:d5:0f:4f:b0:02:45:87:56:c3:9e:d4:d8:85:e9:f4:c5:7f:
66:62:c1:0b:79:49:2d:6c:ee:f3:6a:93:73:09:cd:7c:d1:1f:
a4:ff:f7:ba:b6:1d:1e:cf:de:a0:46:45:0c:49:1a:59:7b:0b:
b1:e2:db:93:33:08:bf:e4:07:b7:14:a8:c3:7c:cf:bc:79:b5:
de:56:62:69:eb:96:eb:51:b7:ae:66:41:bb:6d:5c:e6:7a:b5:
35:ac:1d:65:2f:02:79:84:3a:c6:5a:0b:2d:66:62:e3:5d:76:
a8:b0:72:08:09:c8:58:1c:9c:da:3a:20:ad:0e:ef:6e:b0:03:
c4:fe:46:a4:76:24:68:11:3f:50:c9:f4:d0:79:9f:b7:48:92:
70:cf:44:7f:70:dd:18:66:5c:26:af:30:04:39:dd:f6:cd:38:
18:10:9b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:49 2025 by rpki-client on console.sobornost.net