Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa
File: b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa (raw, json)
Hash identifier: MfSnXkzSTLAKjNaZ0d0n5Ik7XHjd/PJiYV4RgV/Ftgk=
Subject key identifier: 52:B9:AA:70:F5:2C:AA:89:3E:B8:2D:FD:49:70:10:07:B5:9F:E0:79
Certificate issuer: /CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
Certificate serial: 010D0C9F4328584979743CE64E6FF237E19E5AC0
Authority key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa
Signing time: Thu 10 Apr 2025 01:00:46 +0000
ROA not before: Thu 10 Apr 2025 01:00:46 +0000
ROA not after: Wed 09 Jul 2025 01:00:46 +0000
asID: 396279
IP address blocks: 172.83.3.0/24 maxlen: 24
2620:12f:100f::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:79:74:3c:e6:4e:6f:f2:37:e1:9e:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
Validity
Not Before: Apr 10 01:00:46 2025 GMT
Not After : Jul 9 01:00:46 2025 GMT
Subject: CN=37c2af96-b26c-46d0-9a09-f1fe4a24099f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:20:0a:08:44:0f:c8:d1:0e:f2:3f:83:d6:
c5:c3:ca:85:6e:74:dd:05:97:b5:d4:6d:04:0a:7a:
02:7d:b9:65:4d:07:57:de:d4:2b:a0:0c:39:1a:44:
1d:bc:59:8a:c0:97:2d:2e:b1:95:98:ed:d4:81:81:
60:02:55:13:eb:84:58:5d:c4:e2:f3:7b:bd:88:fb:
8d:b9:42:35:c3:61:3b:af:31:e9:79:dc:13:19:11:
d8:4b:be:06:68:13:76:71:70:d6:1e:8d:5a:c8:66:
7d:1f:d1:8c:9c:86:3c:35:90:42:45:db:ce:e3:b4:
aa:e8:ef:a2:b1:ee:1f:52:09:bc:ee:ab:6b:e5:12:
6b:8a:2d:8e:76:db:8e:7b:16:c5:cd:79:58:b9:17:
4d:cc:b6:a4:e6:78:bc:1c:9a:38:f9:a2:c9:82:d7:
68:3b:b2:1a:b3:14:54:c3:a2:6a:45:f7:19:31:d6:
3b:66:eb:cf:09:ae:bd:6b:5d:6b:5b:6c:da:24:64:
82:e5:f8:9d:19:d1:41:df:ba:df:9f:49:1b:d4:97:
23:09:d5:ac:f7:45:35:5b:25:52:14:fe:d8:c3:51:
73:1b:4d:88:bd:a5:ac:d9:6a:85:67:f6:e5:6c:6d:
53:7a:1d:d4:b1:fc:0c:e9:c1:6b:0a:fd:3a:61:b1:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B9:AA:70:F5:2C:AA:89:3E:B8:2D:FD:49:70:10:07:B5:9F:E0:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl
X509v3 Authority Key Identifier:
keyid:A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
sbgp-ipAddrBlock: critical
IPv4:
172.83.3.0/24
IPv6:
2620:12f:100f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:6c:42:c1:b5:7e:30:f1:04:70:3c:e9:6a:49:d8:35:db:97:
38:e7:c8:32:f1:17:08:34:7b:31:e8:e2:da:b3:9a:99:d5:52:
9e:62:4e:42:e5:cd:29:b3:85:60:d0:08:f8:07:55:fd:b2:a5:
b3:1f:51:8f:d4:9f:3f:e5:cc:cf:3c:9b:3d:cf:bc:b9:fb:77:
d7:30:0e:4e:7d:9c:6f:cc:d2:22:0d:d1:bd:ef:ad:44:c1:d7:
81:71:f7:0a:e4:a9:47:2d:b5:85:b3:ae:6b:47:ab:f0:44:7f:
ad:5d:f0:2c:24:bd:a8:34:a2:7c:f1:e5:78:79:bd:24:e5:f0:
91:df:1c:36:b3:05:f9:59:66:bc:ef:8e:48:14:77:0a:0e:17:
c6:b7:46:78:d7:80:30:bb:28:3c:66:ab:ba:b8:3d:86:f3:bf:
34:60:be:32:22:58:33:d8:5e:4c:8b:e2:4a:a3:a2:95:10:7e:
ab:44:56:0e:f0:bf:71:18:7e:bf:78:b2:44:b8:6c:da:b8:17:
67:22:12:ab:76:00:4f:d2:ac:42:de:32:b6:5f:81:d1:40:07:
0b:68:70:df:f8:3d:50:11:b9:2c:be:ab:44:6d:1e:af:9d:7c:
2c:c5:b5:74:de:05:f1:a4:91:40:7c:61:ce:5b:8f:ac:bc:c2:
98:39:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:26 2025 by rpki-client on console.sobornost.net