Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/37acec46-0de0-3fe4-a751-d81d4059f6a7.roa
File: 37acec46-0de0-3fe4-a751-d81d4059f6a7.roa (raw, json)
Hash identifier: +gj7cz8+zO/vebjySi5oy8Bw5HAysauHJaKWT+Z9K6w=
Subject key identifier: 3B:56:4F:3F:B8:72:03:BB:29:D1:6B:41:8A:27:F5:15:BA:E7:55:4F
Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial: 010D0C9F432858496B7ED59E10F5089C8DE17200
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/37acec46-0de0-3fe4-a751-d81d4059f6a7.roa
Signing time: Sat 05 Apr 2025 01:00:47 +0000
ROA not before: Sat 05 Apr 2025 01:00:47 +0000
ROA not after: Fri 04 Jul 2025 01:00:47 +0000
asID: 14618
IP address blocks: 66.117.18.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6b:7e:d5:9e:10:f5:08:9c:8d:e1:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Validity
Not Before: Apr 5 01:00:47 2025 GMT
Not After : Jul 4 01:00:47 2025 GMT
Subject: CN=08cc0c12-54cb-4e1c-bd27-96159e2d15bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:c6:de:a1:40:7c:2c:f3:b4:2c:68:d1:0e:
4e:a9:2c:71:7b:33:6b:47:dc:32:46:19:6c:03:b4:
d2:e7:f7:bd:8a:35:ac:9a:75:fe:8d:be:e8:d2:f7:
0d:22:cb:85:0e:7e:7d:27:d4:90:ff:1e:75:98:d4:
65:92:c4:0b:c2:2b:96:94:60:e3:20:9d:3d:be:08:
1d:ad:83:b8:f4:d4:c9:e1:0c:ff:2a:1c:3c:95:5f:
f4:fd:c9:94:da:84:ed:cb:b3:2b:eb:ad:f6:23:d2:
c5:c5:02:fb:14:65:6f:44:6c:b4:6f:6b:ff:1e:26:
91:76:4d:ec:70:d5:4b:ec:24:41:80:32:20:43:bc:
c6:8a:9d:f5:ca:b2:2d:cf:8c:96:40:2b:6f:51:eb:
2b:e4:97:d5:58:36:9a:c7:13:18:8e:a8:5f:16:13:
f1:7a:c2:4d:e1:7d:bc:c6:a2:53:2f:80:b7:b6:a8:
d3:f3:e9:ad:f0:09:0d:6e:dc:83:49:be:2d:b5:2a:
a9:54:c2:e3:69:35:2a:27:55:1f:45:8c:6d:10:aa:
86:33:5a:8d:66:d0:43:e9:55:5c:7c:1d:1e:d1:01:
2b:16:1e:f0:74:f8:a3:41:63:d6:d8:de:ce:b6:f2:
73:dc:75:8a:e9:ba:4c:4b:96:1a:87:99:c0:e7:f3:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:56:4F:3F:B8:72:03:BB:29:D1:6B:41:8A:27:F5:15:BA:E7:55:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/37acec46-0de0-3fe4-a751-d81d4059f6a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
X509v3 Authority Key Identifier:
keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.117.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:f8:30:8a:e4:8e:36:5d:b5:a6:08:76:f8:f0:39:35:76:78:
7c:24:2a:a0:96:8c:4f:28:22:c2:95:2b:29:36:f1:43:0d:76:
30:68:5c:9a:c7:db:c8:d1:1b:01:93:12:00:4a:57:32:46:35:
1c:19:29:86:d1:19:74:d6:ca:e5:a6:85:c3:ae:57:be:38:80:
37:c5:12:52:cc:eb:fd:77:3e:9a:9d:24:25:e4:51:6e:e7:4e:
b3:36:27:74:32:31:0f:a7:73:ff:88:8f:45:a3:9c:d8:c2:82:
37:2d:73:86:7e:c8:92:c0:0a:b4:3a:ed:7b:b2:0a:96:06:9c:
54:45:e8:26:04:71:7c:10:1f:a1:7c:3b:34:b8:20:89:5c:af:
cd:6d:41:2b:bc:31:c7:e9:ec:69:27:10:a7:a6:a0:f5:2f:81:
4e:f5:f3:6e:a3:22:0c:04:f4:31:5e:c3:d7:b9:62:a4:11:2f:
00:43:95:9a:60:d5:4d:ec:b1:76:fc:ea:24:27:32:0c:6d:4d:
9f:55:6a:ef:fa:12:2d:0c:c5:35:e2:7f:fd:ce:52:6c:46:c0:
9a:ba:3d:32:a1:42:73:d7:bc:cd:33:23:c5:1c:18:b3:90:24:
e3:47:b7:c6:58:0d:47:10:86:ab:21:db:58:33:b0:61:01:e4:
02:e8:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:30 2025 by rpki-client on console.sobornost.net