Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa
File: c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa (raw, json)
Hash identifier: SJSuRV25Pw07FjGJGjEwabN3FZ2BMW55t6a2OQMQ8Xo=
Subject key identifier: 8F:AF:D9:3A:84:1C:E9:F6:1E:4F:F3:3D:1E:74:D8:33:AC:81:CB:28
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858496FAF0B2B56ABA2500184E200
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 20454
IP address blocks: 131.153.225.0/24 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0b:2b:56:ab:a2:50:01:84:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=a854b812-7578-4717-9b14-33f8b56a42e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:a8:f9:22:4e:a1:ba:6b:df:14:dd:25:46:
3d:45:d2:91:ee:32:ee:8a:b8:dc:52:e6:66:46:54:
6e:c5:55:e2:a0:b0:4c:51:d4:8e:2a:f6:d8:10:38:
26:7c:7f:34:92:f3:f3:b4:71:34:fe:ae:aa:dc:aa:
00:60:3d:3d:35:d1:9e:1b:01:d9:44:3d:4b:b6:d4:
99:8d:9a:4e:3e:22:38:f1:c1:b5:a6:ad:69:ac:4d:
89:34:85:3d:7e:c9:ac:1d:db:45:6c:7f:a1:03:58:
7d:3d:53:5f:8c:a7:1c:a6:e7:2b:82:2b:cf:d4:a1:
e4:c3:40:62:f9:a8:eb:e1:56:b8:e9:4f:9d:28:c8:
5e:2c:60:11:92:65:fb:44:b4:81:b0:ad:c7:eb:76:
1a:0d:0c:d5:e4:a9:6c:82:c9:8f:94:ef:9f:54:ce:
65:87:72:51:68:b6:c2:2a:ca:a2:de:79:a9:07:2a:
20:70:f7:40:d9:d3:87:45:f3:5a:01:30:e1:81:c2:
a6:7d:a2:32:ba:a3:34:1a:35:b7:0e:50:fb:37:46:
a4:f4:58:45:8a:d6:c1:1d:12:47:10:1f:f2:59:4b:
e2:5e:ea:46:d8:e7:ae:d0:fb:a1:d8:f8:49:d2:21:
1e:c2:0c:a6:05:24:ec:5d:e4:bf:8c:50:b6:f5:c5:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:D9:3A:84:1C:E9:F6:1E:4F:F3:3D:1E:74:D8:33:AC:81:CB:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:dc:3e:3e:78:6a:1c:7a:63:39:90:6e:01:d4:b7:7e:23:55:
eb:a4:82:56:26:8a:76:58:f0:b5:af:73:0e:3c:db:85:5b:e5:
6b:41:9e:68:fe:e0:05:3d:86:f0:f1:a3:68:5e:6b:a9:26:ef:
f4:3f:87:dc:e8:ea:4e:a5:bc:d1:ef:06:14:5c:6c:75:5a:aa:
eb:c0:ca:b6:a3:6b:71:47:50:4e:31:c9:af:01:c5:cb:2b:57:
40:01:7f:9d:c3:e8:56:cb:4d:b0:35:a2:92:76:27:4f:a4:e9:
43:6e:ff:27:34:ac:20:1a:2a:94:d8:90:75:52:d7:5b:73:2e:
66:eb:2d:c8:3e:05:af:36:42:88:37:ca:33:fc:4a:5e:a8:1f:
93:1d:e0:e9:9e:0b:de:99:d4:ae:a6:f2:ed:3d:15:39:92:04:
78:4d:99:45:96:40:d3:5d:e0:bd:6d:18:ea:76:22:a6:16:d7:
0a:ab:35:b0:23:bd:c1:2f:db:86:91:7b:0a:1e:a1:6e:d2:3d:
2e:a4:52:13:b5:85:f1:c2:be:c7:c2:ef:1e:4b:1d:0b:4d:57:
ba:4f:17:51:a6:87:92:8f:29:ca:d3:cb:ce:10:c6:96:86:95:
a8:71:7e:19:e5:cc:df:db:c9:0e:c3:5a:cd:53:db:ae:76:71:
27:e3:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:26 2025 by rpki-client on console.sobornost.net