Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/73e5f0c1-5f88-3fe9-a5a1-ff2545640afa.roa
File: 73e5f0c1-5f88-3fe9-a5a1-ff2545640afa.roa (raw, json)
Hash identifier: 0UegePga01cgkZXCpk2k3JIAeqTZE6TXzJYGU+gOCjQ=
Subject key identifier: B1:76:2A:DD:43:45:83:74:C3:4F:E8:AA:00:41:4C:D9:5E:21:02:BA
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584965E9748BF0DDD29E944A5E00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/73e5f0c1-5f88-3fe9-a5a1-ff2545640afa.roa
Signing time: Thu 03 Apr 2025 01:00:46 +0000
ROA not before: Thu 03 Apr 2025 01:00:46 +0000
ROA not after: Wed 02 Jul 2025 01:00:46 +0000
asID: 271
IP address blocks: 209.87.28.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:65:e9:74:8b:f0:dd:d2:9e:94:4a:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Apr 3 01:00:46 2025 GMT
Not After : Jul 2 01:00:46 2025 GMT
Subject: CN=9992c298-8628-4da1-b903-4b7caae94401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:b1:4a:27:9c:5f:e0:c2:07:6c:3f:a9:d3:
d0:28:7c:fd:42:b4:7f:1b:95:7d:a7:b7:51:10:3c:
3c:a5:a4:f5:72:85:27:2d:0f:7b:c8:55:2b:7a:60:
2b:66:dd:ca:24:c5:d7:41:88:cb:f0:47:f6:91:21:
72:44:de:ce:53:14:50:7e:0d:6c:e9:45:9d:2d:ca:
4e:78:c8:5c:78:27:03:48:3f:16:6f:2c:49:6a:58:
c9:36:c5:09:d9:bd:9e:99:23:47:8f:6d:8f:f9:5e:
5e:ff:02:db:96:5a:33:77:a8:6c:02:7a:e2:64:ff:
64:15:97:0d:2f:8b:dd:ab:8f:74:35:4a:01:97:22:
65:15:a1:78:8f:ac:71:4a:72:c5:4b:3e:70:eb:52:
50:43:5c:4c:3b:a2:df:d2:3b:90:eb:3b:93:49:91:
69:21:30:01:35:85:c5:f4:b7:1c:88:26:ce:fa:76:
8c:a9:44:60:3b:05:b1:81:62:5f:e4:72:e8:60:7c:
e6:70:a8:14:0a:d4:af:6a:60:c3:83:9d:04:1a:d4:
e8:11:83:4c:56:30:e3:ce:30:88:82:11:58:3a:68:
2b:03:d0:c2:01:89:b0:ff:bf:c9:5c:0f:19:bb:70:
d8:69:6a:33:9b:3c:0c:c7:1d:b1:09:70:40:b6:fd:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:76:2A:DD:43:45:83:74:C3:4F:E8:AA:00:41:4C:D9:5E:21:02:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/73e5f0c1-5f88-3fe9-a5a1-ff2545640afa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.87.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:9b:96:79:93:eb:84:ef:0a:f4:58:d4:a0:6d:64:fb:57:23:
c3:16:b9:de:e6:5f:21:70:e9:de:23:3b:42:ed:56:39:f8:3b:
f3:eb:8f:23:57:9d:e5:ae:76:77:a2:31:5f:b1:f7:a4:1f:b7:
04:55:1c:ab:bd:0c:ee:b2:d7:4c:d8:af:02:93:d4:05:18:49:
87:f5:f9:8f:d1:e7:ee:84:22:3f:0a:94:8e:4d:24:c4:34:fb:
4a:13:53:4f:45:34:0a:cb:ec:6a:71:37:63:27:47:97:f2:7e:
b6:80:a5:ef:b5:28:50:6d:1a:63:c9:0d:d9:d6:11:6e:38:3b:
f6:7a:86:9b:38:56:e2:13:c4:95:6f:59:c9:fb:f6:9c:04:dd:
09:2d:74:4f:3a:d4:76:72:73:ad:66:b6:d3:13:69:22:40:ef:
19:45:18:8b:d4:9e:00:c3:92:81:1f:ad:fe:2f:44:d5:d4:56:
34:29:da:cc:85:d3:69:8a:80:82:55:6a:4d:51:17:6d:09:d8:
62:f6:ea:dc:bd:f9:03:b4:f6:d6:b1:94:73:98:2d:b7:b9:82:
da:ce:e5:54:63:f1:8f:f9:7e:82:74:ea:ac:c3:3b:15:57:4b:
c8:3d:7c:00:20:53:93:0f:e3:db:38:4a:0b:a0:f8:03:27:9e:
0f:f2:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net